Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4082/F84D2708DD6011EBB257B76DC4F9AE02/grWB4boWg6tZH-vLXSRLke6dbxU.mft
File:                     grWB4boWg6tZH-vLXSRLke6dbxU.mft (raw, json)
Hash identifier:          f2bP0S0l5vCU73EbsecKCQmB/izX27MPMlNs/rJLDjQ=
Subject key identifier:   E3:C5:2A:1C:BC:D9:A8:65:2A:31:F8:34:6E:73:B0:6A:16:D6:66:7C
Authority key identifier: 82:B5:81:E1:BA:16:83:AB:59:1F:EB:CB:5D:24:4B:91:EE:9D:6F:15
Certificate issuer:       /CN=A91C4082/serialNumber=82B581E1BA1683AB591FEBCB5D244B91EE9D6F15
Certificate serial:       046C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grWB4boWg6tZH-vLXSRLke6dbxU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4082/F84D2708DD6011EBB257B76DC4F9AE02/grWB4boWg6tZH-vLXSRLke6dbxU.mft
Manifest number:          046A
Signing time:             Tue 12 Dec 2023 09:45:29 +0000
Manifest this update:     Tue 12 Dec 2023 09:45:28 +0000
Manifest next update:     Tue 19 Dec 2023 09:45:28 +0000
Files and hashes:         1: grWB4boWg6tZH-vLXSRLke6dbxU.crl (hash: fRsQRcXk6agOB5H8xLt2LvtJ4j5HwGNwXwycMbk8i8k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1132 (0x46c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4082/serialNumber=82B581E1BA1683AB591FEBCB5D244B91EE9D6F15
        Validity
            Not Before: Dec 12 09:45:28 2023 GMT
            Not After : Dec 19 09:45:28 2023 GMT
        Subject: CN=65782bb9-f1c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c5:52:44:57:b7:25:0f:4f:bd:67:ba:6f:29:
                    31:56:4d:ea:f5:4e:d7:b8:ea:43:32:02:d1:0c:17:
                    e8:46:0a:55:81:74:08:95:24:af:06:82:05:55:ae:
                    ae:5e:d4:bc:a7:d8:14:ce:2d:51:de:38:c3:60:16:
                    d3:67:b4:5d:b5:a5:85:c2:be:47:70:1e:9b:a1:ab:
                    e1:a5:2e:7c:73:44:1f:47:45:25:bc:c1:1d:5c:50:
                    9d:f4:75:80:63:29:f6:60:f0:c0:1c:2c:94:7a:f3:
                    10:1c:ee:ac:5c:10:7b:2c:30:d3:b4:19:51:20:ed:
                    f1:38:04:34:4b:9d:1d:56:f9:e4:05:91:a0:75:e9:
                    ea:eb:1c:3b:e8:20:55:d3:8f:f9:f2:54:1a:b0:99:
                    48:38:2c:1d:1f:e0:d2:bf:97:7f:c0:7e:00:12:b1:
                    e2:9a:8a:74:17:3f:c1:86:74:85:21:fe:3f:f2:0e:
                    ce:83:27:b6:a1:9f:76:e8:46:10:ce:bc:8c:3e:49:
                    e6:10:51:60:27:a8:a3:e9:50:e2:58:a6:a5:40:3c:
                    5f:1f:aa:46:44:37:43:8e:31:73:d9:7f:59:99:0d:
                    a0:fc:13:0f:4f:1a:37:da:ca:78:8a:56:df:5a:fd:
                    19:db:27:db:3e:3b:d6:47:3c:b3:a6:a9:08:d6:28:
                    39:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C5:2A:1C:BC:D9:A8:65:2A:31:F8:34:6E:73:B0:6A:16:D6:66:7C
            X509v3 Authority Key Identifier:
                keyid:82:B5:81:E1:BA:16:83:AB:59:1F:EB:CB:5D:24:4B:91:EE:9D:6F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4082/F84D2708DD6011EBB257B76DC4F9AE02/grWB4boWg6tZH-vLXSRLke6dbxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grWB4boWg6tZH-vLXSRLke6dbxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4082/F84D2708DD6011EBB257B76DC4F9AE02/grWB4boWg6tZH-vLXSRLke6dbxU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:4c:c1:4d:8f:eb:03:68:8b:84:4d:48:b9:c2:61:50:d2:24:
         eb:32:64:bd:e5:9f:66:bb:7e:ce:a3:3f:59:cb:a8:45:8e:30:
         62:c9:bb:aa:40:b1:dc:b8:5f:6b:40:c0:d8:a6:16:0c:4b:5c:
         8f:18:c5:0c:a7:7a:82:4a:4d:27:ca:c3:44:21:4e:90:b9:15:
         4f:d3:ad:f0:5b:df:fa:95:a0:be:64:ca:54:5e:50:23:4e:71:
         76:4b:ea:6c:d2:32:dc:ca:fa:a1:00:e8:07:0e:c4:46:45:d2:
         bf:fd:4b:fa:8b:59:63:0e:22:f7:da:39:33:b8:b3:1e:47:8e:
         23:e4:47:a2:82:50:b8:7d:90:c3:32:b6:ff:5f:45:72:89:17:
         e5:ae:be:2f:50:29:0f:ba:9c:03:c2:33:64:74:20:bb:bc:c5:
         9e:99:30:57:32:fb:0b:8c:af:fa:7c:cc:cc:bc:85:24:e3:2d:
         56:ce:7d:0d:0f:41:85:2f:77:0c:7c:9a:d2:18:47:15:e6:9d:
         1a:78:fb:5c:46:f2:5d:b9:06:d4:9f:e7:65:08:3a:69:34:65:
         49:b5:bf:32:8d:09:43:9f:0b:1d:fb:05:aa:61:59:bb:89:18:
         c9:de:3f:19:08:76:21:97:e9:dd:d1:e9:f3:4c:33:29:5c:90:
         4e:ca:d6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----