Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5A5C/BAB815D40E1911E889424E45C4F9AE02/70rQjyVg25AvCF1hRHO6BICLhKQ.mft
File:                     70rQjyVg25AvCF1hRHO6BICLhKQ.mft (raw, json)
Hash identifier:          uU0Tj/eea4Z8FGiWgBpF7RqNnkhmqT+bPlOx4BdoZNQ=
Subject key identifier:   EB:A0:FA:9F:15:BB:8A:CA:CE:BA:51:FC:D2:76:42:EB:9E:7D:C4:04
Authority key identifier: EF:4A:D0:8F:25:60:DB:90:2F:08:5D:61:44:73:BA:04:80:8B:84:A4
Certificate issuer:       /CN=A91C5A5C/serialNumber=EF4AD08F2560DB902F085D614473BA04808B84A4
Certificate serial:       156A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70rQjyVg25AvCF1hRHO6BICLhKQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5A5C/BAB815D40E1911E889424E45C4F9AE02/70rQjyVg25AvCF1hRHO6BICLhKQ.mft
Manifest number:          1563
Signing time:             Thu 14 Mar 2024 17:13:32 +0000
Manifest this update:     Thu 14 Mar 2024 17:13:31 +0000
Manifest next update:     Thu 21 Mar 2024 17:13:31 +0000
Files and hashes:         1: 70rQjyVg25AvCF1hRHO6BICLhKQ.crl (hash: AvCXe2IPX9CD6YKa/XTWpZbLMU3kyZf5sT7wOrPcdcQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5482 (0x156a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5A5C/serialNumber=EF4AD08F2560DB902F085D614473BA04808B84A4
        Validity
            Not Before: Mar 14 17:13:31 2024 GMT
            Not After : Mar 21 17:13:31 2024 GMT
        Subject: CN=65f3303c-3d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ca:ac:e4:d1:ae:64:20:b5:e6:3d:ab:0e:c1:
                    32:7f:27:0b:dc:49:b4:01:62:4a:be:04:5d:86:30:
                    76:c4:63:09:3d:16:7c:fc:c4:27:f3:66:3c:44:fc:
                    db:0c:36:44:6e:3a:e5:79:9e:2e:29:0e:43:96:73:
                    eb:34:58:53:d6:86:56:bd:97:d4:1f:d9:f6:ec:9d:
                    7c:90:ec:eb:8d:68:eb:57:10:ce:1c:4f:00:08:ac:
                    04:e0:49:c3:99:dc:0a:3b:21:0f:73:7b:79:5a:2d:
                    b4:e2:65:4d:f4:f9:62:96:ec:7c:d7:42:79:70:3c:
                    c7:bc:81:49:5c:e6:e7:fd:0f:76:99:17:1b:aa:6f:
                    9e:93:b8:69:51:96:51:c0:e1:bd:9f:51:83:62:d0:
                    ce:b6:ff:a9:61:65:7e:72:19:38:e9:2c:09:b2:02:
                    c9:0f:0f:b4:78:45:37:51:c0:a2:91:dc:6e:81:25:
                    41:6c:ec:21:55:8b:93:50:7e:9d:48:13:13:d5:97:
                    ff:69:59:a1:e6:0f:85:2d:33:de:a8:cd:0d:1f:6b:
                    d6:ac:d1:f7:aa:2d:2a:a8:2a:aa:ab:b1:22:66:20:
                    50:f5:5d:a0:8d:e9:85:bd:d3:76:b4:c5:0b:15:2f:
                    d8:37:eb:5e:e1:17:d6:27:19:32:64:40:79:c7:b7:
                    82:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A0:FA:9F:15:BB:8A:CA:CE:BA:51:FC:D2:76:42:EB:9E:7D:C4:04
            X509v3 Authority Key Identifier:
                keyid:EF:4A:D0:8F:25:60:DB:90:2F:08:5D:61:44:73:BA:04:80:8B:84:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5A5C/BAB815D40E1911E889424E45C4F9AE02/70rQjyVg25AvCF1hRHO6BICLhKQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70rQjyVg25AvCF1hRHO6BICLhKQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A5C/BAB815D40E1911E889424E45C4F9AE02/70rQjyVg25AvCF1hRHO6BICLhKQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:99:07:d0:df:66:25:dd:c4:6b:c4:c6:72:63:8b:1f:89:21:
         80:54:de:bd:e6:55:85:9f:69:5f:6e:34:41:a1:38:38:06:b7:
         47:7b:bd:01:63:08:9f:37:bd:f3:30:4d:0d:96:9e:80:26:d0:
         6d:b6:39:ec:d8:26:53:39:8a:44:24:77:73:71:fc:0a:13:7e:
         99:13:0e:f7:cd:d3:ca:44:6a:7a:43:58:34:b9:52:79:f5:fc:
         51:eb:59:da:de:a7:32:ea:8d:af:c0:6b:dd:7f:20:5d:b0:ed:
         4c:61:b6:ab:96:53:7d:04:15:fb:3d:c1:51:cc:d4:d7:43:30:
         8b:df:94:10:da:74:21:24:06:d7:ea:31:a2:56:1d:63:45:75:
         6c:40:55:22:d1:8a:d1:62:46:1c:bd:09:ba:99:51:d6:cc:0b:
         f5:7b:ee:95:2b:55:f3:0d:88:32:54:b5:dd:b8:dd:21:19:e7:
         3f:23:d9:b3:82:f5:d1:08:00:d7:96:ee:17:05:8c:96:3f:2e:
         65:d8:c9:83:98:2c:da:58:af:40:29:5f:f7:c7:86:9a:0d:ed:
         49:98:15:37:3a:f5:e1:0f:09:88:c0:ca:bf:2f:52:f7:18:0e:
         55:7b:f3:8a:36:08:be:44:79:f8:36:3d:aa:0b:0b:23:bb:f7:
         cd:dc:63:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzVBNUMxMTAvBgNVBAUTKEVGNEFEMDhGMjU2MERCOTAyRjA4NUQ2MTQ0NzNCQTA0
ODA4Qjg0QTQwHhcNMjQwMzE0MTcxMzMxWhcNMjQwMzIxMTcxMzMxWjAYMRYwFAYD
VQQDEw02NWYzMzAzYy0zZDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5cqs5NGuZCC15j2rDsEyfycL3Em0AWJKvgRdhjB2xGMJPRZ8/MQn82Y8RPzb
DDZEbjrleZ4uKQ5DlnPrNFhT1oZWvZfUH9n27J18kOzrjWjrVxDOHE8ACKwE4EnD
mdwKOyEPc3t5Wi204mVN9Plilux810J5cDzHvIFJXObn/Q92mRcbqm+ek7hpUZZR
wOG9n1GDYtDOtv+pYWV+chk46SwJsgLJDw+0eEU3UcCikdxugSVBbOwhVYuTUH6d
SBMT1Zf/aVmh5g+FLTPeqM0NH2vWrNH3qi0qqCqqq7EiZiBQ9V2gjemFvdN2tMUL
FS/YN+te4RfWJxkyZEB5x7eCxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOug+p8V
u4rKzrpR/NJ2QuuefcQEMB8GA1UdIwQYMBaAFO9K0I8lYNuQLwhdYURzugSAi4Sk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUE1Qy9CQUI4MTVENDBF
MTkxMUU4ODk0MjRFNDVDNEY5QUUwMi83MHJRanlWZzI1QXZDRjFoUkhPNkJJQ0xo
S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcwclFqeVZnMjVBdkNGMWhSSE82QklDTGhLUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NUE1Qy9CQUI4MTVENDBFMTkxMUU4ODk0MjRFNDVDNEY5QUUwMi83MHJRanlWZzI1
QXZDRjFoUkhPNkJJQ0xoS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAomQfQ32Yl3cRrxMZyY4sfiSGAVN695lWFn2lfbjRBoTg4BrdHe70B
YwifN73zME0Nlp6AJtBttjns2CZTOYpEJHdzcfwKE36ZEw73zdPKRGp6Q1g0uVJ5
9fxR61na3qcy6o2vwGvdfyBdsO1MYbarllN9BBX7PcFRzNTXQzCL35QQ2nQhJAbX
6jGiVh1jRXVsQFUi0YrRYkYcvQm6mVHWzAv1e+6VK1XzDYgyVLXduN0hGec/I9mz
gvXRCADXlu4XBYyWPy5l2MmDmCzaWK9AKV/3x4aaDe1JmBU3OvXhDwmIwMq/L1L3
GA5Ve/OKNgi+RHn4Nj2qCwsju/fN3GOz
-----END CERTIFICATE-----