Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C87C6/CCF6E2BAF24211EA98A4A75CC4F9AE02/QbbA1VtdPT3iBkF5BdV_1qVr65U.mft
File:                     QbbA1VtdPT3iBkF5BdV_1qVr65U.mft (raw, json)
Hash identifier:          JohsEIN3PQwXTEoSKos2DTbhbokRwjOgcnf8buEWNrQ=
Subject key identifier:   57:AB:8D:EC:AC:64:F7:37:7E:75:2D:14:CD:4C:82:69:83:EE:95:FB
Authority key identifier: 41:B6:C0:D5:5B:5D:3D:3D:E2:06:41:79:05:D5:7F:D6:A5:6B:EB:95
Certificate issuer:       /CN=A91C87C6/serialNumber=41B6C0D55B5D3D3DE206417905D57FD6A56BEB95
Certificate serial:       06FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbbA1VtdPT3iBkF5BdV_1qVr65U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C87C6/CCF6E2BAF24211EA98A4A75CC4F9AE02/QbbA1VtdPT3iBkF5BdV_1qVr65U.mft
Manifest number:          06F7
Signing time:             Tue 02 Apr 2024 22:48:08 +0000
Manifest this update:     Tue 02 Apr 2024 22:48:07 +0000
Manifest next update:     Tue 09 Apr 2024 22:48:07 +0000
Files and hashes:         1: QbbA1VtdPT3iBkF5BdV_1qVr65U.crl (hash: eg4WBe8IseB79Ztuls89akTHqTqVGaEic3xOUFYGBA4=)
                          2: AAE88920F24311EAA9BBC15FC4F9AE02.roa (hash: +R5gXIOq2hmsBUMIRhxLZGO8a95SExMSUK/V9BLxq0M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1787 (0x6fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C87C6/serialNumber=41B6C0D55B5D3D3DE206417905D57FD6A56BEB95
        Validity
            Not Before: Apr  2 22:48:07 2024 GMT
            Not After : Apr  9 22:48:07 2024 GMT
        Subject: CN=660c8b28-afdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f3:f3:ec:e9:91:0d:1f:25:48:2b:34:21:ee:
                    8c:b1:12:c3:43:06:b0:25:ca:9e:6a:84:61:5c:cd:
                    b1:02:65:7d:9a:25:79:7f:18:10:1b:ef:91:15:58:
                    24:c1:95:10:e9:fc:c0:f3:2d:85:83:ca:6c:a8:22:
                    5f:77:2d:78:c3:fa:f5:5a:ef:ba:a5:75:0c:9c:b7:
                    d8:bc:f3:40:f4:f7:c8:34:f3:8b:5f:36:26:ac:5d:
                    ce:7c:ae:84:ec:8f:3d:0b:6e:ef:0a:1b:03:e0:ea:
                    7a:4f:fd:ad:f8:d7:83:d6:35:b3:0d:98:74:21:24:
                    93:29:e9:b2:64:6f:f7:7e:3e:b7:ea:c0:f9:f1:b5:
                    7f:44:b0:46:f0:9f:21:df:80:5b:67:7a:ab:ad:3f:
                    41:9e:e5:31:b1:e6:da:02:e3:e4:c5:77:05:bf:6c:
                    75:a5:ae:42:04:e4:0b:9b:f7:b0:96:62:2f:e3:bc:
                    a4:40:94:e6:f1:c2:c1:7a:8f:46:86:7d:ce:d0:ef:
                    d7:06:04:49:e3:e0:90:70:7b:68:3a:3b:6e:27:2e:
                    56:4b:fa:d5:8d:7b:f2:1c:25:d7:9a:7b:6a:46:7a:
                    56:bd:04:e5:8f:49:0e:07:4f:50:3e:2d:f0:d8:5e:
                    d7:1d:2f:65:2e:f9:50:19:5d:3f:a6:83:9f:b7:1a:
                    59:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AB:8D:EC:AC:64:F7:37:7E:75:2D:14:CD:4C:82:69:83:EE:95:FB
            X509v3 Authority Key Identifier:
                keyid:41:B6:C0:D5:5B:5D:3D:3D:E2:06:41:79:05:D5:7F:D6:A5:6B:EB:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C87C6/CCF6E2BAF24211EA98A4A75CC4F9AE02/QbbA1VtdPT3iBkF5BdV_1qVr65U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbbA1VtdPT3iBkF5BdV_1qVr65U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C87C6/CCF6E2BAF24211EA98A4A75CC4F9AE02/QbbA1VtdPT3iBkF5BdV_1qVr65U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:2b:59:2c:29:40:af:9a:55:79:ad:98:9e:81:86:e2:41:f5:
         1d:e4:65:3e:8b:e2:a8:59:f2:fe:18:fc:27:21:2e:b5:37:c5:
         f5:b1:b3:89:31:83:e6:52:2b:27:13:b4:61:48:6a:69:bc:fb:
         fe:6a:15:0a:fb:bd:a7:44:6b:89:64:fe:41:a1:b3:88:d7:04:
         cf:d8:f3:d5:26:34:ca:66:2f:6c:0a:c1:0f:80:68:8d:2c:5f:
         4b:9c:59:79:ae:6d:eb:a7:a8:01:75:e2:6c:9e:67:e6:4d:31:
         7f:84:f4:0b:8b:6d:35:33:dd:5d:90:6e:4e:c0:c2:11:63:b1:
         57:4b:cf:c6:34:6e:1d:12:74:4f:28:cd:5d:4e:60:8b:03:e0:
         15:36:25:e4:b9:39:0e:14:51:f7:fb:4b:70:48:fb:3f:a0:19:
         03:60:e1:7a:5f:5c:10:af:1c:b7:7f:2d:a5:15:86:ab:41:7e:
         a7:e2:88:41:af:74:39:fb:7a:00:6a:d3:90:fd:bb:84:d2:88:
         bd:28:43:3f:dc:1c:68:e3:a5:ff:f7:8f:d0:61:81:2e:92:64:
         17:96:fe:d2:05:7b:e3:c4:27:4b:f0:4f:12:b1:c6:49:07:d9:
         6e:f9:5a:80:cb:d2:33:0b:fc:b8:a6:10:6d:79:ba:41:dc:fb:
         0c:6b:e9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----