Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft
File:                     kS3Nd84XYnPZShzEJZKtBclnamI.mft (raw, json)
Hash identifier:          7l8dI+JpMzTz8cAfoRxA6TKB49YIQJxSK45Z6G3a6cU=
Subject key identifier:   8A:97:0F:4F:51:A5:3E:56:43:8A:A3:09:E3:96:73:58:58:1B:A5:42
Authority key identifier: 91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62
Certificate issuer:       /CN=A91CA6E6/serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft
Manifest number:          92
Signing time:             Mon 19 Feb 2024 10:40:32 +0000
Manifest this update:     Mon 19 Feb 2024 10:40:31 +0000
Manifest next update:     Mon 26 Feb 2024 10:40:31 +0000
Files and hashes:         1: kS3Nd84XYnPZShzEJZKtBclnamI.crl (hash: 0xVnPWM/DvdsIECvretc30CqUR8uryVE5HBH+T1QQpc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA6E6/serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62
        Validity
            Not Before: Feb 19 10:40:31 2024 GMT
            Not After : Feb 26 10:40:31 2024 GMT
        Subject: CN=65d33020-f4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:ef:33:90:83:c9:13:a8:f4:d1:53:2c:48:
                    e0:1f:93:ca:ce:2a:ba:b8:55:f7:c4:61:16:a4:ba:
                    80:fa:5a:4e:ee:00:1e:ae:9c:ad:6d:f9:e6:45:88:
                    f5:37:01:7d:53:f1:1c:a4:b8:14:7e:ea:a4:21:55:
                    2b:52:bb:a7:07:45:2b:1b:1b:95:76:ab:c7:08:8e:
                    c3:c3:a2:64:3e:6c:7a:29:99:9b:9a:d5:ed:b4:9c:
                    f4:28:6a:d4:26:d7:20:ec:18:76:87:74:e0:19:b9:
                    70:cb:a1:a4:65:ab:e5:e8:49:60:37:bf:22:23:a4:
                    60:83:a9:de:55:c7:c0:05:6c:61:ba:4e:8e:4e:7e:
                    a8:29:b1:91:a5:28:71:cb:a1:b9:75:8d:d8:9a:ec:
                    4a:c2:d0:4c:1e:50:38:85:c5:86:00:28:52:0a:b2:
                    39:cd:f5:fa:c4:df:91:1c:37:19:fa:1b:4a:f9:e3:
                    51:82:b8:44:63:35:11:16:c8:72:23:fe:97:fc:65:
                    bf:39:8c:69:8c:99:a6:38:6f:ac:1b:d2:d3:7a:a0:
                    2d:3b:59:10:57:bb:b0:ff:96:60:16:b0:c7:ca:5e:
                    f0:ba:83:38:c4:0a:4d:41:58:53:87:fe:cc:f1:c6:
                    9f:7b:73:fb:68:d6:cc:d2:0a:cf:1e:31:ce:bd:a6:
                    98:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:97:0F:4F:51:A5:3E:56:43:8A:A3:09:E3:96:73:58:58:1B:A5:42
            X509v3 Authority Key Identifier:
                keyid:91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ab:c9:bc:3f:ef:84:14:c3:43:39:b3:38:b1:28:6b:23:0f:
         7b:1e:c7:fe:69:b0:4e:72:ca:ce:d3:41:93:9a:2f:f3:f2:92:
         8d:0d:72:7e:36:2c:1f:0f:db:7e:1d:78:21:c1:81:e1:cb:5b:
         f8:39:f1:b5:9b:19:51:53:72:14:54:fb:b7:93:d5:c9:f2:72:
         12:90:e9:be:6b:d3:f6:7d:4e:db:51:5c:55:19:9b:e6:10:4e:
         2e:1a:2c:c5:fe:65:bb:ce:c2:65:45:5e:3b:4c:34:ac:2f:43:
         29:c3:ba:e9:3b:07:d6:21:cf:6d:6e:a0:c1:d8:9b:70:08:d5:
         6b:be:3f:0f:bc:35:6a:fa:ee:b1:8a:9d:08:ec:4e:34:e8:4e:
         c0:0b:44:50:06:54:db:af:bc:62:8e:5e:2f:84:2b:35:96:18:
         60:27:7e:99:e9:60:72:b3:37:3e:ca:90:48:41:64:ea:9a:d7:
         29:6e:a9:af:89:04:62:71:51:61:05:f3:a5:73:be:84:b2:69:
         c7:b5:89:fb:8f:87:a5:79:40:aa:9f:b5:98:69:62:0d:a4:aa:
         42:a9:d3:1c:65:67:cf:0d:40:3c:12:d4:cc:2e:50:b5:77:27:
         1e:41:52:a7:1c:43:70:2b:dc:03:6b:f5:bf:d4:c4:41:ee:e8:
         d1:c1:bc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----