Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB475/6E7424AA207011EEA9901416C4F9AE02/25S9CMLe_TnHT8QDk1dzpJDRm5g.mft
File:                     25S9CMLe_TnHT8QDk1dzpJDRm5g.mft (raw, json)
Hash identifier:          SjDliKGPV8Pkr8QDsiA/seYWS1Yeut/59d6Nhm83IYQ=
Subject key identifier:   A8:FE:2C:6E:CA:8B:0D:D7:A6:EE:F4:4B:37:E8:90:56:A3:34:E6:64
Authority key identifier: DB:94:BD:08:C2:DE:FD:39:C7:4F:C4:03:93:57:73:A4:90:D1:9B:98
Certificate issuer:       /CN=A91CB475/serialNumber=DB94BD08C2DEFD39C74FC403935773A490D19B98
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25S9CMLe_TnHT8QDk1dzpJDRm5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB475/6E7424AA207011EEA9901416C4F9AE02/25S9CMLe_TnHT8QDk1dzpJDRm5g.mft
Manifest number:          8D
Signing time:             Thu 21 Mar 2024 07:18:50 +0000
Manifest this update:     Thu 21 Mar 2024 07:18:49 +0000
Manifest next update:     Thu 28 Mar 2024 07:18:49 +0000
Files and hashes:         1: 25S9CMLe_TnHT8QDk1dzpJDRm5g.crl (hash: OKj0wm8R8sg0BNraJLxtJIj3job4xFGGKcrUOAPbp+Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB475/serialNumber=DB94BD08C2DEFD39C74FC403935773A490D19B98
        Validity
            Not Before: Mar 21 07:18:49 2024 GMT
            Not After : Mar 28 07:18:49 2024 GMT
        Subject: CN=65fbdf59-0ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0a:14:27:a7:e1:80:79:46:4e:08:fc:d4:b3:
                    94:41:db:5c:0a:6f:0d:e2:0b:03:c5:13:5e:38:07:
                    d2:2c:4e:18:83:ea:8c:07:7f:6a:89:cf:54:f4:51:
                    de:ce:73:df:61:96:47:90:a4:90:a3:43:4f:14:a9:
                    f5:16:85:23:bc:6c:c8:e3:f8:37:7b:fe:9d:05:c0:
                    8d:1b:79:e1:4d:69:9f:8f:9b:ec:14:71:9f:c9:ef:
                    c2:2f:d0:24:c5:1c:04:d0:ec:87:e9:3e:52:19:cd:
                    24:bb:50:56:0c:c7:2c:f9:f8:be:ab:bf:a0:55:45:
                    06:48:e7:a1:e2:8b:d4:04:41:5b:6a:af:6a:de:fd:
                    ef:0e:5d:ec:79:1a:39:52:cd:1d:ce:d0:d3:60:c8:
                    d4:83:12:35:70:f1:4d:47:17:2a:da:d6:82:e2:aa:
                    51:5d:f5:2a:8b:d9:c7:6d:8e:55:94:e9:bf:64:f4:
                    94:42:6c:0d:92:a6:50:e7:da:f0:80:fe:dc:47:79:
                    e0:a5:28:5f:04:a2:40:5b:1d:9f:98:2d:47:1c:c5:
                    a4:b3:64:d7:40:5e:8c:1c:a8:c4:6c:42:b1:4e:df:
                    46:40:d2:23:24:e1:0e:2d:c1:49:48:25:65:1b:d9:
                    ab:fd:1e:d8:08:0e:62:76:5d:c9:77:79:98:02:9e:
                    6d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FE:2C:6E:CA:8B:0D:D7:A6:EE:F4:4B:37:E8:90:56:A3:34:E6:64
            X509v3 Authority Key Identifier:
                keyid:DB:94:BD:08:C2:DE:FD:39:C7:4F:C4:03:93:57:73:A4:90:D1:9B:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB475/6E7424AA207011EEA9901416C4F9AE02/25S9CMLe_TnHT8QDk1dzpJDRm5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25S9CMLe_TnHT8QDk1dzpJDRm5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB475/6E7424AA207011EEA9901416C4F9AE02/25S9CMLe_TnHT8QDk1dzpJDRm5g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:76:04:02:f5:96:06:f2:0a:a9:09:8a:50:a4:ff:3c:58:2d:
         cf:71:11:4c:e8:45:d5:08:11:97:50:19:b0:fe:5d:c0:31:79:
         29:3c:32:c5:8d:0d:c8:d5:4e:77:80:d2:aa:4a:24:38:3b:29:
         ca:b8:2d:67:92:97:19:7c:7f:f9:b9:4c:89:6a:43:6a:58:9c:
         e0:45:4b:43:6e:a9:9a:5e:b7:2f:35:5d:7b:ad:5b:f1:30:b6:
         29:b3:72:42:4a:ca:01:a3:21:b5:7f:0e:77:62:a1:07:40:b0:
         8b:43:75:71:7a:d5:38:c4:9a:a2:f8:36:79:6e:bc:e4:ec:4d:
         c9:80:dd:df:4d:94:e3:3c:75:55:a5:af:47:48:44:35:3c:3c:
         54:aa:cc:52:07:35:1d:65:14:8d:b8:a1:09:97:31:38:52:50:
         a5:5e:49:3d:4c:01:a9:52:38:c5:9a:fe:ca:8b:1e:cc:35:82:
         67:68:0b:76:ad:0f:65:dc:be:ef:52:46:68:de:3d:98:f6:1a:
         22:38:7a:df:e3:74:8a:f7:9f:a6:08:00:ee:ce:22:03:23:e3:
         0b:4f:d2:03:7c:53:08:e9:e7:1f:06:9f:1f:78:ea:0d:da:3f:
         a0:34:db:a8:9a:d1:2c:0c:eb:36:88:58:05:94:67:e8:cc:d8:
         3a:20:66:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----