Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD245/8E37F602E02511E9ABB1894CC4F9AE02/fc4ZSCEG8vtOY4NMXC9PjA-H8us.mft
File:                     fc4ZSCEG8vtOY4NMXC9PjA-H8us.mft (raw, json)
Hash identifier:          0v2uZdvkbOYNYxrDo+FOdQ+skK+cChwYnJA21UUBnIg=
Subject key identifier:   01:94:84:B0:78:C3:CA:27:3C:00:A0:66:E6:19:E5:F4:6F:A9:ED:B9
Authority key identifier: 7D:CE:19:48:21:06:F2:FB:4E:63:83:4C:5C:2F:4F:8C:0F:87:F2:EB
Certificate issuer:       /CN=A91CD245/serialNumber=7DCE19482106F2FB4E63834C5C2F4F8C0F87F2EB
Certificate serial:       0BBA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fc4ZSCEG8vtOY4NMXC9PjA-H8us.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD245/8E37F602E02511E9ABB1894CC4F9AE02/fc4ZSCEG8vtOY4NMXC9PjA-H8us.mft
Manifest number:          0BB3
Signing time:             Fri 18 Aug 2023 18:56:22 +0000
Manifest this update:     Fri 18 Aug 2023 18:56:22 +0000
Manifest next update:     Fri 25 Aug 2023 18:56:22 +0000
Files and hashes:         1: fc4ZSCEG8vtOY4NMXC9PjA-H8us.crl (hash: QWlFY8OSLmKzN4kHsMxEhO5tBxOkNCdUj4f8Xg92+6U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3002 (0xbba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD245/serialNumber=7DCE19482106F2FB4E63834C5C2F4F8C0F87F2EB
        Validity
            Not Before: Aug 18 18:56:22 2023 GMT
            Not After : Aug 25 18:56:22 2023 GMT
        Subject: CN=64dfbed6-67c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:66:08:dc:20:8b:88:e1:38:0f:9c:e6:64:73:
                    37:70:be:5c:81:db:5c:2b:4b:fc:0b:dc:9e:b3:30:
                    3b:91:d5:cc:dc:62:8a:3a:03:4f:0a:35:84:1e:84:
                    68:5d:79:db:1e:94:ca:e9:89:6a:dc:6e:1b:d0:4c:
                    46:70:63:81:25:87:b6:4b:69:6d:25:86:7f:49:12:
                    83:72:7e:29:4e:6b:e8:35:d1:cb:eb:15:de:20:67:
                    7b:7d:69:81:06:07:50:f6:cb:d0:e0:6b:7b:4e:bb:
                    09:7e:ee:48:ba:cb:49:a1:1f:c0:9c:63:e5:f4:1f:
                    1d:0a:dc:2a:bf:bf:ac:72:66:f7:05:4b:b6:fb:7d:
                    2f:9e:57:9d:c7:9e:f9:1a:89:1c:00:9c:24:4c:7c:
                    18:2f:72:9c:c6:c7:b2:b6:fa:8a:62:65:0c:6c:70:
                    a7:84:6b:e3:bf:db:49:df:8b:7c:30:4c:33:5b:6b:
                    bd:c2:c7:f3:2d:75:ad:95:d0:ba:07:79:fc:61:64:
                    34:a3:e7:e8:42:db:be:69:93:ca:0c:f8:ba:58:a6:
                    a9:97:07:ce:d6:ae:38:9d:ac:b6:86:33:35:1b:be:
                    1e:fe:b8:a5:e6:81:3c:aa:0e:f5:63:cd:38:ad:ea:
                    2a:d8:b7:25:23:c3:8f:15:3f:3e:13:12:2e:a5:56:
                    48:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:94:84:B0:78:C3:CA:27:3C:00:A0:66:E6:19:E5:F4:6F:A9:ED:B9
            X509v3 Authority Key Identifier:
                keyid:7D:CE:19:48:21:06:F2:FB:4E:63:83:4C:5C:2F:4F:8C:0F:87:F2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD245/8E37F602E02511E9ABB1894CC4F9AE02/fc4ZSCEG8vtOY4NMXC9PjA-H8us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fc4ZSCEG8vtOY4NMXC9PjA-H8us.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD245/8E37F602E02511E9ABB1894CC4F9AE02/fc4ZSCEG8vtOY4NMXC9PjA-H8us.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:9e:9c:02:4a:ef:e3:90:cf:d1:f7:cc:b7:a4:b4:52:67:48:
         87:05:c8:a2:c0:8d:a4:fe:72:6c:6b:da:ea:37:77:45:cd:31:
         ba:f8:3a:65:91:9a:9a:d9:14:f9:d0:25:42:56:db:a5:a5:f1:
         49:e7:d5:2b:e7:73:36:d6:67:d2:36:b8:79:b0:ed:8a:ab:6b:
         76:3e:22:b1:f3:d8:69:1f:a0:24:93:7c:e7:e2:b5:52:ef:ff:
         81:0d:ed:d7:3d:79:ba:4a:99:c0:bc:02:31:c7:39:e6:19:47:
         73:e2:24:39:b3:fc:f7:f1:6a:11:2a:26:59:45:b0:0e:2a:f3:
         ce:f8:af:e9:04:6a:c6:ab:cd:c6:e1:9f:51:6d:bb:7c:39:9f:
         1f:71:0b:3f:b2:f4:84:93:ad:48:a3:43:2e:23:ab:bd:f4:ae:
         72:76:a7:cc:8b:f2:3d:cb:77:5c:15:fd:1f:6a:bf:0e:48:43:
         02:d7:c0:67:06:58:a8:de:e8:62:36:04:69:04:8a:e3:78:14:
         f2:fa:d4:c0:7f:11:73:49:0f:f7:97:18:b2:ba:c7:18:fb:83:
         34:92:7c:7d:40:f7:6c:c7:0c:d5:82:52:6d:17:5c:39:c9:ff:
         c8:34:0b:81:77:da:e1:d3:61:32:9b:19:53:c3:bf:39:7f:b7:
         42:56:e3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----