Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1862/350845AA1BC111EF8CE32F7FC4F9AE02/YiFKHFIkgcc4F5W-6lXzyIzgE80.mft
File:                     YiFKHFIkgcc4F5W-6lXzyIzgE80.mft (raw, json)
Hash identifier:          8QrCgPMtNV/hULQJ0a64IYmGemcv7rXfFSn7jz5tkPs=
Subject key identifier:   D2:62:8F:86:1A:C1:99:2A:96:1B:57:DD:FE:DA:8F:1A:7A:55:0B:1E
Authority key identifier: 62:21:4A:1C:52:24:81:C7:38:17:95:BE:EA:55:F3:C8:8C:E0:13:CD
Certificate issuer:       /CN=A91D1862/serialNumber=62214A1C522481C7381795BEEA55F3C88CE013CD
Certificate serial:       29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiFKHFIkgcc4F5W-6lXzyIzgE80.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1862/350845AA1BC111EF8CE32F7FC4F9AE02/YiFKHFIkgcc4F5W-6lXzyIzgE80.mft
Manifest number:          26
Signing time:             Thu 25 Jul 2024 07:36:01 +0000
Manifest this update:     Thu 25 Jul 2024 07:36:00 +0000
Manifest next update:     Thu 01 Aug 2024 07:36:00 +0000
Files and hashes:         1: YiFKHFIkgcc4F5W-6lXzyIzgE80.crl (hash: bHI36kShhJa575SfabOmQIWWZzY1qpTPKxr1RWzrL5w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1862/serialNumber=62214A1C522481C7381795BEEA55F3C88CE013CD
        Validity
            Not Before: Jul 25 07:36:00 2024 GMT
            Not After : Aug  1 07:36:00 2024 GMT
        Subject: CN=66a20060-b968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:40:72:ef:fa:56:ed:67:b1:cd:f0:82:7f:80:
                    1a:87:5e:f1:1d:5c:0d:d3:aa:df:b8:ef:a4:dc:86:
                    6b:dc:86:c3:3b:58:b8:7e:00:bb:e8:f3:f2:66:27:
                    2d:45:a8:64:97:54:ae:80:16:65:1f:14:20:9f:34:
                    a6:69:5c:13:81:11:f3:4d:52:b0:28:48:26:1d:66:
                    67:01:cf:f5:ab:ed:28:38:a6:21:ce:da:11:ca:00:
                    5b:9d:e9:0e:33:19:fd:06:4e:a3:37:50:15:2b:14:
                    06:ca:49:22:d0:c4:0f:0e:da:c2:50:21:f1:20:c3:
                    06:a9:98:12:ba:05:11:d3:c5:a4:ac:a3:0c:00:b9:
                    70:82:ad:0f:ce:9a:01:0d:fb:a6:b8:6d:df:ba:56:
                    ca:63:d0:34:d3:33:1b:61:92:0f:22:0a:00:3f:f6:
                    8c:91:24:08:90:b0:84:59:cd:90:d3:81:1b:59:2e:
                    60:4c:11:8c:35:72:93:50:39:e4:a3:67:64:95:65:
                    11:d6:2c:09:cb:5f:11:39:08:8c:77:a0:bc:e8:3b:
                    f8:97:1f:45:7a:2e:32:26:ae:30:d9:10:de:b7:df:
                    5d:fa:62:19:a8:2d:c0:b9:2e:26:da:4a:fd:c3:ad:
                    1d:90:c8:1b:0c:a2:b0:9f:e1:7d:86:26:69:24:97:
                    b5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:62:8F:86:1A:C1:99:2A:96:1B:57:DD:FE:DA:8F:1A:7A:55:0B:1E
            X509v3 Authority Key Identifier:
                keyid:62:21:4A:1C:52:24:81:C7:38:17:95:BE:EA:55:F3:C8:8C:E0:13:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1862/350845AA1BC111EF8CE32F7FC4F9AE02/YiFKHFIkgcc4F5W-6lXzyIzgE80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiFKHFIkgcc4F5W-6lXzyIzgE80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1862/350845AA1BC111EF8CE32F7FC4F9AE02/YiFKHFIkgcc4F5W-6lXzyIzgE80.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:5b:6e:1b:97:63:16:7b:ae:6e:a6:69:c3:84:b3:a7:60:de:
         72:58:33:49:5d:58:92:fb:e9:f7:47:e9:e7:3a:be:66:3b:6b:
         1b:d4:ea:e7:2c:08:94:3a:be:ba:8d:31:2c:95:eb:23:95:c4:
         cb:83:8e:c6:fd:e5:e0:be:be:f4:11:22:d7:9f:55:58:fd:31:
         b3:fd:93:f4:ce:7c:70:d8:65:cb:b0:f6:f7:0b:a2:ae:e6:85:
         0d:4a:cc:7c:53:fe:1e:9b:91:fa:73:bd:c0:ac:b2:e6:c7:ea:
         49:61:d7:1b:c5:72:7c:ff:c8:30:d0:2a:80:c7:f1:26:77:f6:
         32:a1:11:3c:b0:60:d3:3b:1d:f1:e3:be:db:13:e4:e5:2e:df:
         09:b3:6b:5c:69:48:10:e0:4e:ac:0d:39:68:ad:e2:2b:86:4a:
         b1:c8:6f:37:71:c9:db:38:46:2d:a3:21:df:9b:08:b7:51:3d:
         71:56:7f:fc:1d:ca:94:56:f8:05:28:c8:09:7a:40:a2:f5:79:
         52:30:29:ec:97:84:2e:46:8f:bf:4a:97:1f:e4:9e:09:91:ce:
         f4:42:5c:69:83:80:8e:95:fe:98:68:c7:4a:4f:bd:43:37:8a:
         ee:23:ea:64:2f:0a:7e:1e:09:c4:68:3e:2f:2c:7c:f7:d5:a9:
         fe:26:00:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----