Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D80A3/96C50978CFFA11ECA2907161C4F9AE02/TdRI21KLRW60npKsBT-fZkqTg68.mft
File:                     TdRI21KLRW60npKsBT-fZkqTg68.mft (raw, json)
Hash identifier:          LsnVkfNSmuoPElZpUII7JPpL1kXPCzE5tmDiP7BVDYc=
Subject key identifier:   C4:EE:07:12:26:F3:C0:E4:7B:AC:E7:B3:A1:E7:B0:AC:0C:51:3B:4F
Authority key identifier: 4D:D4:48:DB:52:8B:45:6E:B4:9E:92:AC:05:3F:9F:66:4A:93:83:AF
Certificate issuer:       /CN=A91D80A3/serialNumber=4DD448DB528B456EB49E92AC053F9F664A9383AF
Certificate serial:       19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TdRI21KLRW60npKsBT-fZkqTg68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D80A3/96C50978CFFA11ECA2907161C4F9AE02/TdRI21KLRW60npKsBT-fZkqTg68.mft
Manifest number:          18
Signing time:             Fri 20 May 2022 04:54:37 +0000
Manifest this update:     Fri 20 May 2022 04:54:36 +0000
Manifest next update:     Sun 22 May 2022 04:54:36 +0000
Files and hashes:         1: TdRI21KLRW60npKsBT-fZkqTg68.crl (hash: QYbrBuoahL42wGGktR2fezUlFxejsBg8inq10A9/yO0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D80A3/serialNumber=4DD448DB528B456EB49E92AC053F9F664A9383AF
        Validity
            Not Before: May 20 04:54:36 2022 GMT
            Not After : May 22 04:54:36 2022 GMT
        Subject: CN=62871f0c-4979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f2:6a:9c:f7:5d:98:00:0f:aa:64:99:f2:1e:
                    4b:1b:16:a5:14:a5:e3:60:12:59:29:93:96:55:0b:
                    44:48:8f:c3:ce:1b:27:2d:11:d2:48:15:a1:f6:e5:
                    9d:62:f5:d9:e7:cf:57:f1:03:4b:f9:6c:7f:0e:e1:
                    d5:58:da:92:4e:07:74:fd:29:ca:c2:8c:38:4e:5a:
                    8b:84:67:d7:d8:e2:e0:ad:a3:e7:be:9f:11:fb:7e:
                    79:3a:e2:b9:e8:71:94:34:03:22:c1:11:b0:58:67:
                    82:64:3f:c6:fb:1a:53:9a:f6:33:64:5b:b4:89:ff:
                    6e:b2:12:81:c5:b2:6a:48:93:99:bb:01:8c:20:a3:
                    4d:81:5d:0b:2c:24:30:0d:2c:91:b6:c2:bc:95:06:
                    d5:33:b4:38:bd:c7:da:fc:d1:f6:00:5b:3d:e3:b3:
                    a1:d6:e2:63:73:1d:b5:17:77:af:4c:e9:63:79:87:
                    d0:9e:47:5d:3a:43:a9:89:a2:bd:66:ac:31:40:9e:
                    d0:ce:7a:22:c6:58:cb:3a:eb:d8:1e:f4:7c:f4:8e:
                    56:6a:92:dc:a5:c1:1f:f6:f2:5d:09:f2:68:e0:9c:
                    95:30:c3:ce:be:93:0f:92:04:a5:1f:4a:41:bc:5e:
                    c7:8f:46:7b:df:93:c2:6d:22:6b:e2:30:73:92:b8:
                    82:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EE:07:12:26:F3:C0:E4:7B:AC:E7:B3:A1:E7:B0:AC:0C:51:3B:4F
            X509v3 Authority Key Identifier:
                keyid:4D:D4:48:DB:52:8B:45:6E:B4:9E:92:AC:05:3F:9F:66:4A:93:83:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D80A3/96C50978CFFA11ECA2907161C4F9AE02/TdRI21KLRW60npKsBT-fZkqTg68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TdRI21KLRW60npKsBT-fZkqTg68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D80A3/96C50978CFFA11ECA2907161C4F9AE02/TdRI21KLRW60npKsBT-fZkqTg68.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:34:04:c9:94:5a:1f:ac:ed:07:9d:35:88:90:8a:66:66:62:
         e9:68:9f:10:a0:ae:19:89:9e:da:1b:94:e0:9e:0e:62:78:4d:
         70:ff:fe:e5:b9:46:ea:4a:c3:81:71:6e:f4:71:3d:bf:82:c6:
         c6:e5:ee:b4:94:5b:db:0a:f4:cc:2f:97:b3:9b:d3:22:bb:6c:
         cd:78:fa:17:38:f1:0e:58:e7:76:80:eb:54:88:0d:ae:0d:57:
         4f:74:a6:5d:10:2c:63:a6:90:16:0e:24:c6:0b:68:db:e8:b9:
         5f:d8:f6:e7:e8:56:76:dc:a9:19:2b:a6:cd:64:4b:0e:60:1e:
         40:48:dd:ff:bc:c2:36:56:0e:9a:71:d0:03:11:47:cc:42:47:
         86:d1:03:be:97:d5:c4:6a:2f:5e:3a:97:bc:e2:8e:50:7c:55:
         e6:df:1e:5e:2f:fa:15:cb:e8:51:9e:a9:5f:64:25:8d:3d:4d:
         83:fa:44:1a:16:83:b2:be:e5:1f:54:33:30:13:27:a1:a1:48:
         28:60:ef:4f:96:09:bf:da:00:8a:0e:a6:10:7c:ac:02:ec:20:
         e7:9d:be:24:6a:08:54:34:24:c3:f9:18:b3:d2:2e:bc:69:c6:
         c6:5e:b7:37:8e:9c:0b:64:8a:26:8d:e4:f9:ec:67:18:41:43:
         c2:b5:77:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----