Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9208/6641C654853A11EA88004E81C4F9AE02/JZEKD9qLk08U_gnw9NiHjiJHUxM.mft
File:                     JZEKD9qLk08U_gnw9NiHjiJHUxM.mft (raw, json)
Hash identifier:          Uu0sljBChc65hD48CHJD5M4XfhgS1+LHjWCCETfvz0k=
Subject key identifier:   62:20:EB:45:FC:DD:EE:74:AA:1B:B5:2E:CF:E6:32:9F:25:C4:33:97
Authority key identifier: 25:91:0A:0F:DA:8B:93:4F:14:FE:09:F0:F4:D8:87:8E:22:47:53:13
Certificate issuer:       /CN=A91D9208/serialNumber=25910A0FDA8B934F14FE09F0F4D8878E22475313
Certificate serial:       07F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZEKD9qLk08U_gnw9NiHjiJHUxM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9208/6641C654853A11EA88004E81C4F9AE02/JZEKD9qLk08U_gnw9NiHjiJHUxM.mft
Manifest number:          07F9
Signing time:             Sat 04 Feb 2023 22:07:44 +0000
Manifest this update:     Sat 04 Feb 2023 22:07:44 +0000
Manifest next update:     Sat 11 Feb 2023 22:07:44 +0000
Files and hashes:         1: JZEKD9qLk08U_gnw9NiHjiJHUxM.crl (hash: 4j2YlnHe0icigjHSFffX8yphaHbNmOwE84GQiz9X3aI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2041 (0x7f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9208/serialNumber=25910A0FDA8B934F14FE09F0F4D8878E22475313
        Validity
            Not Before: Feb  4 22:07:44 2023 GMT
            Not After : Feb 11 22:07:44 2023 GMT
        Subject: CN=63ded730-31a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bc:72:ca:fd:f6:e4:a9:80:91:95:7a:ce:a2:
                    0e:5f:eb:10:42:3e:80:e7:4c:08:fe:23:61:cf:1f:
                    3b:13:00:ad:56:22:f7:72:e2:a8:77:d1:7e:52:a6:
                    f7:22:e8:33:2f:43:a9:68:24:3b:d6:4e:74:44:6a:
                    c0:08:56:e1:3e:b6:ee:7c:9c:c6:27:b6:a5:24:76:
                    77:70:a0:b6:05:02:5e:ab:59:45:d5:9a:ea:c2:ea:
                    e4:fd:80:ff:98:58:50:90:90:91:6c:3e:ac:b3:26:
                    4a:03:74:ee:9d:82:80:ea:ae:79:44:36:10:06:02:
                    3c:82:91:78:9e:5e:8f:32:5a:b6:d2:ed:82:f9:1a:
                    86:b4:a9:1d:cd:14:bc:28:51:a3:aa:4a:a9:f1:94:
                    ee:66:ec:73:91:f0:86:c9:ad:b6:0a:3e:7f:29:05:
                    74:b1:13:91:d9:59:bd:e5:b4:08:60:d2:70:ca:eb:
                    a8:c4:19:11:be:42:63:9e:07:b3:ff:b6:c6:bb:a9:
                    4b:b9:39:4b:e6:0f:29:1a:f5:ca:ff:10:92:aa:95:
                    11:0a:bb:a9:dc:73:9f:60:e4:08:08:ee:20:e7:4a:
                    92:5a:cb:44:50:a7:e1:59:6a:02:ae:fb:d8:e1:bd:
                    ec:9f:22:ab:09:40:9f:97:05:96:58:cb:56:38:0d:
                    71:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:20:EB:45:FC:DD:EE:74:AA:1B:B5:2E:CF:E6:32:9F:25:C4:33:97
            X509v3 Authority Key Identifier:
                keyid:25:91:0A:0F:DA:8B:93:4F:14:FE:09:F0:F4:D8:87:8E:22:47:53:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9208/6641C654853A11EA88004E81C4F9AE02/JZEKD9qLk08U_gnw9NiHjiJHUxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZEKD9qLk08U_gnw9NiHjiJHUxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9208/6641C654853A11EA88004E81C4F9AE02/JZEKD9qLk08U_gnw9NiHjiJHUxM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:34:25:88:6a:e5:cc:cb:a5:ad:f1:bf:7e:92:99:83:3f:09:
         21:f4:1b:6d:52:e7:52:d3:bb:1f:c5:b6:c2:de:f7:87:8c:28:
         aa:21:c8:8b:f2:8b:35:d5:f1:e5:00:dc:b8:12:2e:52:6d:b7:
         70:35:62:fb:a6:4a:28:b9:d5:93:a2:e6:80:fd:c9:e0:c5:b8:
         28:37:b1:7a:58:4d:01:df:15:a9:da:08:d5:65:d5:fa:62:2e:
         2d:3c:c9:0e:cc:05:ba:c7:22:3a:05:3b:b3:39:a0:e4:62:cf:
         df:b9:2c:7a:c2:06:57:91:7a:e7:ed:67:fe:74:3f:06:08:2c:
         c0:ee:10:76:94:ff:e2:d3:78:65:6e:8a:04:c3:fc:0b:11:ab:
         1c:3a:1a:65:76:6a:f8:52:3c:2e:3a:75:b7:d6:b5:d8:ef:49:
         e7:74:2e:92:17:76:df:8f:40:27:17:ca:07:4f:1d:51:44:f7:
         9a:46:16:66:e4:e6:0d:42:b9:ca:ee:a3:57:db:6b:14:ea:3d:
         b1:83:7c:a5:18:19:63:d4:a8:ea:9e:be:bf:bb:19:03:1c:56:
         0e:55:3c:3a:c0:50:5d:4b:62:0c:7b:af:37:40:59:d0:77:10:
         b9:b9:aa:53:10:81:b4:57:45:f7:45:c1:43:6c:a8:fa:c7:41:
         dd:4b:f5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----