Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F8F/282D1FAE5FBD11EBAAABE878C4F9AE02/WisEsCiTXmsyuCGUPBg0iNSVls8.mft
File:                     WisEsCiTXmsyuCGUPBg0iNSVls8.mft (raw, json)
Hash identifier:          fOefKg2SxDhVe1ABJNgJIi8/taKvL15jdOsOh60hQH8=
Subject key identifier:   C2:F3:DC:21:A7:17:C8:F6:64:7F:44:1F:59:3D:4D:87:50:A9:A7:0D
Authority key identifier: 5A:2B:04:B0:28:93:5E:6B:32:B8:21:94:3C:18:34:88:D4:95:96:CF
Certificate issuer:       /CN=A91D9F8F/serialNumber=5A2B04B028935E6B32B821943C183488D49596CF
Certificate serial:       053D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WisEsCiTXmsyuCGUPBg0iNSVls8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9F8F/282D1FAE5FBD11EBAAABE878C4F9AE02/WisEsCiTXmsyuCGUPBg0iNSVls8.mft
Manifest number:          0539
Signing time:             Thu 11 May 2023 01:18:46 +0000
Manifest this update:     Thu 11 May 2023 01:18:46 +0000
Manifest next update:     Thu 18 May 2023 01:18:46 +0000
Files and hashes:         1: WisEsCiTXmsyuCGUPBg0iNSVls8.crl (hash: kRQSuuU3yodcTJneBspB0+7fl2IscWjpdQEqMYXrUhk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1341 (0x53d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9F8F/serialNumber=5A2B04B028935E6B32B821943C183488D49596CF
        Validity
            Not Before: May 11 01:18:46 2023 GMT
            Not After : May 18 01:18:46 2023 GMT
        Subject: CN=645c4276-32c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b8:ec:cf:cd:0f:83:8d:5b:a0:ab:c0:62:2d:
                    5e:64:75:45:53:f5:80:3d:3d:87:0f:48:e0:a7:8c:
                    63:42:85:ea:04:9b:fb:a5:7b:f0:32:62:ba:f0:6f:
                    96:c9:e5:a7:0e:6f:b5:c7:2e:04:ca:7c:4e:64:88:
                    60:ce:b4:15:6c:62:b4:91:05:60:a3:24:4e:c4:9e:
                    36:a4:a1:2a:92:97:9b:35:1d:61:28:d2:85:dd:43:
                    78:b7:4f:35:54:6b:1b:c9:8e:9a:77:c1:93:db:86:
                    74:94:88:b1:36:04:71:59:ef:f9:83:51:b3:a9:bb:
                    db:71:4e:fa:a6:fc:37:9b:28:f7:d1:39:e0:d0:59:
                    e4:93:fe:dc:28:88:d7:88:10:39:ec:78:d0:61:a0:
                    36:01:52:d3:fc:b9:ce:2b:25:0c:90:ea:67:01:e1:
                    7f:6e:89:09:6e:5c:f1:ee:4f:b0:3b:79:91:c1:e7:
                    6e:9f:49:4e:e3:08:89:c5:ae:25:1b:e5:3f:1c:c6:
                    49:16:38:ff:fb:b5:b1:d6:c7:42:51:c4:0a:aa:94:
                    6e:c3:40:6b:45:61:33:d4:34:ef:cb:5a:76:c0:d5:
                    21:d7:74:b4:78:94:ad:63:c4:6f:51:e1:a3:ca:00:
                    b3:bd:a2:4b:a6:6a:67:38:c1:32:c8:0a:77:db:d6:
                    3a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F3:DC:21:A7:17:C8:F6:64:7F:44:1F:59:3D:4D:87:50:A9:A7:0D
            X509v3 Authority Key Identifier:
                keyid:5A:2B:04:B0:28:93:5E:6B:32:B8:21:94:3C:18:34:88:D4:95:96:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9F8F/282D1FAE5FBD11EBAAABE878C4F9AE02/WisEsCiTXmsyuCGUPBg0iNSVls8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WisEsCiTXmsyuCGUPBg0iNSVls8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F8F/282D1FAE5FBD11EBAAABE878C4F9AE02/WisEsCiTXmsyuCGUPBg0iNSVls8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:7f:ea:c9:6e:6f:95:7a:a3:f9:65:72:88:8a:c1:3a:e7:31:
         80:ea:aa:39:a1:5c:ed:3f:18:c9:4c:23:30:dc:73:c6:e9:5a:
         ec:8f:c7:0f:39:e1:a8:61:51:5b:92:16:a6:36:62:ac:87:f0:
         7b:d5:c4:db:3b:de:df:04:35:5e:d1:41:ad:7e:b6:40:ac:ad:
         d8:31:c9:26:98:ac:3c:7b:78:8a:26:5f:14:83:23:e6:fb:ae:
         63:31:45:e8:ae:af:da:cb:ab:d0:0c:ee:0b:7e:8f:1f:b5:e3:
         6f:e5:bc:ed:db:21:ab:84:23:37:95:a6:7b:19:73:50:4c:8f:
         76:78:7b:fa:75:4b:94:30:c1:67:b2:a2:ae:00:f3:14:91:7d:
         b0:e4:78:47:56:a9:60:25:de:5e:90:05:3c:8e:86:57:2c:af:
         fc:18:1a:c5:0d:13:74:6b:0b:0e:38:6a:dc:63:7b:d6:8a:bb:
         96:b5:ee:08:bc:2a:9a:b7:02:8d:56:28:cb:7f:6f:fe:fa:9c:
         20:02:09:5b:63:0e:aa:21:23:31:ad:7e:65:7e:1b:5c:fb:24:
         42:62:78:df:21:28:8f:89:f8:63:a8:d1:db:fa:60:6e:63:f0:
         85:70:50:08:7f:63:d8:79:40:9a:2a:87:54:99:8b:da:28:c3:
         36:d0:56:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----