Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/CL0cxa7edJKy8iV6oZTbCFVa9vI.mft
File:                     CL0cxa7edJKy8iV6oZTbCFVa9vI.mft (raw, json)
Hash identifier:          +i/h50VErgbZbizaZR07SKbtddbqUPMtH+Bo24w9znk=
Subject key identifier:   B4:8B:E5:64:E5:E2:14:52:41:C2:83:20:00:EC:78:73:21:20:B3:A7
Authority key identifier: 08:BD:1C:C5:AE:DE:74:92:B2:F2:25:7A:A1:94:DB:08:55:5A:F6:F2
Certificate issuer:       /CN=A91E4CF1/serialNumber=08BD1CC5AEDE7492B2F2257AA194DB08555AF6F2
Certificate serial:       0C37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CL0cxa7edJKy8iV6oZTbCFVa9vI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/CL0cxa7edJKy8iV6oZTbCFVa9vI.mft
Manifest number:          0BF8
Signing time:             Tue 23 Jul 2024 02:36:08 +0000
Manifest this update:     Tue 23 Jul 2024 02:36:07 +0000
Manifest next update:     Tue 30 Jul 2024 02:36:07 +0000
Files and hashes:         1: CL0cxa7edJKy8iV6oZTbCFVa9vI.crl (hash: wZNcd+KMdzMMDJpP5JoJp7FWceUXhbMdp4dXcsltubc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3127 (0xc37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4CF1/serialNumber=08BD1CC5AEDE7492B2F2257AA194DB08555AF6F2
        Validity
            Not Before: Jul 23 02:36:07 2024 GMT
            Not After : Jul 30 02:36:07 2024 GMT
        Subject: CN=669f1717-4aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:50:3b:50:8d:35:b1:23:22:49:7a:b4:c9:
                    92:37:4c:bb:7d:0f:2f:f7:7d:98:33:f9:7e:2e:24:
                    38:6c:2e:f9:26:f5:67:07:a6:83:5b:76:4e:a4:1b:
                    bd:fb:68:c0:b2:35:9f:2a:16:37:ef:fc:01:23:7c:
                    59:8d:b3:92:b0:d5:a1:f8:d9:de:d0:8f:2f:b3:e6:
                    d5:d4:6a:68:ec:58:1c:54:c5:a3:6c:ed:d1:b2:66:
                    77:e2:8c:ae:27:28:eb:53:47:c5:04:6d:fc:69:62:
                    69:69:ed:ed:78:46:33:8c:fb:e1:be:e3:d3:83:bb:
                    ea:cf:4f:20:f7:5a:1a:0d:89:f7:4d:99:d6:17:b0:
                    f3:82:43:8f:49:3a:2d:61:a4:05:bc:65:36:ca:9a:
                    c0:3b:50:29:a5:da:1b:72:19:ec:12:22:42:4d:21:
                    e6:ca:6d:f6:c5:ed:5e:fb:46:bb:c2:19:de:55:c7:
                    55:5f:b1:c5:e2:87:ed:fe:43:07:32:81:30:aa:f4:
                    3e:15:50:af:65:37:2d:d4:2c:c0:f7:89:a2:d4:f1:
                    fc:7a:4f:5e:17:1d:05:4c:fa:cc:b3:2e:81:cf:57:
                    e2:38:6e:fe:7a:ba:16:26:44:52:0c:b3:de:21:2a:
                    0a:33:f0:3f:c3:50:0d:98:ca:27:25:f8:8b:d7:de:
                    1d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8B:E5:64:E5:E2:14:52:41:C2:83:20:00:EC:78:73:21:20:B3:A7
            X509v3 Authority Key Identifier:
                keyid:08:BD:1C:C5:AE:DE:74:92:B2:F2:25:7A:A1:94:DB:08:55:5A:F6:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/CL0cxa7edJKy8iV6oZTbCFVa9vI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CL0cxa7edJKy8iV6oZTbCFVa9vI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/CL0cxa7edJKy8iV6oZTbCFVa9vI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:b0:e5:76:d1:72:e7:bb:af:64:be:e8:82:ad:9f:aa:b0:2f:
         9b:39:f8:44:ab:8f:53:24:e7:d9:d6:a3:ac:29:f6:72:23:03:
         67:bd:c9:94:dd:79:bf:5c:0f:f1:d9:64:87:a9:87:89:6a:c3:
         a9:0b:6f:6a:d3:4c:9c:8e:34:04:5d:55:fa:95:3a:c5:5f:15:
         ff:55:9a:3b:6b:28:7e:31:e1:f8:fd:1f:bd:bf:fb:15:fb:39:
         50:73:fa:5b:7c:00:1d:ab:60:03:5b:60:45:92:be:4f:eb:89:
         e5:55:fe:c4:23:db:49:0b:0a:9d:c6:b9:cb:ad:ee:fc:bd:f1:
         a6:6c:fa:59:74:87:d9:5a:54:9e:2d:f1:d6:38:55:c5:b6:4f:
         44:42:b7:ce:04:b2:cf:69:53:c4:5a:d6:5d:89:4e:2d:11:82:
         e7:80:80:5b:b4:23:af:2b:35:84:84:6a:21:47:1c:28:a4:31:
         23:bf:77:7c:96:0f:96:ab:02:ae:bb:9b:9c:ab:79:71:52:cc:
         d7:0d:6e:5d:cd:0f:21:12:ba:93:24:80:02:90:aa:92:97:17:
         b3:88:0f:be:96:6e:aa:b5:6d:18:b2:aa:5e:7e:be:c2:c5:af:
         8c:35:4c:fb:55:9a:e1:a8:7c:a1:c8:05:8f:ea:ba:fa:13:80:
         71:88:b7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----