Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F15/3407E8FCE51A11E79DBD0A27C4F9AE02/ESxRP2_m3XL-6MsAtSeQEA7Oy6o.mft
File:                     ESxRP2_m3XL-6MsAtSeQEA7Oy6o.mft (raw, json)
Hash identifier:          upiUjTNCU1ILXQaSNVUwy2r+0EE2mLhV5eMDxT+VBvk=
Subject key identifier:   F3:11:99:F9:FB:09:B6:23:53:D6:EC:49:F8:D2:B4:EC:DD:C6:FB:D1
Authority key identifier: 11:2C:51:3F:6F:E6:DD:72:FE:E8:CB:00:B5:27:90:10:0E:CE:CB:AA
Certificate issuer:       /CN=A91E9F15/serialNumber=112C513F6FE6DD72FEE8CB00B52790100ECECBAA
Certificate serial:       13E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESxRP2_m3XL-6MsAtSeQEA7Oy6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9F15/3407E8FCE51A11E79DBD0A27C4F9AE02/ESxRP2_m3XL-6MsAtSeQEA7Oy6o.mft
Manifest number:          13DC
Signing time:             Wed 20 Apr 2022 05:36:01 +0000
Manifest this update:     Wed 20 Apr 2022 05:36:00 +0000
Manifest next update:     Fri 22 Apr 2022 05:36:00 +0000
Files and hashes:         1: ESxRP2_m3XL-6MsAtSeQEA7Oy6o.crl (hash: B20LRtZalIxY4YgBvZzFjgN8RoAaoAfpDdAmfiHCOQY=)
                          2: 93EBA9D8F47E11E88F6E146AC4F9AE02.roa (hash: Y8O6gvlquGZFiRTApxM1raIZPY8KXuSVBiRD5h8OvK8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5095 (0x13e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9F15/serialNumber=112C513F6FE6DD72FEE8CB00B52790100ECECBAA
        Validity
            Not Before: Apr 20 05:36:00 2022 GMT
            Not After : Apr 22 05:36:00 2022 GMT
        Subject: CN=625f9bc0-adb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f8:6b:c7:a9:1b:55:bf:6e:15:ff:ca:b9:16:
                    d0:ca:96:d2:2a:67:9a:64:19:e4:ed:d2:33:0d:1d:
                    38:8e:2f:2a:1d:aa:e6:d2:8f:43:a1:8a:fa:a4:b7:
                    c7:dc:15:5e:08:1f:43:a0:38:d0:cc:62:f2:d7:26:
                    33:d5:ef:20:92:61:bf:8b:c1:e7:5f:fe:6f:41:c5:
                    ed:c6:2c:b1:6f:11:29:55:65:d5:7b:4a:98:1e:e5:
                    10:be:ba:6a:34:40:06:57:d7:db:92:c0:cc:44:ae:
                    d2:7c:44:a0:24:69:78:78:f8:9a:e8:f3:b3:f1:32:
                    6e:27:66:26:7a:b2:37:54:ac:ad:80:33:7c:ca:e6:
                    19:1a:84:45:be:e6:23:43:92:4a:34:b9:23:8b:39:
                    95:17:fd:e7:81:99:d8:09:58:df:89:37:98:cc:97:
                    99:54:a4:18:ae:df:ba:23:f6:34:da:5c:59:4c:51:
                    81:66:32:63:9b:5a:fc:4f:77:08:12:19:7a:cb:10:
                    98:66:fa:3d:e8:28:6f:17:38:fa:c7:92:58:85:27:
                    76:f0:6c:03:fa:fe:93:1e:31:29:3a:3d:6f:7c:26:
                    54:8c:1d:5a:cd:f7:4f:5c:50:1e:c2:dc:1e:01:b7:
                    1c:92:38:45:f2:ac:8e:d2:0d:d8:70:cf:f0:6a:99:
                    e0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:11:99:F9:FB:09:B6:23:53:D6:EC:49:F8:D2:B4:EC:DD:C6:FB:D1
            X509v3 Authority Key Identifier:
                keyid:11:2C:51:3F:6F:E6:DD:72:FE:E8:CB:00:B5:27:90:10:0E:CE:CB:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9F15/3407E8FCE51A11E79DBD0A27C4F9AE02/ESxRP2_m3XL-6MsAtSeQEA7Oy6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESxRP2_m3XL-6MsAtSeQEA7Oy6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F15/3407E8FCE51A11E79DBD0A27C4F9AE02/ESxRP2_m3XL-6MsAtSeQEA7Oy6o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:97:e6:f2:91:7a:df:3d:d3:fa:5b:3a:e1:dc:83:db:c8:d2:
         8b:10:7c:12:ce:9a:e0:67:c9:3a:76:c0:b4:18:97:a3:2f:e0:
         25:74:56:15:48:6a:12:55:2e:cf:08:38:47:b5:ef:a3:5a:4d:
         cb:ab:40:6e:87:32:8c:75:85:9d:0c:23:90:61:63:11:b2:58:
         69:47:8b:a8:4f:9e:32:44:7e:dc:68:33:b9:1c:9c:4a:2d:dd:
         94:9e:2a:6a:ad:eb:c1:6d:2b:2e:c7:da:a2:98:47:71:32:b8:
         91:0d:e3:f0:4d:e6:76:90:75:b3:a2:2b:b5:d2:46:e3:e9:b8:
         12:ea:e9:a4:e4:ec:50:e4:17:24:18:20:07:23:84:fb:0d:b6:
         73:89:66:63:0d:08:bb:c8:e3:53:30:cd:6f:9d:8e:ba:aa:5a:
         18:27:43:a7:5e:e4:c3:b0:cb:16:70:f0:ff:08:90:f2:61:ce:
         b6:17:18:e8:71:c9:ae:fe:cc:ac:2d:72:83:63:ea:b2:7c:73:
         e8:c0:06:ca:ec:07:3c:04:5c:37:27:8c:f1:3b:f2:31:74:59:
         d2:a4:d8:49:77:ca:f9:ef:c7:73:1f:71:74:ae:8c:68:f4:12:
         72:23:9a:ba:ef:70:59:a6:b2:61:7c:b5:aa:fa:ee:5f:44:28:
         e0:b0:44:62
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICE+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTlGMTUxMTAvBgNVBAUTKDExMkM1MTNGNkZFNkRENzJGRUU4Q0IwMEI1Mjc5MDEw
MEVDRUNCQUEwHhcNMjIwNDIwMDUzNjAwWhcNMjIwNDIyMDUzNjAwWjAYMRYwFAYD
VQQDEw02MjVmOWJjMC1hZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzfhrx6kbVb9uFf/KuRbQypbSKmeaZBnk7dIzDR04ji8qHarm0o9DoYr6pLfH
3BVeCB9DoDjQzGLy1yYz1e8gkmG/i8HnX/5vQcXtxiyxbxEpVWXVe0qYHuUQvrpq
NEAGV9fbksDMRK7SfESgJGl4ePia6POz8TJuJ2YmerI3VKytgDN8yuYZGoRFvuYj
Q5JKNLkjizmVF/3ngZnYCVjfiTeYzJeZVKQYrt+6I/Y02lxZTFGBZjJjm1r8T3cI
Ehl6yxCYZvo96ChvFzj6x5JYhSd28GwD+v6THjEpOj1vfCZUjB1azfdPXFAewtwe
AbcckjhF8qyO0g3YcM/wapngmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMRmfn7
CbYjU9bsSfjStOzdxvvRMB8GA1UdIwQYMBaAFBEsUT9v5t1y/ujLALUnkBAOzsuq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUYxNS8zNDA3RThGQ0U1
MUExMUU3OURCRDBBMjdDNEY5QUUwMi9FU3hSUDJfbTNYTC02TXNBdFNlUUVBN095
Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VTeFJQMl9tM1hMLTZNc0F0U2VRRUE3T3k2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OUYxNS8zNDA3RThGQ0U1MUExMUU3OURCRDBBMjdDNEY5QUUwMi9FU3hSUDJfbTNY
TC02TXNBdFNlUUVBN095Nm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC8l+bykXrfPdP6Wzrh3IPbyNKLEHwSzprgZ8k6dsC0GJejL+AldFYV
SGoSVS7PCDhHte+jWk3Lq0BuhzKMdYWdDCOQYWMRslhpR4uoT54yRH7caDO5HJxK
Ld2UnipqrevBbSsux9qimEdxMriRDePwTeZ2kHWzoiu10kbj6bgS6umk5OxQ5Bck
GCAHI4T7DbZziWZjDQi7yONTMM1vnY66qloYJ0OnXuTDsMsWcPD/CJDyYc62Fxjo
ccmu/sysLXKDY+qyfHPowAbK7Ac8BFw3J4zxO/IxdFnSpNhJd8r578dzH3F0roxo
9BJyI5q673BZprJhfLWq+u5fRCjgsERi
-----END CERTIFICATE-----