Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEAF9/E61E7D5CE90011EAB59F6971C4F9AE02/3r0oU3qS6xPagPeYhK77f1FpqHk.mft
File:                     3r0oU3qS6xPagPeYhK77f1FpqHk.mft (raw, json)
Hash identifier:          zM/tMM26uieVEz5A6MAX/mtAi8tNTS8cylY1JAN3zCw=
Subject key identifier:   62:9E:5F:65:5C:15:AA:E7:23:AD:BB:B5:FB:65:5C:12:34:9F:79:A3
Authority key identifier: DE:BD:28:53:7A:92:EB:13:DA:80:F7:98:84:AE:FB:7F:51:69:A8:79
Certificate issuer:       /CN=A91EEAF9/serialNumber=DEBD28537A92EB13DA80F79884AEFB7F5169A879
Certificate serial:       0799
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3r0oU3qS6xPagPeYhK77f1FpqHk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEAF9/E61E7D5CE90011EAB59F6971C4F9AE02/3r0oU3qS6xPagPeYhK77f1FpqHk.mft
Manifest number:          0787
Signing time:             Tue 12 Nov 2024 20:43:29 +0000
Manifest this update:     Tue 12 Nov 2024 20:43:29 +0000
Manifest next update:     Tue 19 Nov 2024 20:43:28 +0000
Files and hashes:         1: 3r0oU3qS6xPagPeYhK77f1FpqHk.crl (hash: ameyuRYreU+cGxzZx/ZZ1PbDOZNhXedmx+0iYOrEXCM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1945 (0x799)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEAF9/serialNumber=DEBD28537A92EB13DA80F79884AEFB7F5169A879
        Validity
            Not Before: Nov 12 20:43:29 2024 GMT
            Not After : Nov 19 20:43:28 2024 GMT
        Subject: CN=6733bdf1-2cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:66:4c:3e:e3:ce:9e:67:65:39:8c:68:7a:7d:
                    5e:c8:c5:f4:8f:32:70:a9:43:1c:ee:df:3e:9b:ee:
                    73:77:fc:93:95:bd:c7:b5:3a:bc:4f:fa:09:54:14:
                    2c:be:78:76:ef:16:5b:35:35:25:b1:e3:d0:4d:a7:
                    ec:39:dc:29:da:bc:ac:ea:3f:f5:0c:96:2c:f2:b9:
                    2e:46:e3:7a:ae:ad:39:69:82:cf:43:ed:ce:55:0d:
                    09:34:18:c0:0f:30:15:6d:3c:c5:13:ea:7b:e8:90:
                    03:dc:30:ab:71:6d:c9:d5:50:e4:35:d9:75:bf:87:
                    9d:13:98:14:b8:cc:5d:3e:b8:a0:72:df:c5:7a:e9:
                    86:5e:a3:24:95:b9:6a:f4:22:d0:3c:08:91:33:e0:
                    8d:52:0d:d4:16:65:0a:82:13:67:29:5f:8d:d6:75:
                    3e:a6:ad:02:28:38:05:66:6c:62:d4:0e:06:14:fb:
                    34:7c:81:c8:9f:1f:35:c8:3e:7b:85:46:50:eb:3e:
                    1f:05:35:2c:2a:68:0a:09:93:93:ec:c7:44:35:81:
                    c6:7c:8d:c5:64:0c:b1:cd:2b:8a:cb:da:bf:60:9e:
                    7d:e8:f4:b7:9a:bc:1c:02:fb:c5:26:78:fd:31:a1:
                    f1:0e:74:d9:21:88:3f:ce:c0:c2:7c:b8:88:4d:64:
                    a5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9E:5F:65:5C:15:AA:E7:23:AD:BB:B5:FB:65:5C:12:34:9F:79:A3
            X509v3 Authority Key Identifier:
                keyid:DE:BD:28:53:7A:92:EB:13:DA:80:F7:98:84:AE:FB:7F:51:69:A8:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEAF9/E61E7D5CE90011EAB59F6971C4F9AE02/3r0oU3qS6xPagPeYhK77f1FpqHk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3r0oU3qS6xPagPeYhK77f1FpqHk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEAF9/E61E7D5CE90011EAB59F6971C4F9AE02/3r0oU3qS6xPagPeYhK77f1FpqHk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:7c:bb:e5:59:fc:54:15:d8:a8:2a:a9:81:7f:dc:e6:2b:76:
         1c:db:a3:14:89:06:26:00:b9:7a:f5:f8:77:ff:df:94:f6:e2:
         e0:35:f3:bf:f8:5c:05:6d:0f:14:b7:6c:27:29:50:32:b7:59:
         2f:3c:30:a1:69:5a:ee:98:8f:c0:f1:a4:e6:09:bd:d3:ac:84:
         62:fd:84:2d:d8:b1:a9:40:56:61:f2:44:79:24:e6:e1:ce:13:
         52:20:55:6a:6c:e5:0f:a7:9b:ea:c9:5c:4c:56:80:2c:f6:4e:
         bd:37:5c:e7:f6:82:24:8a:75:a7:c2:ce:3e:b2:3b:3b:1e:19:
         fd:87:d6:0c:bc:b6:8b:eb:2e:82:58:f0:4c:66:11:38:54:59:
         9f:a4:58:4b:aa:07:a6:af:04:99:60:96:c0:90:bc:62:fc:1c:
         64:76:56:e0:18:ef:0b:ad:1e:70:36:54:13:66:a2:a3:9a:c3:
         a4:5a:1b:3c:d0:3c:0b:1e:32:58:ea:0a:5e:8c:6e:ec:07:f3:
         59:98:70:35:f5:59:94:b7:28:38:46:39:06:bb:c6:75:06:f4:
         b8:81:64:56:31:95:20:c7:a4:ad:b1:67:c6:9e:be:ee:5e:71:
         83:a7:16:c0:df:b4:a3:9a:35:21:c5:4f:03:4f:de:4a:55:b8:
         7b:60:47:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----