Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0D22/48EF65CC505511E9BD187068C4F9AE02/6gP4TS9BoVyubBzd2eM2g3j21tM.mft
File:                     6gP4TS9BoVyubBzd2eM2g3j21tM.mft (raw, json)
Hash identifier:          9EO3uKyFHtWwn/vEPeB8tkm3V6mJzT6mKBcdYZgPeW8=
Subject key identifier:   18:03:3A:B7:9D:E6:F0:4B:4E:61:38:C1:71:3C:2C:7E:AC:64:4A:EC
Authority key identifier: EA:03:F8:4D:2F:41:A1:5C:AE:6C:1C:DD:D9:E3:36:83:78:F6:D6:D3
Certificate issuer:       /CN=A91F0D22/serialNumber=EA03F84D2F41A15CAE6C1CDDD9E3368378F6D6D3
Certificate serial:       0EDD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gP4TS9BoVyubBzd2eM2g3j21tM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0D22/48EF65CC505511E9BD187068C4F9AE02/6gP4TS9BoVyubBzd2eM2g3j21tM.mft
Manifest number:          0ED7
Signing time:             Fri 12 Jan 2024 18:09:31 +0000
Manifest this update:     Fri 12 Jan 2024 18:09:30 +0000
Manifest next update:     Fri 19 Jan 2024 18:09:30 +0000
Files and hashes:         1: 6gP4TS9BoVyubBzd2eM2g3j21tM.crl (hash: wBTnbU3ip4DTNOy/VvmmlDOmPUml/tuSQfux/GqkVUI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3805 (0xedd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0D22/serialNumber=EA03F84D2F41A15CAE6C1CDDD9E3368378F6D6D3
        Validity
            Not Before: Jan 12 18:09:30 2024 GMT
            Not After : Jan 19 18:09:30 2024 GMT
        Subject: CN=65a1805b-1955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ad:23:75:f5:cc:32:e1:27:75:c5:88:4b:6f:
                    41:59:16:59:09:34:a3:38:c2:84:dd:07:1b:77:c4:
                    20:1e:09:df:99:5f:37:8c:47:70:94:02:8c:08:da:
                    b6:b0:37:b6:7b:1d:c8:72:88:dd:c7:8f:06:9c:88:
                    83:9e:ee:37:0d:72:b0:80:d9:fe:ac:c2:7f:9b:9a:
                    36:8a:4f:64:fd:58:54:4b:58:04:9b:a5:be:b3:8e:
                    b4:72:31:3d:94:ab:02:f8:9a:3a:f4:e6:ec:38:f1:
                    5f:3c:5c:ed:8b:47:dc:db:7b:12:ff:af:55:6c:30:
                    c9:80:8d:16:98:11:32:5b:82:b6:08:c6:a0:9c:8b:
                    3e:89:4a:17:a9:89:6a:c6:32:9f:dd:7e:96:b4:ff:
                    dd:55:5b:80:e6:bd:52:4a:6d:61:34:a0:df:90:ba:
                    da:4e:90:b6:e0:22:b0:1f:54:07:d0:34:54:85:16:
                    b1:c4:d1:1d:12:db:66:07:7a:24:b7:4e:bc:f9:ac:
                    4b:95:b5:2b:d8:f9:37:7f:7c:16:5c:2b:64:d0:c8:
                    98:99:f9:2d:e6:0c:ee:92:a2:df:55:d2:97:03:a1:
                    5b:8d:1f:d8:97:53:1e:0b:c9:02:de:85:05:f3:d8:
                    8c:ab:84:f7:dc:ea:5f:ac:cb:79:3e:50:e1:65:a8:
                    9b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:03:3A:B7:9D:E6:F0:4B:4E:61:38:C1:71:3C:2C:7E:AC:64:4A:EC
            X509v3 Authority Key Identifier:
                keyid:EA:03:F8:4D:2F:41:A1:5C:AE:6C:1C:DD:D9:E3:36:83:78:F6:D6:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0D22/48EF65CC505511E9BD187068C4F9AE02/6gP4TS9BoVyubBzd2eM2g3j21tM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gP4TS9BoVyubBzd2eM2g3j21tM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0D22/48EF65CC505511E9BD187068C4F9AE02/6gP4TS9BoVyubBzd2eM2g3j21tM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d1:bf:60:c5:80:53:d9:91:a1:37:4a:8b:0a:4d:2a:f4:f8:
         56:73:7b:6f:64:c2:cc:d7:5d:52:13:58:25:f0:3c:fe:3a:4b:
         01:2e:a9:e9:00:30:f0:1c:a7:d6:80:b4:dd:11:fc:5d:b8:3e:
         90:40:6d:c7:8e:6e:05:37:3c:02:3d:3f:03:4f:11:9e:c6:fc:
         70:18:81:5c:84:c7:05:f6:0a:3d:36:db:48:b2:15:74:0c:b5:
         56:16:ed:52:c5:b2:a2:bd:3a:db:11:f7:f4:04:66:6d:00:55:
         ba:bb:eb:fd:3e:dd:0d:ae:42:3b:a9:25:89:b8:7a:2f:4e:a1:
         66:ff:bc:38:09:22:43:31:cd:66:a9:90:45:67:15:f6:7f:38:
         e1:72:0c:11:0b:d9:8d:f9:ae:2a:77:3b:00:32:5b:64:ec:37:
         71:93:19:2f:21:d1:58:b6:7c:21:34:d3:67:4b:20:ee:b7:ad:
         96:c8:e6:a5:f0:61:f6:cc:b2:91:6c:38:1d:87:f7:97:64:f5:
         4b:18:19:99:2e:db:db:52:f5:72:67:1e:44:f0:75:fa:76:16:
         12:3b:ea:14:cc:4b:32:75:0c:c4:2f:29:78:d9:24:f3:78:91:
         f5:2e:34:0d:88:ca:73:96:0b:4d:eb:36:5c:75:cf:c6:4a:f0:
         e8:c6:ff:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----