Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F50AA/1494547A6C9411EA9B286233C4F9AE02/ixlfN4EFSbtbd6J-zKc6Li_Hogc.mft
File:                     ixlfN4EFSbtbd6J-zKc6Li_Hogc.mft (raw, json)
Hash identifier:          RyIXkluonN2QRtr75kTqdb6bKsCUy+bjz1E77857tL4=
Subject key identifier:   7C:04:81:C3:D5:23:9C:C2:36:F5:7C:BD:5E:26:30:84:79:08:0E:24
Authority key identifier: 8B:19:5F:37:81:05:49:BB:5B:77:A2:7E:CC:A7:3A:2E:2F:C7:A2:07
Certificate issuer:       /CN=A91F50AA/serialNumber=8B195F37810549BB5B77A27ECCA73A2E2FC7A207
Certificate serial:       0953
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixlfN4EFSbtbd6J-zKc6Li_Hogc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F50AA/1494547A6C9411EA9B286233C4F9AE02/ixlfN4EFSbtbd6J-zKc6Li_Hogc.mft
Manifest number:          0947
Signing time:             Tue 13 Feb 2024 05:21:15 +0000
Manifest this update:     Tue 13 Feb 2024 05:21:14 +0000
Manifest next update:     Tue 20 Feb 2024 05:21:14 +0000
Files and hashes:         1: ixlfN4EFSbtbd6J-zKc6Li_Hogc.crl (hash: Cspurbb+/Pe/SUSp0yj3rvE7LXUk6oA0Ca40kxZ2h7g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2387 (0x953)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F50AA/serialNumber=8B195F37810549BB5B77A27ECCA73A2E2FC7A207
        Validity
            Not Before: Feb 13 05:21:14 2024 GMT
            Not After : Feb 20 05:21:14 2024 GMT
        Subject: CN=65cafc4a-4229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c1:bd:83:73:68:71:2d:31:84:cc:07:1a:46:
                    25:2b:d2:55:f6:23:4f:fa:03:60:fb:f2:06:80:60:
                    7e:ff:4b:e6:1b:88:53:79:6f:86:e2:c6:e3:08:ab:
                    70:9e:fa:8e:95:cd:b3:10:62:3f:c8:d8:b7:4f:60:
                    e8:23:f9:46:e9:66:8a:41:f4:0e:34:ac:16:26:4c:
                    a0:e5:66:2f:2b:fc:20:bf:50:63:53:59:9e:65:02:
                    91:ea:c6:9b:29:b9:2c:2b:0d:8d:10:a3:a9:c0:7f:
                    73:63:fa:b2:d0:e8:0a:8d:b8:4f:4b:fb:22:41:10:
                    e2:46:74:11:bc:a0:55:4c:9c:65:d0:b3:08:a9:6b:
                    6a:6b:6f:b6:88:76:b0:22:ea:49:df:b0:1c:5d:c4:
                    c0:07:2f:59:eb:8d:fe:a0:1e:94:f0:83:5a:4c:0a:
                    26:14:61:2f:06:56:9e:97:27:d7:db:fc:60:c0:7d:
                    3e:e9:25:dc:ec:39:48:9c:8b:9d:fb:13:ff:05:05:
                    41:61:06:9d:f3:63:76:75:e6:ba:66:32:a9:5a:49:
                    5d:05:ca:fc:8b:8d:f8:13:c4:e5:f7:22:28:1e:a1:
                    b8:f6:12:bb:ee:af:e7:44:4d:58:82:9d:bd:e2:f1:
                    40:f2:4c:71:13:00:84:87:7c:72:a3:10:ca:18:ff:
                    39:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:04:81:C3:D5:23:9C:C2:36:F5:7C:BD:5E:26:30:84:79:08:0E:24
            X509v3 Authority Key Identifier:
                keyid:8B:19:5F:37:81:05:49:BB:5B:77:A2:7E:CC:A7:3A:2E:2F:C7:A2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F50AA/1494547A6C9411EA9B286233C4F9AE02/ixlfN4EFSbtbd6J-zKc6Li_Hogc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixlfN4EFSbtbd6J-zKc6Li_Hogc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F50AA/1494547A6C9411EA9B286233C4F9AE02/ixlfN4EFSbtbd6J-zKc6Li_Hogc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ad:3b:66:37:58:d7:42:52:07:bb:9d:7f:d3:fe:67:c2:9a:
         75:69:fa:ad:6b:2b:1e:f4:24:88:c5:52:88:5e:f7:34:ac:5c:
         20:0a:12:01:58:26:14:7f:f5:25:ef:9e:cf:4e:dc:2b:eb:1d:
         e0:6c:34:6b:9c:39:57:0d:02:6a:87:11:a4:c7:29:cf:79:91:
         c3:a9:73:13:6c:f7:1e:85:11:da:6b:07:51:d5:1a:01:0d:5a:
         b1:f1:97:ad:5d:1e:09:72:60:00:75:3c:9e:de:13:d5:cb:a1:
         ef:78:e3:6b:3d:42:f9:71:c3:2d:53:fe:57:c2:26:6c:a1:d7:
         03:7a:20:8b:ec:a1:9f:3a:b9:ea:c4:5f:3a:d7:64:3b:f4:ad:
         10:2c:74:94:08:cf:1f:a6:7f:4f:5c:31:49:1d:19:3d:89:1e:
         f2:9f:2a:03:45:c1:d7:35:4e:f7:fd:12:b9:2c:df:b6:48:f0:
         80:9b:95:76:d9:26:8b:99:a6:f1:72:a0:a0:24:40:a8:e5:89:
         8e:37:f8:ce:92:2f:b4:04:cc:c7:34:da:40:21:00:f2:e8:bc:
         81:f3:fb:4e:13:ba:1e:b1:98:bd:0a:1d:95:9a:de:af:4a:11:
         b3:b7:47:40:b4:af:3e:5c:18:02:94:58:27:f6:16:91:f5:47:
         5a:38:c7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----