Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5675/27DFF290861C11EAA1EBC46DC4F9AE02/FdDjXrbXDz7zDGrc4tAre1r5cD8.mft
File:                     FdDjXrbXDz7zDGrc4tAre1r5cD8.mft (raw, json)
Hash identifier:          q6oh6IQG8yHi6FpVjnx1tIxDWmbHBGKRGlOooI4znoo=
Subject key identifier:   9F:74:DD:9A:7B:10:07:E2:00:61:1F:42:15:AB:4A:44:91:4C:76:9E
Authority key identifier: 15:D0:E3:5E:B6:D7:0F:3E:F3:0C:6A:DC:E2:D0:2B:7B:5A:F9:70:3F
Certificate issuer:       /CN=A91F5675/serialNumber=15D0E35EB6D70F3EF30C6ADCE2D02B7B5AF9703F
Certificate serial:       085D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdDjXrbXDz7zDGrc4tAre1r5cD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5675/27DFF290861C11EAA1EBC46DC4F9AE02/FdDjXrbXDz7zDGrc4tAre1r5cD8.mft
Manifest number:          084E
Signing time:             Tue 20 Jun 2023 21:20:46 +0000
Manifest this update:     Tue 20 Jun 2023 21:20:45 +0000
Manifest next update:     Tue 27 Jun 2023 21:20:45 +0000
Files and hashes:         1: FdDjXrbXDz7zDGrc4tAre1r5cD8.crl (hash: Sn3ySsxWZc3/mV7r7mTT4UDXjzmH3kGqwTT1fb3WR2w=)
                          2: 3ECEC40406CA11EEAF47D95BC4F9AE02.roa (hash: MH9jphRnbHY/wYMF7uMVvDvnVQN3yiL9CWcqpQs+inU=)
                          3: 48C9241815F911ECB52DA912C4F9AE02.roa (hash: rt3YBGLGyzfnqOqlBciGlHT2244hUxgkZQZSIkLD7wA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2141 (0x85d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5675/serialNumber=15D0E35EB6D70F3EF30C6ADCE2D02B7B5AF9703F
        Validity
            Not Before: Jun 20 21:20:45 2023 GMT
            Not After : Jun 27 21:20:45 2023 GMT
        Subject: CN=6492182d-ed58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0c:21:e7:2b:a0:ef:95:d2:a6:c5:fa:9f:42:
                    fd:5c:ec:99:9b:70:27:b1:9e:c5:12:37:c7:97:3f:
                    2a:e4:d9:03:1e:2a:dc:6b:97:dc:8e:06:e7:99:de:
                    83:27:28:4c:d8:da:d8:e1:ca:a1:35:a3:fa:e6:79:
                    c8:a7:6a:a1:c5:fb:54:aa:a3:04:f6:87:dd:22:e2:
                    44:f8:2f:a5:cb:08:b4:d6:4e:8c:9f:6e:70:f2:83:
                    2d:46:7d:f6:ca:92:e4:22:4a:54:9c:eb:c2:a0:af:
                    2e:78:77:da:29:a6:73:05:9b:ec:33:fa:bb:4f:2f:
                    b7:e6:c7:ea:48:63:6f:a1:7d:d2:80:f2:15:4a:ba:
                    43:e9:ba:cd:29:8d:d6:ab:76:11:db:6a:3e:88:79:
                    8a:bb:f3:89:5a:bf:18:0b:67:a4:bd:94:cc:81:c6:
                    08:fd:63:8d:44:fe:60:82:61:f9:3f:9c:8a:86:30:
                    ea:ab:de:b5:14:4e:b9:2d:b1:5f:42:4a:f0:05:e8:
                    55:47:bf:c7:8e:b1:f3:4b:f2:de:bd:15:d4:7c:56:
                    23:a0:2b:e1:42:f0:c0:0e:ca:7f:3c:80:fa:a3:6c:
                    58:58:b3:76:a5:6a:0f:33:38:94:37:54:d0:86:d6:
                    48:d8:58:16:6f:96:0c:7d:2f:21:53:71:40:44:4a:
                    28:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:74:DD:9A:7B:10:07:E2:00:61:1F:42:15:AB:4A:44:91:4C:76:9E
            X509v3 Authority Key Identifier:
                keyid:15:D0:E3:5E:B6:D7:0F:3E:F3:0C:6A:DC:E2:D0:2B:7B:5A:F9:70:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5675/27DFF290861C11EAA1EBC46DC4F9AE02/FdDjXrbXDz7zDGrc4tAre1r5cD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdDjXrbXDz7zDGrc4tAre1r5cD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5675/27DFF290861C11EAA1EBC46DC4F9AE02/FdDjXrbXDz7zDGrc4tAre1r5cD8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:bd:fb:f6:f5:8a:b3:04:27:7a:a3:3e:3b:4d:a6:36:5d:68:
         7f:80:34:00:9c:f3:3a:d2:8e:ef:2b:c7:56:7f:38:71:f6:53:
         8f:26:3b:f8:5f:9d:56:f4:8b:0b:85:db:39:2c:bb:5f:8f:c8:
         8a:d2:cc:9d:51:01:f5:4e:c5:ea:58:85:0c:0e:b3:26:14:9e:
         82:04:ed:38:13:19:71:05:47:82:2d:9a:92:b8:d7:3d:f5:8e:
         cc:fe:20:fd:4d:65:d8:00:ea:56:ef:0e:11:9f:7f:0e:f6:fd:
         ab:d5:7a:b4:53:91:f4:e3:b9:fb:95:0a:51:f4:55:b1:4d:2e:
         25:77:44:33:f9:db:f9:ff:a1:7f:30:2f:0b:f1:fa:44:08:05:
         0c:21:a1:f0:ed:3e:31:c1:40:6a:87:dc:b0:38:1f:d9:0c:3f:
         07:ff:06:2b:b1:5e:9f:11:56:86:71:26:7d:e0:c2:4c:dc:72:
         ce:84:7b:64:b2:9c:46:80:a7:22:84:03:b4:80:0e:7c:d7:2e:
         ca:dc:a2:f3:27:3d:25:61:20:1a:ec:5e:11:97:73:dd:41:66:
         ec:3b:58:90:ad:b7:71:42:9c:ce:0a:bc:a8:93:5b:c8:22:a0:
         56:4a:6f:ab:f3:a8:e0:79:ce:ba:12:18:4c:3b:5f:15:84:1b:
         1f:da:f1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:48 2024 by rpki-client on console-fra.rpki-client.org