Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBECF/C064F8C8183C11EBB945EC0BC4F9AE02/v0SityIz_0i6eTAorF-voCrc_9A.mft
File:                     v0SityIz_0i6eTAorF-voCrc_9A.mft (raw, json)
Hash identifier:          HhuQXp/n8zTQFJ8K0Q7FUUyzNQ0ocUItvEBv/CpOdrM=
Subject key identifier:   D9:77:89:96:E4:69:EC:C6:B6:E5:B7:AD:AD:F6:9A:5E:F1:FA:05:B7
Authority key identifier: BF:44:A2:B7:22:33:FF:48:BA:79:30:28:AC:5F:AF:A0:2A:DC:FF:D0
Certificate issuer:       /CN=A91FBECF/serialNumber=BF44A2B72233FF48BA793028AC5FAFA02ADCFFD0
Certificate serial:       068E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v0SityIz_0i6eTAorF-voCrc_9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBECF/C064F8C8183C11EBB945EC0BC4F9AE02/v0SityIz_0i6eTAorF-voCrc_9A.mft
Manifest number:          068A
Signing time:             Thu 29 Feb 2024 22:56:57 +0000
Manifest this update:     Thu 29 Feb 2024 22:56:56 +0000
Manifest next update:     Thu 07 Mar 2024 22:56:56 +0000
Files and hashes:         1: v0SityIz_0i6eTAorF-voCrc_9A.crl (hash: +LUUH2JdEjHl2z+AqJ1k+PlxnETfE1WL23aqrnBgq8g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1678 (0x68e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBECF/serialNumber=BF44A2B72233FF48BA793028AC5FAFA02ADCFFD0
        Validity
            Not Before: Feb 29 22:56:56 2024 GMT
            Not After : Mar  7 22:56:56 2024 GMT
        Subject: CN=65e10bb9-fb5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:eb:b5:e5:48:bd:27:30:d5:93:a6:be:41:8b:
                    c6:e5:f9:45:bd:c5:34:ab:79:e2:ee:71:9e:d7:d7:
                    12:fb:50:38:a7:42:f1:54:dd:d4:84:08:50:11:c0:
                    32:ce:eb:da:56:60:05:2a:98:5d:d5:dd:91:4f:13:
                    85:6b:f5:06:47:8f:f7:4f:85:e5:e3:da:5f:0e:0f:
                    42:e5:6d:32:50:04:0f:42:46:a6:bb:a9:8d:13:c0:
                    13:b8:8d:33:3a:90:9a:c1:ee:de:35:21:86:10:cf:
                    fa:f7:be:cb:db:0c:a8:03:6b:bb:00:17:69:f1:6a:
                    1f:14:6b:82:b2:3c:a0:9d:61:7b:de:06:93:62:24:
                    bb:de:ee:70:91:58:b5:37:72:d6:4f:59:7b:48:bb:
                    10:c7:1b:b5:71:ef:e9:4d:c9:d4:61:7e:70:d2:f5:
                    98:ee:d8:3b:7f:af:cb:ee:1b:c0:38:d8:8d:bf:4b:
                    b9:b2:4c:10:ed:e7:ad:86:82:ff:b7:4e:58:2f:41:
                    2d:e0:8b:89:64:0e:37:c0:a8:04:75:95:cf:41:1d:
                    f0:3d:2a:7a:1e:87:fe:76:22:a8:14:2a:51:ef:68:
                    51:ae:52:b1:ba:d2:fd:b0:7e:3e:c9:77:93:a8:6e:
                    52:57:20:6e:83:5b:26:dd:2c:7b:49:c0:a8:26:2f:
                    27:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:77:89:96:E4:69:EC:C6:B6:E5:B7:AD:AD:F6:9A:5E:F1:FA:05:B7
            X509v3 Authority Key Identifier:
                keyid:BF:44:A2:B7:22:33:FF:48:BA:79:30:28:AC:5F:AF:A0:2A:DC:FF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBECF/C064F8C8183C11EBB945EC0BC4F9AE02/v0SityIz_0i6eTAorF-voCrc_9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v0SityIz_0i6eTAorF-voCrc_9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBECF/C064F8C8183C11EBB945EC0BC4F9AE02/v0SityIz_0i6eTAorF-voCrc_9A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:bb:95:35:68:2e:f0:b6:f3:2d:64:8c:67:0c:22:c9:a1:19:
         91:f5:d6:81:cd:e3:b7:93:08:e3:06:0c:b6:d5:c6:c5:21:d8:
         07:db:52:2c:8c:a7:62:a3:05:50:dd:d2:e4:b1:53:28:f5:90:
         ce:2d:bb:af:cf:90:21:b6:56:6e:49:aa:26:58:65:9c:db:cb:
         71:11:1f:c9:22:3b:22:1f:72:68:1a:24:5b:2f:6e:fc:dc:d2:
         37:30:83:bb:52:89:ad:e9:a6:c3:b7:dc:cd:13:f3:8a:c3:49:
         b0:76:9f:09:fc:af:2e:5f:f6:de:88:1d:ed:e9:94:e3:75:95:
         f3:17:bf:dd:0d:92:4d:6f:fc:58:e8:c6:52:b8:4b:09:92:80:
         0e:b9:1c:8b:f2:03:17:96:e9:71:95:bb:b0:7e:ff:3a:2f:ea:
         62:5d:28:9b:14:d3:f6:9d:ba:c7:42:fe:3c:d1:52:dd:21:8f:
         e7:76:d9:d4:cb:a9:0a:de:2b:90:c8:42:22:16:e1:96:0c:05:
         05:42:8d:f6:6a:5f:d6:d1:54:58:17:f7:10:1c:bb:75:c1:af:
         2b:60:c4:89:17:0f:0b:b8:4b:a2:45:06:9b:96:3a:35:d3:73:
         8a:45:12:ee:9b:f9:75:85:da:21:00:ad:90:71:5e:06:6b:07:
         ea:e8:bf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 2 07:13:37 2024 by rpki-client on console-fra.rpki-client.org