Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCDE1/29E0B442B50D11EAAC6C401FC4F9AE02/wv8RXTELuRR83cdJkcwcRx-6Epk.mft
File:                     wv8RXTELuRR83cdJkcwcRx-6Epk.mft (raw, json)
Hash identifier:          KrgZ0nvM6RNm8iP8VmpOFq4A6Kfg+brT2KRddmg7Q/M=
Subject key identifier:   E0:D8:FB:A9:F0:CE:09:6A:85:0E:B0:8A:2A:77:B3:C0:C1:1B:31:4B
Authority key identifier: C2:FF:11:5D:31:0B:B9:14:7C:DD:C7:49:91:CC:1C:47:1F:BA:12:99
Certificate issuer:       /CN=A91FCDE1/serialNumber=C2FF115D310BB9147CDDC74991CC1C471FBA1299
Certificate serial:       0835
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wv8RXTELuRR83cdJkcwcRx-6Epk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCDE1/29E0B442B50D11EAAC6C401FC4F9AE02/wv8RXTELuRR83cdJkcwcRx-6Epk.mft
Manifest number:          081E
Signing time:             Thu 25 Jul 2024 10:58:55 +0000
Manifest this update:     Thu 25 Jul 2024 10:58:54 +0000
Manifest next update:     Thu 01 Aug 2024 10:58:54 +0000
Files and hashes:         1: wv8RXTELuRR83cdJkcwcRx-6Epk.crl (hash: D8uegd3Buif6DLWJXYExpPWVsUY1o8+LQU5O0ZimN8s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2101 (0x835)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCDE1/serialNumber=C2FF115D310BB9147CDDC74991CC1C471FBA1299
        Validity
            Not Before: Jul 25 10:58:54 2024 GMT
            Not After : Aug  1 10:58:54 2024 GMT
        Subject: CN=66a22fee-00e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bd:f4:6f:5d:14:91:cd:20:75:0a:05:2e:4d:
                    0d:bf:d9:5e:84:ab:78:a8:ba:d6:45:79:92:3f:7f:
                    6e:02:18:8a:f5:ac:3c:83:4e:8c:aa:cc:73:89:8a:
                    9c:b4:bc:8c:49:fe:97:88:2d:3b:5d:c1:55:ab:43:
                    64:ec:00:d8:9e:fb:75:03:d4:43:44:6b:da:fe:42:
                    b6:5b:08:8d:f0:d5:c5:c7:de:e4:40:da:08:70:08:
                    6a:26:51:b5:8a:57:54:3c:9c:06:ce:0b:94:15:0e:
                    be:2e:d1:94:bc:21:61:d5:6f:2f:b4:bd:2e:4c:97:
                    fd:22:8f:b8:86:dd:19:b3:07:1a:6a:47:e5:97:fb:
                    b2:57:1f:07:56:0b:45:67:bc:df:74:97:73:ad:49:
                    e4:cf:92:95:05:d6:7b:77:29:78:13:b3:a7:e4:f9:
                    e0:c5:3c:81:8d:f5:1c:c0:f2:51:aa:e6:a2:ee:cb:
                    71:47:e0:22:bc:0c:50:5d:a2:fa:01:c7:54:2e:19:
                    ff:77:53:d3:e9:c3:8a:bd:ef:a8:92:fd:48:2c:7d:
                    66:1e:9f:9a:56:b0:9a:53:84:71:e1:a0:2b:df:47:
                    ef:af:13:6b:d5:7e:dc:16:14:74:15:1d:89:eb:e1:
                    1b:16:8d:d2:2c:41:b7:ff:7e:a1:5d:9c:e5:e1:5a:
                    cd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D8:FB:A9:F0:CE:09:6A:85:0E:B0:8A:2A:77:B3:C0:C1:1B:31:4B
            X509v3 Authority Key Identifier:
                keyid:C2:FF:11:5D:31:0B:B9:14:7C:DD:C7:49:91:CC:1C:47:1F:BA:12:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCDE1/29E0B442B50D11EAAC6C401FC4F9AE02/wv8RXTELuRR83cdJkcwcRx-6Epk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wv8RXTELuRR83cdJkcwcRx-6Epk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCDE1/29E0B442B50D11EAAC6C401FC4F9AE02/wv8RXTELuRR83cdJkcwcRx-6Epk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:49:8f:74:fd:2e:4c:6f:de:df:33:a1:49:f9:df:86:da:47:
         4a:7e:56:0c:2f:c0:d5:c4:19:c6:7e:7f:4d:63:9c:08:b7:1e:
         50:54:35:49:91:d4:ca:aa:fc:47:81:d3:90:31:63:69:43:e6:
         38:4d:ac:0e:11:3b:bf:f2:1c:d6:55:ca:58:39:61:da:e2:ae:
         9d:b1:c4:56:16:c0:60:08:bd:bf:4c:5b:f1:7a:1e:95:36:de:
         09:3b:1c:1d:a9:6e:1a:3b:2e:39:4b:86:68:29:07:21:b2:62:
         e8:f4:6c:4b:63:f0:5f:ad:ff:b8:79:4a:20:2e:7d:30:5d:2b:
         2e:f6:d1:08:ec:59:f3:5e:f8:19:89:eb:0b:8f:0a:57:be:20:
         e3:c3:50:0e:81:14:cb:93:37:0c:1e:15:da:8e:03:d3:7d:9d:
         e8:ba:63:94:93:a1:31:04:da:75:08:97:9c:ba:0a:b1:bf:27:
         95:fc:2d:36:97:d0:e5:d4:a3:ae:48:9c:30:a1:10:b1:24:28:
         8c:e6:b0:bc:94:b1:d3:a9:c3:f3:48:b1:75:e7:d3:bc:22:bf:
         df:54:f0:69:4f:b2:83:32:03:91:1f:62:fd:46:29:0c:6e:01:
         90:14:e0:7d:87:56:6d:20:0f:b0:94:c0:e9:0e:b9:3c:a7:de:
         b3:91:96:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----