Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.mft
File:                     8A5-TIBTz_oGjrc-lYiS3YvmGow.mft (raw, json)
Hash identifier:          igF7QTwTiulJ6BfystBImdd3F5UkFyQzuCzZMR5e+no=
Subject key identifier:   20:FC:CD:F4:7B:53:59:3D:D5:8C:3E:44:D0:13:1E:D9:88:5A:CC:E3
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Certificate issuer:       /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial:       284E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.mft
Manifest number:          2788
Signing time:             Thu 22 Feb 2024 15:55:50 +0000
Manifest this update:     Thu 22 Feb 2024 15:55:50 +0000
Manifest next update:     Thu 29 Feb 2024 15:55:50 +0000
Files and hashes:         1: 8A5-TIBTz_oGjrc-lYiS3YvmGow.crl (hash: B3qHjVp7GbT+p08gptKvEJUf5guciDNlLiR5REk0Y1c=)
                          2: 55793B52FF5011ED905E291BC4F9AE02.roa (hash: 82YSkNtUygP3DLbSwg1dcqZNf/PTmaxIbfdv/ieKCd8=)
                          3: A9E8AC90A72F11EE8223F64DC4F9AE02.roa (hash: 5Ox1I1QW9EuGi8INScoMyC6PMNFVkAdCugK+fEpBxSw=)
                          4: BC01F8AE245011EDB44E3D17C4F9AE02.roa (hash: 6rl+96t592ZkkhFsIYWH3Ret/1975V3e5QDkzkQUx/U=)
                          5: 6FCDB6A8AA0011EE8A93B210C4F9AE02.roa (hash: J/2Rf25Zy9QXyUnyAX7wVuLLPBvRXaeIFEX3922OCEc=)
                          6: AC1BEDA8779411EE87FF4F2CC4F9AE02.roa (hash: EUX0ekQSGObV1ooyZaiyfFneS3hB8yuX73vebYmykaM=)
                          7: A88E942229C611EEBD323E22C4F9AE02.roa (hash: f1m56dUWbU3UcIT7QEJxqzaPMDOeMeE0QAXSVkEgPOQ=)
                          8: E49250AA58E511EEB526084CC4F9AE02.roa (hash: XQQfWhvCN9ZAXF/mQh7qhMnLusSfzHoO3PDUGAZxGy4=)
                          9: 32357886CC6B11EC86ACA756C4F9AE02.roa (hash: LhJahMQYsYC4BfL2tyTi/ezaZcAKACvHLbBEgjj6/pQ=)
                          10: ADFE4CD4282A11EDAE487D21C4F9AE02.roa (hash: Dqc96UxFJqBIFonh564BI9HfQ8aTVjy91SqCqsMv5KA=)
                          11: 75828B2AC25A11EDB1218A54C4F9AE02.roa (hash: iLBvvtnYmdKnu+5XoTx/m6X+foEydaa9J2Y5JDN6nFk=)
                          12: 9BE4A856A08111EE8DDC9C39C4F9AE02.roa (hash: 5rx2KOBB2W5foYFCiyYDGt0awSfrE79Uv3T6YFSnquQ=)
                          13: 6F10B170AA0011EE8A93B210C4F9AE02.roa (hash: P28XeVkJ2Eo2X8qVWsf1tl/5n8LP/Y9s0SEYNM3sh3k=)
                          14: A5E6BFB42DDC11EE859D1C6CC4F9AE02.roa (hash: d+CEVlIyHpdGcKhWHmova4Q0IYUWyJiYflwzRrQ1zQY=)
                          15: 376FF15E955311EC95BCD54FC4F9AE02.roa (hash: i2fde4WxUN0it7p+szMso6m6om3L906svBFqXBZ0b74=)
                          16: CE67732CA95911EE9927E135C4F9AE02.roa (hash: JcGaYrhtny1N6kAjYvKaBNviDrd4ixcTcoUkNKKEclk=)
                          17: 9B17FBBE678011EA82DC7F32C4F9AE02.roa (hash: 6kkap2xveWjNLkP4JDf+598I67GVq95d8LL9dDbnBzs=)
                          18: 6CCD29E874C511EB87201E29C4F9AE02.roa (hash: DD8869c/p3oiaaekLZwXnS8f9fqgmyg05+I5nl4Xn6Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10318 (0x284e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
        Validity
            Not Before: Feb 22 15:55:50 2024 GMT
            Not After : Feb 29 15:55:50 2024 GMT
        Subject: CN=65d76e86-64b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9f:31:54:26:82:e8:a1:22:71:51:b7:57:61:
                    d8:e9:10:f3:24:be:9c:0c:77:69:11:d2:e8:ed:fa:
                    d9:0c:83:e9:f7:05:8d:8e:c9:6d:2a:16:61:8f:32:
                    09:aa:2a:96:2b:ac:50:37:24:61:8b:b2:8b:af:3c:
                    73:e6:7a:a1:b5:57:aa:5d:43:e8:24:bb:93:35:0c:
                    22:08:9d:99:3f:0f:a9:1d:37:c6:d8:f2:5c:f0:fa:
                    d1:4b:fc:09:64:9c:d5:3a:c0:e4:2f:93:d9:21:48:
                    cc:df:9e:95:68:79:d4:0a:99:86:7b:22:b9:c2:11:
                    6e:d9:10:dc:d4:4e:74:a6:95:db:b2:40:19:57:45:
                    63:d1:4f:df:42:41:45:0a:14:95:b4:82:9b:bb:b5:
                    04:ba:82:b5:92:6e:68:e7:2d:25:d3:2f:f3:2b:60:
                    c7:e5:e6:09:de:d7:be:65:89:4d:7f:47:f8:95:84:
                    1d:63:68:ea:38:4a:d6:8c:d4:9e:d8:4a:27:d9:ff:
                    0b:55:83:04:4e:d6:23:2f:6c:a2:06:a5:75:11:b5:
                    3e:4f:bb:d2:b2:9b:df:84:7b:71:86:88:aa:9c:3d:
                    2b:1f:ed:f5:24:8b:4f:c2:42:1f:18:de:c7:23:1e:
                    ea:ba:3b:ee:73:ae:53:6d:fb:56:6e:8c:dd:ee:32:
                    7e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FC:CD:F4:7B:53:59:3D:D5:8C:3E:44:D0:13:1E:D9:88:5A:CC:E3
            X509v3 Authority Key Identifier:
                keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:83:ab:02:8f:a1:fa:4e:bf:96:d7:c1:d8:d1:2a:e6:5c:0a:
         68:68:74:bc:0f:49:98:ec:c0:31:3f:11:ec:b4:94:4a:91:a2:
         e1:4d:4f:71:21:ee:f4:a5:c7:2e:da:e7:81:47:48:08:3a:30:
         b5:d5:b6:d8:8f:75:43:ff:eb:42:4b:e2:ca:8c:2c:12:a5:7c:
         ee:3d:07:5d:cd:17:4d:6a:ab:25:54:fd:c9:de:d2:16:a0:0f:
         b3:32:4f:fd:a4:ef:45:c3:b6:b4:ca:82:23:29:77:e2:14:ed:
         38:4a:29:98:20:d2:66:3d:01:d5:03:f4:eb:64:d6:e0:d1:f7:
         1f:dd:71:03:ae:4b:3d:69:0e:35:2f:4b:ab:2c:ff:ab:77:43:
         c7:51:0e:bd:15:56:b0:28:f3:e7:ba:2f:59:cc:93:30:3e:b1:
         7e:df:f6:de:54:16:8c:47:a6:d2:b1:fb:9b:97:90:dd:c9:99:
         52:65:dd:a8:df:1c:65:d9:b9:bd:00:0e:ce:49:6a:fc:15:d5:
         b3:00:33:d7:22:ee:df:14:73:27:74:63:08:29:00:ba:c5:5a:
         e9:06:d8:4d:50:e1:5e:06:07:86:80:6c:99:1f:78:2f:f5:d0:
         45:a4:7b:5d:ab:dd:78:cd:a1:7c:c3:f1:c2:b1:bf:fe:9e:a4:
         27:83:73:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 01:09:35 2024 by rpki-client on console-ams.rpki-client.org