Manifest

$ rpki-client -vvf rpki.rand.apnic.net/repo/pubServerRand/0/8F34F1F953AD0365767E21EABE35AB46B55B3E58.mft
File:                     8F34F1F953AD0365767E21EABE35AB46B55B3E58.mft (raw, json)
Hash identifier:          ODYkBkC08PkMK44J24PF2N/kN8x6QClqyDpn79EFuZE=
Subject key identifier:   85:FA:D0:F7:A9:B4:A9:1C:FA:99:63:C0:62:72:DA:14:D7:8E:F4:58
Authority key identifier: 8F:34:F1:F9:53:AD:03:65:76:7E:21:EA:BE:35:AB:46:B5:5B:3E:58
Certificate issuer:       /CN=A91872ED0000/serialNumber=8F34F1F953AD0365767E21EABE35AB46B55B3E58
Certificate serial:       674C233BD7F3E108540478325094EA5BDFC9BF2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzTx-VOtA2V2fiHqvjWrRrVbPlg.cer
Subject info access:      rsync://rpki.rand.apnic.net/repo/pubServerRand/0/8F34F1F953AD0365767E21EABE35AB46B55B3E58.mft
Manifest number:          080F
Signing time:             Thu 10 Nov 2022 14:52:28 +0000
Manifest this update:     Thu 10 Nov 2022 14:47:28 +0000
Manifest next update:     Fri 11 Nov 2022 14:52:28 +0000
Files and hashes:         1: 8F34F1F953AD0365767E21EABE35AB46B55B3E58.crl (hash: bQH4eiUwZNfjxZhGF+xFq1srdVVX44RIx3SDVdyx45M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4c:23:3b:d7:f3:e1:08:54:04:78:32:50:94:ea:5b:df:c9:bf:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED0000/serialNumber=8F34F1F953AD0365767E21EABE35AB46B55B3E58
        Validity
            Not Before: Nov 10 14:47:28 2022 GMT
            Not After : Nov 17 14:52:28 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3c:e6:45:5e:d2:13:8e:dc:c5:83:91:21:7c:
                    e3:e4:63:c0:c5:e8:e3:ee:b4:61:71:b0:94:3f:c1:
                    11:51:ad:34:8b:ac:12:77:23:ed:d5:fb:63:e0:c4:
                    59:d4:96:5e:42:8a:48:85:aa:25:56:3a:a3:26:14:
                    39:19:bc:39:29:d9:d2:d8:e0:1b:c1:7c:d9:44:22:
                    6f:e2:bf:8d:d7:90:cd:34:a5:4e:6e:56:95:ff:07:
                    c1:b9:08:9b:9d:68:73:fc:84:d9:f6:55:98:21:1f:
                    82:14:dd:09:07:3c:fb:1d:3a:dc:d4:29:a8:fe:e9:
                    8c:97:7b:69:37:17:b8:f4:99:5c:c5:38:d8:6d:d8:
                    79:47:80:56:df:b0:b7:aa:53:78:b4:51:9f:84:ac:
                    23:2e:92:88:a0:e7:d6:40:5c:f8:84:59:96:1c:f1:
                    53:66:6c:90:3c:8e:80:c9:44:25:61:91:0a:3b:7d:
                    09:a4:5f:c2:79:8f:cc:3c:a5:f6:d8:a6:56:5c:ed:
                    47:50:83:97:a3:2e:d0:ec:0c:d8:fc:65:f5:c8:5e:
                    ad:be:cf:30:73:24:3c:61:2b:1f:cc:9d:9d:de:b9:
                    00:c1:bd:e3:5f:00:85:d8:fd:ce:cf:4e:16:dd:75:
                    5c:d3:60:39:80:bb:0a:af:bd:aa:fa:8c:02:1f:58:
                    6a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FA:D0:F7:A9:B4:A9:1C:FA:99:63:C0:62:72:DA:14:D7:8E:F4:58
            X509v3 Authority Key Identifier:
                keyid:8F:34:F1:F9:53:AD:03:65:76:7E:21:EA:BE:35:AB:46:B5:5B:3E:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.rand.apnic.net/repo/pubServerRand/0/8F34F1F953AD0365767E21EABE35AB46B55B3E58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzTx-VOtA2V2fiHqvjWrRrVbPlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.rand.apnic.net/repo/pubServerRand/0/8F34F1F953AD0365767E21EABE35AB46B55B3E58.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:20:9c:ef:bf:5e:95:39:48:da:14:4a:a5:88:c7:7c:4e:95:
         06:5b:b1:d1:87:8a:e2:56:1f:29:dc:7a:c2:93:b3:98:7d:11:
         92:4c:23:9f:61:f3:63:c5:c4:8d:99:51:b9:64:d4:50:9b:d0:
         bf:72:7b:a3:0d:4e:6d:d2:97:fe:41:dd:7c:23:9c:d9:9f:f9:
         01:e7:05:a7:fa:7b:61:b6:cf:e6:8c:d2:a4:ba:cf:62:53:d6:
         5e:06:0a:b0:ec:ec:52:13:2a:8c:75:4e:9e:a3:76:89:22:fd:
         77:58:10:0f:3c:21:00:f6:43:d0:6a:a5:11:20:6e:3f:a5:a8:
         3d:73:c3:7d:17:9f:47:1c:c5:c9:df:c5:b2:cd:98:57:8f:d2:
         cf:ec:ed:a7:e0:da:1f:d4:b5:5d:42:42:fe:5d:97:fd:64:72:
         33:98:8f:97:1d:64:4b:03:ca:33:91:5e:6c:b1:bf:de:fa:4e:
         43:d9:0a:d2:67:8d:8f:ea:ff:29:06:0a:97:5a:e5:7f:58:3c:
         90:54:2d:b7:7b:d3:fb:5a:dc:5d:d5:0d:d0:fa:70:e6:38:11:
         ce:f9:53:92:0e:fc:41:a5:4c:07:c7:7c:c6:7e:27:8f:99:4b:
         d6:41:e0:d5:f3:12:ce:6a:63:08:9c:8c:dc:6f:cf:ca:ae:a2:
         5d:6a:74:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----