Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9140C620000/1/873A06EC7A9774562F6DDB4A24D3EED1C1A2EB8B.mft
File:                     873A06EC7A9774562F6DDB4A24D3EED1C1A2EB8B.mft (raw, json)
Hash identifier:          qpPiGYrt07LnvswSdHzlJzkwCXEe9r5jSONKwN5OxO4=
Subject key identifier:   05:63:C8:E9:04:E2:03:FC:92:2C:E9:A8:60:06:2B:D5:75:02:8E:B2
Authority key identifier: 87:3A:06:EC:7A:97:74:56:2F:6D:DB:4A:24:D3:EE:D1:C1:A2:EB:8B
Certificate issuer:       /CN=873a06ec7a9774562f6ddb4a24d3eed1c1a2eb8b
Certificate serial:       62393078B1BD93A355974F5D9AB55CD295733482
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hzoG7HqXdFYvbdtKJNPu0cGi64s.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9140C620000/1/873A06EC7A9774562F6DDB4A24D3EED1C1A2EB8B.mft
Manifest number:          0E
Signing time:             Thu 16 Mar 2023 07:12:14 +0000
Manifest this update:     Thu 16 Mar 2023 07:07:14 +0000
Manifest next update:     Fri 17 Mar 2023 07:18:14 +0000
Files and hashes:         1: 3139342e3134352e3233372e302f32342d3234203d3e203631333137.roa (hash: LG6lVcPdqaJ6X1P0nhAsnz+mx0xiMAtxH3TRFrRxkTM=)
                          2: 873A06EC7A9774562F6DDB4A24D3EED1C1A2EB8B.crl (hash: KZdTb3+gqBtOi4Iv8rHpq4tlkG3TW318HvQxcODkqDk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:39:30:78:b1:bd:93:a3:55:97:4f:5d:9a:b5:5c:d2:95:73:34:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=873a06ec7a9774562f6ddb4a24d3eed1c1a2eb8b
        Validity
            Not Before: Mar 16 07:07:14 2023 GMT
            Not After : Mar 17 07:18:14 2023 GMT
        Subject: CN=0563C8E904E203FC922CE9A860062BD575028EB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:39:78:d4:da:ba:10:d3:3f:5b:2b:28:2d:8d:
                    a7:8b:e3:fa:91:a1:2e:02:b5:d3:23:76:1a:27:41:
                    f1:99:ed:0c:b2:2a:55:25:93:80:da:90:5f:81:f2:
                    1f:37:17:bc:bc:45:b9:f2:30:93:00:56:cd:cd:ec:
                    5a:e3:81:b6:cf:2c:19:c0:58:de:43:19:05:5d:77:
                    4b:47:fa:43:8d:6c:f4:94:2a:19:a9:e4:c4:1d:4b:
                    e7:2f:1e:82:16:ba:ec:cf:6b:36:84:9f:d9:95:7d:
                    1f:3b:d0:7e:0e:70:9f:5c:2b:e8:66:1b:8a:8a:90:
                    5b:15:7b:c3:da:05:47:9e:7d:ed:2d:8c:0b:5a:be:
                    13:49:48:17:7d:68:37:10:6d:25:df:26:d8:5d:16:
                    a6:48:e4:2b:f2:28:ff:11:80:2c:4b:9b:84:bd:57:
                    c9:39:59:a8:cf:41:13:27:76:2e:66:36:0d:b9:82:
                    b5:ed:c7:e9:a7:24:ef:6d:03:4c:35:e2:75:f7:8e:
                    a7:d7:28:70:6d:4d:12:c5:44:9d:cf:87:5b:d7:92:
                    52:ae:bb:63:52:6c:3a:7a:7a:d8:0f:58:23:dd:fc:
                    d0:7c:90:b4:a2:8a:cb:c8:5d:49:2f:24:94:d6:3a:
                    3b:a7:ca:a3:d3:84:78:e9:f0:1b:a8:8c:3f:bf:3b:
                    5f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:63:C8:E9:04:E2:03:FC:92:2C:E9:A8:60:06:2B:D5:75:02:8E:B2
            X509v3 Authority Key Identifier:
                keyid:87:3A:06:EC:7A:97:74:56:2F:6D:DB:4A:24:D3:EE:D1:C1:A2:EB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9140C620000/1/873A06EC7A9774562F6DDB4A24D3EED1C1A2EB8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzoG7HqXdFYvbdtKJNPu0cGi64s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9140C620000/1/873A06EC7A9774562F6DDB4A24D3EED1C1A2EB8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:1b:13:49:5c:33:e9:0b:9e:8a:9f:d2:c7:53:08:02:bb:92:
         8b:20:a5:de:40:67:f8:33:0b:fb:8a:76:88:b8:80:43:f6:7d:
         89:67:12:72:21:d5:19:18:d1:09:d5:f2:dc:01:bc:45:86:0a:
         e9:a5:0c:f6:c9:8e:04:a8:a0:e0:73:05:1b:a0:64:6c:fe:3d:
         51:d5:58:50:4a:ec:32:6b:b0:4a:7b:61:2f:6b:ed:a1:ea:c0:
         68:18:51:86:ee:ce:bb:5d:f6:80:96:00:f0:d3:56:38:6a:1a:
         77:a4:a0:f7:da:99:9d:95:a2:09:59:cb:f3:fa:1d:85:ae:7b:
         f2:75:36:cc:3b:db:ef:2c:08:d7:9c:ee:17:56:12:33:15:49:
         39:2a:72:55:80:3d:26:c1:46:d1:55:1e:bc:68:cc:b9:19:fe:
         63:e4:48:91:e5:97:87:86:92:66:f6:d9:25:12:a5:a4:56:4d:
         0a:d2:f9:7a:6a:5c:b7:30:75:0b:5c:75:de:f7:68:a7:6b:1b:
         c9:46:5e:df:68:8d:57:fa:a7:ce:f9:b1:18:18:05:9a:28:b9:
         3c:c5:bb:31:16:42:db:b9:97:00:5e:3e:b4:6a:1d:47:90:e9:
         38:d8:40:bf:5b:63:01:32:d5:88:0c:ca:f0:48:44:12:10:8f:
         e6:b0:ed:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----