Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A916C75D0000/1/E3B1D97CE75EC9867761EB52E2B0EB09AA96B906.mft
File:                     E3B1D97CE75EC9867761EB52E2B0EB09AA96B906.mft (raw, json)
Hash identifier:          fK6/Qaj5umj2TnJUvsMot+ROQE5FGpebsct2D626miE=
Subject key identifier:   2E:BF:16:15:1E:9D:98:86:AE:8B:7E:89:4E:E2:B6:C6:B8:00:3A:2A
Authority key identifier: E3:B1:D9:7C:E7:5E:C9:86:77:61:EB:52:E2:B0:EB:09:AA:96:B9:06
Certificate issuer:       /CN=A91130000000/serialNumber=E3B1D97CE75EC9867761EB52E2B0EB09AA96B906
Certificate serial:       7E13EA269E00F45D84E1B97D3F0A93A5C8EA598D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47HZfOdeyYZ3YetS4rDrCaqWuQY.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A916C75D0000/1/E3B1D97CE75EC9867761EB52E2B0EB09AA96B906.mft
Manifest number:          5C
Signing time:             Tue 13 Aug 2024 19:43:54 +0000
Manifest this update:     Tue 13 Aug 2024 19:38:54 +0000
Manifest next update:     Wed 14 Aug 2024 21:42:54 +0000
Files and hashes:         1: 323430313a323132303a3a2f33322d3438203d3e20393833.roa (hash: iVPU1z8xAzQgMGbsoDFuWjsylOlC+g0YwUt41drOhbc=)
                          2: 3130332e3234382e3232382e302f32332d3234203d3e20393833.roa (hash: lGWnwbRTlkvAPUMHxdc2a9leF4q/I4r3P27i+wdtTyA=)
                          3: E3B1D97CE75EC9867761EB52E2B0EB09AA96B906.crl (hash: wspKgXJMBbWeQagR99npgquAIFTzZd0GmINUFsHO1Ng=)
                          4: 323430313a323132303a3a2f33322d3438203d3e203338313336.roa (hash: ogmFNLKzsVErjfQlTox04E6yTQGgoeo/2sqILyEzZSk=)
                          5: 3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa (hash: nxSYw+edE13o6RbaURQquf37VCgUf+t39zBRYe0iz2U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:13:ea:26:9e:00:f4:5d:84:e1:b9:7d:3f:0a:93:a5:c8:ea:59:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91130000000/serialNumber=E3B1D97CE75EC9867761EB52E2B0EB09AA96B906
        Validity
            Not Before: Aug 13 19:38:54 2024 GMT
            Not After : Aug 14 21:42:54 2024 GMT
        Subject: CN=2EBF16151E9D9886AE8B7E894EE2B6C6B8003A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c0:2f:a2:70:86:1c:84:19:e3:25:ce:b8:50:
                    d9:a3:ee:ee:e0:45:02:94:cb:4c:99:68:8f:65:87:
                    23:c2:16:7f:75:ab:ea:c7:aa:57:c3:a9:4e:94:20:
                    9c:98:06:67:81:d8:ab:85:4d:08:37:69:60:60:44:
                    35:5e:83:2d:e9:df:3e:d6:5d:9e:17:85:9b:9e:13:
                    a5:31:fb:fe:7c:48:2c:a8:2d:ae:3b:3f:3f:08:ae:
                    ba:3e:5f:ec:1c:b3:ea:4c:66:bb:fb:78:b8:b2:21:
                    c7:af:6c:17:c9:15:ea:94:06:29:97:12:4f:1c:9b:
                    4a:88:70:1e:23:96:63:a1:80:79:c4:94:c8:64:bc:
                    62:d0:a0:3c:1b:ac:c6:83:84:8d:6c:88:25:f5:2b:
                    4c:61:d0:a9:4e:89:45:a0:b8:9f:0b:f8:9e:1e:2a:
                    cc:68:81:87:ba:cd:2c:e8:58:6e:2f:da:28:74:4b:
                    ad:60:28:85:b1:91:38:c2:06:6a:00:9a:e7:9f:6f:
                    79:14:c3:9e:b2:7b:4f:47:a5:09:7c:f8:6b:a0:f6:
                    70:9e:51:26:88:fd:b5:2a:82:db:2d:b0:81:1b:76:
                    6a:41:10:3b:5d:96:a3:7b:32:c1:d2:f2:ce:5d:e4:
                    6c:da:82:74:60:84:dc:a2:c5:53:67:78:55:56:5b:
                    c7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BF:16:15:1E:9D:98:86:AE:8B:7E:89:4E:E2:B6:C6:B8:00:3A:2A
            X509v3 Authority Key Identifier:
                keyid:E3:B1:D9:7C:E7:5E:C9:86:77:61:EB:52:E2:B0:EB:09:AA:96:B9:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/1/E3B1D97CE75EC9867761EB52E2B0EB09AA96B906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47HZfOdeyYZ3YetS4rDrCaqWuQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/1/E3B1D97CE75EC9867761EB52E2B0EB09AA96B906.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:93:08:db:a3:d1:e4:b7:33:f6:bd:b8:24:36:37:cc:fc:4a:
         ec:9d:3d:5f:44:af:9a:5d:d8:be:8f:fb:63:e8:a0:c6:e4:0d:
         9c:8b:29:ac:08:3b:c3:4f:3c:8c:88:f9:e3:9b:3b:74:41:19:
         c1:6a:28:93:0e:b7:7d:15:46:51:8d:75:bf:05:d1:98:8f:a1:
         76:50:be:1d:99:f9:84:5f:b0:2f:9f:46:d1:bf:cf:c7:7a:b3:
         53:34:b1:fc:fa:f2:86:b4:56:2b:23:eb:68:38:f7:75:e7:0c:
         5a:92:c8:c5:9a:2a:60:32:7e:bb:de:5d:07:01:08:7f:7d:01:
         61:7e:ce:f6:46:ed:d6:be:c5:1b:97:b7:6f:ab:a4:5c:c2:4d:
         fd:6c:d6:77:7a:47:c8:7d:2c:32:df:02:55:48:1f:f1:30:e7:
         7d:c9:3f:12:22:f2:05:f5:85:6c:d5:75:4f:c9:c6:2c:89:2d:
         d9:fc:3f:67:6a:9e:a9:50:eb:c0:f2:b9:ad:fd:b6:31:86:6f:
         28:da:29:d1:d8:8c:64:b0:02:ce:00:62:7b:97:b5:3c:72:55:
         8d:41:18:74:d6:c6:28:41:69:dd:8c:5d:66:19:a8:21:c2:d9:
         58:63:a9:82:a5:9f:cd:da:c1:3d:07:0e:4a:a6:e3:51:c1:dd:
         cb:b4:19:34
-----BEGIN CERTIFICATE-----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