Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/0/22F3001F9B243F4B151CDC461E1723338F942856.mft
File:                     22F3001F9B243F4B151CDC461E1723338F942856.mft (raw, json)
Hash identifier:          oKlyC+HLiMX7stCvkdl6VoEBu+BD17TSoCVvps64nKk=
Subject key identifier:   54:88:CE:F2:08:F0:DA:5A:B3:03:81:5D:17:A9:63:1E:E3:E6:C8:36
Authority key identifier: 22:F3:00:1F:9B:24:3F:4B:15:1C:DC:46:1E:17:23:33:8F:94:28:56
Certificate issuer:       /CN=A917447B0000/serialNumber=22F3001F9B243F4B151CDC461E1723338F942856
Certificate serial:       45B9835D90E71CE03C745617F06BAE6073F8BB48
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IvMAH5skP0sVHNxGHhcjM4-UKFY.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A917447B0000/0/22F3001F9B243F4B151CDC461E1723338F942856.mft
Manifest number:          0D
Signing time:             Sat 28 Sep 2024 13:12:33 +0000
Manifest this update:     Sat 28 Sep 2024 13:07:33 +0000
Manifest next update:     Sun 29 Sep 2024 13:45:33 +0000
Files and hashes:         1: 3136302e3138372e3132342e302f32332d3234203d3e20313533333436.roa (hash: zdatglBG8NVd98wVQ6JXaNBxIN+l/Ysa52GNUM+xw20=)
                          2: 22F3001F9B243F4B151CDC461E1723338F942856.crl (hash: 4rc8Cey7GtGch2/ruAb19ehF7dO8yUWlA3Fh5ykbtao=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b9:83:5d:90:e7:1c:e0:3c:74:56:17:f0:6b:ae:60:73:f8:bb:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917447B0000/serialNumber=22F3001F9B243F4B151CDC461E1723338F942856
        Validity
            Not Before: Sep 28 13:07:33 2024 GMT
            Not After : Sep 29 13:45:33 2024 GMT
        Subject: CN=5488CEF208F0DA5AB303815D17A9631EE3E6C836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d1:41:c8:67:af:c1:92:37:9c:77:e0:8c:39:
                    df:40:7e:05:79:23:2e:b2:4e:19:aa:d8:66:7a:6e:
                    78:c5:d7:cf:22:09:13:e6:d3:74:d2:c7:f3:14:17:
                    30:ba:90:0f:ca:6a:da:c6:48:d4:58:44:d5:f5:cb:
                    88:16:b3:66:17:ab:3e:61:38:89:3d:a2:08:10:ff:
                    76:cd:9c:85:9c:c1:33:26:92:99:95:7b:de:cc:9d:
                    5a:e9:ad:02:33:1b:78:f7:91:76:7f:f8:4e:df:95:
                    8c:3b:53:14:9c:81:89:5f:20:c7:70:a5:f4:1c:e3:
                    b9:5d:ae:58:68:26:55:d1:e7:3a:ec:18:10:a1:27:
                    fe:a5:15:ca:75:f1:c7:f0:c9:3c:c7:c0:50:eb:84:
                    6c:8c:78:34:ca:96:e4:90:73:b9:27:a4:5d:a2:8e:
                    4b:9c:9d:ed:46:df:05:8b:b9:40:f2:71:7f:d3:a7:
                    b2:8a:ec:be:d0:f7:23:13:e0:f7:78:9e:29:ae:1f:
                    78:4c:e8:bd:81:96:7a:bb:ef:4c:21:91:67:27:81:
                    d8:51:c0:41:9b:5e:0f:7a:d0:1e:24:44:bb:c0:64:
                    3b:ac:ef:5d:02:9d:f2:d6:71:db:04:27:dc:5f:70:
                    a5:a1:18:59:e6:1f:d6:f1:f8:56:97:b2:bc:63:40:
                    af:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:88:CE:F2:08:F0:DA:5A:B3:03:81:5D:17:A9:63:1E:E3:E6:C8:36
            X509v3 Authority Key Identifier:
                keyid:22:F3:00:1F:9B:24:3F:4B:15:1C:DC:46:1E:17:23:33:8F:94:28:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/22F3001F9B243F4B151CDC461E1723338F942856.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IvMAH5skP0sVHNxGHhcjM4-UKFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/22F3001F9B243F4B151CDC461E1723338F942856.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:b3:e3:16:95:15:5c:6e:43:da:39:da:1a:14:da:73:26:0c:
         89:a1:a7:5e:d6:d7:3b:3e:9e:13:7d:71:9c:ee:28:17:dc:ae:
         f2:90:4d:cf:e5:fa:45:97:8c:a9:d9:1a:8f:89:22:77:b9:e0:
         86:1a:2d:8c:89:5c:7a:a4:1a:6a:e1:39:b9:42:98:f0:08:42:
         91:e1:e2:70:84:43:c1:69:bc:7e:31:c2:4c:03:64:ef:f6:92:
         a1:e5:7f:93:d3:e2:f0:9a:e9:8f:34:ce:e5:fd:b5:0e:d0:78:
         f7:d3:d6:52:07:71:8e:5a:ae:cf:09:35:6d:8b:23:59:a8:df:
         b7:7c:25:bc:ca:aa:45:89:ba:c7:95:63:c5:ee:eb:17:0a:63:
         d2:81:56:b3:79:83:c3:ab:04:f6:55:9e:21:04:0d:84:ef:27:
         7e:27:53:00:42:19:81:9a:ee:44:29:2d:4e:83:11:d5:41:62:
         f0:12:c1:51:4e:ba:44:eb:2e:3a:8b:ae:ba:1c:13:29:84:14:
         57:38:51:55:ec:e8:96:a9:f2:04:2c:d6:fe:a8:2d:ba:cf:b4:
         28:32:7e:d1:64:ab:26:ac:b9:df:89:fa:c9:ee:49:38:4c:e2:
         95:c5:f9:22:97:b7:c3:68:9c:e6:34:fb:6b:67:af:5c:ce:46:
         07:a4:7d:ee
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIURbmDXZDnHOA8dFYX8GuuYHP4u0gwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEygyMkYzMDAxRjlC
MjQzRjRCMTUxQ0RDNDYxRTE3MjMzMzhGOTQyODU2MB4XDTI0MDkyODEzMDczM1oX
DTI0MDkyOTEzNDUzM1owMzExMC8GA1UEAxMoNTQ4OENFRjIwOEYwREE1QUIzMDM4
MTVEMTdBOTYzMUVFM0U2QzgzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALHRQchnr8GSN5x34Iw530B+BXkjLrJOGarYZnpueMXXzyIJE+bTdNLH8xQX
MLqQD8pq2sZI1FhE1fXLiBazZherPmE4iT2iCBD/ds2chZzBMyaSmZV73sydWumt
AjMbePeRdn/4Tt+VjDtTFJyBiV8gx3Cl9BzjuV2uWGgmVdHnOuwYEKEn/qUVynXx
x/DJPMfAUOuEbIx4NMqW5JBzuSekXaKOS5yd7UbfBYu5QPJxf9OnsorsvtD3IxPg
93ieKa4feEzovYGWervvTCGRZyeB2FHAQZteD3rQHiREu8BkO6zvXQKd8tZx2wQn
3F9wpaEYWeYf1vH4VpeyvGNAr9sCAwEAAaOCAhswggIXMB0GA1UdDgQWBBRUiM7y
CPDaWrMDgV0XqWMe4+bINjAfBgNVHSMEGDAWgBQi8wAfmyQ/SxUc3EYeFyMzj5Qo
VjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMC8yMkYzMDAx
RjlCMjQzRjRCMTUxQ0RDNDYxRTE3MjMzMzhGOTQyODU2LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9Jdk1BSDVza1Aw
c1ZITnhHSGhjak00LVVLRlkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3
QjAwMDAvMC8yMkYzMDAxRjlCMjQzRjRCMTUxQ0RDNDYxRTE3MjMzMzhGOTQyODU2
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAtrPjFpUVXG5D2jnaGhTacyYMiaGnXtbXOz6eE31xnO4oF9yu
8pBNz+X6RZeMqdkaj4kid7nghhotjIlceqQaauE5uUKY8AhCkeHicIRDwWm8fjHC
TANk7/aSoeV/k9Pi8JrpjzTO5f21DtB499PWUgdxjlquzwk1bYsjWajft3wlvMqq
RYm6x5Vjxe7rFwpj0oFWs3mDw6sE9lWeIQQNhO8nfidTAEIZgZruRCktToMR1UFi
8BLBUU66ROsuOouuuhwTKYQUVzhRVezolqnyBCzW/qgtus+0KDJ+0WSrJqy534n6
ye5JOEzilcX5Ipe3w2ic5jT7a2evXM5GB6R97g==
-----END CERTIFICATE-----