Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.mft
File:                     BECEB6F76A19B81208F3D3402617F51AE69E8C24.mft (raw, json)
Hash identifier:          EZ2XAcRGDCGIOQlPfk3mtiIPQVW4CeE+6PDnSqvqei8=
Subject key identifier:   70:3F:FB:20:24:7E:6C:4A:AA:C3:69:6E:43:50:81:4F:1D:54:A0:CC
Authority key identifier: BE:CE:B6:F7:6A:19:B8:12:08:F3:D3:40:26:17:F5:1A:E6:9E:8C:24
Certificate issuer:       /CN=A91857810000/serialNumber=BECEB6F76A19B81208F3D3402617F51AE69E8C24
Certificate serial:       058E7C59B8D266E33502D46FD32AC6C2307904CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vs6292oZuBII89NAJhf1GuaejCQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.mft
Manifest number:          02CF
Signing time:             Wed 11 Sep 2024 19:57:59 +0000
Manifest this update:     Wed 11 Sep 2024 19:52:59 +0000
Manifest next update:     Thu 12 Sep 2024 22:34:59 +0000
Files and hashes:         1: 3130332e3134312e36382e302f32332d3234203d3e20383334.roa (hash: lc8C+rVpjveJmIIVmKC6ItzvbVT/O6GyM1GuQUePd4M=)
                          2: BECEB6F76A19B81208F3D3402617F51AE69E8C24.crl (hash: WH8kaccdvPIfiJ3BYfEBIlBBahUVEki2EtrvS6mVVFM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8e:7c:59:b8:d2:66:e3:35:02:d4:6f:d3:2a:c6:c2:30:79:04:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91857810000/serialNumber=BECEB6F76A19B81208F3D3402617F51AE69E8C24
        Validity
            Not Before: Sep 11 19:52:59 2024 GMT
            Not After : Sep 12 22:34:59 2024 GMT
        Subject: CN=703FFB20247E6C4AAAC3696E4350814F1D54A0CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:72:4d:58:38:c8:7c:03:60:71:e9:38:0e:91:
                    ac:24:82:15:65:4f:5c:06:54:83:5f:66:82:a0:a5:
                    e0:a6:eb:1b:57:6b:62:2d:50:69:7c:93:46:f7:f7:
                    5f:a6:cd:25:1e:2c:b4:1b:9d:41:09:a1:6c:dd:07:
                    5c:6e:c2:15:09:ea:d6:5a:f9:3a:20:e0:5e:72:a3:
                    16:cd:54:dd:fc:ae:3e:a7:e7:4b:62:8f:15:e5:9b:
                    08:65:2b:14:50:89:51:f7:2d:f9:2c:d9:e4:91:7a:
                    e6:1c:2a:01:1a:17:21:83:21:e1:8c:6a:0d:76:48:
                    8b:11:e9:bf:fe:db:4b:49:3a:c0:60:fa:c3:af:b3:
                    e0:07:68:c5:b4:8e:1b:cd:10:83:64:40:70:13:b4:
                    57:e5:1b:ab:73:a8:c4:42:d9:9d:b4:3b:1e:be:0b:
                    a1:71:2e:55:e7:3b:99:28:29:a0:30:be:f4:f4:67:
                    5e:f1:ee:df:24:d4:63:f5:9e:8d:4d:e0:a5:2d:f8:
                    20:81:45:0f:ef:4a:34:8e:00:f4:f7:72:ed:64:cf:
                    49:0c:49:f7:3d:e6:77:6c:9e:aa:9d:d2:bf:2b:ab:
                    18:29:b0:24:48:e8:17:28:ab:df:12:68:07:aa:54:
                    b9:29:1c:87:be:0d:f5:0e:b0:36:00:0f:cc:5b:e3:
                    9e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3F:FB:20:24:7E:6C:4A:AA:C3:69:6E:43:50:81:4F:1D:54:A0:CC
            X509v3 Authority Key Identifier:
                keyid:BE:CE:B6:F7:6A:19:B8:12:08:F3:D3:40:26:17:F5:1A:E6:9E:8C:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vs6292oZuBII89NAJhf1GuaejCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:3c:a4:92:a7:15:0e:1b:24:8f:8f:22:d2:2e:46:bf:b1:11:
         23:30:4d:b5:94:1a:59:10:5d:a4:c7:74:f9:3c:c2:2d:b4:a5:
         f2:cb:e4:cb:06:be:a9:a5:e3:25:a3:be:58:8a:3e:a0:d9:ae:
         25:8f:47:08:8f:51:56:ba:b8:bb:37:e0:d4:79:80:ea:87:66:
         bd:f8:48:3d:34:14:09:d6:22:be:f3:d0:f6:ec:96:e8:dc:ad:
         d4:9a:95:ec:a1:39:20:2c:a8:7b:39:e6:82:40:6f:90:e2:06:
         85:df:77:d7:42:f2:0a:19:28:4c:c8:04:01:16:2f:0b:45:20:
         a9:c5:bc:15:90:a5:8a:47:da:19:0c:6d:9f:1c:c7:43:39:90:
         20:dd:e8:d6:27:90:23:15:38:f3:14:29:64:8d:a1:1c:7f:c4:
         13:ca:4f:fb:9b:11:6c:ed:69:3d:78:37:e7:60:b3:68:db:e8:
         ac:7a:0c:9c:ca:78:fc:61:01:3f:94:9a:2f:e6:23:02:f8:de:
         75:d1:d8:1b:b2:27:3a:de:8c:bb:30:c6:54:fa:90:9f:6e:f3:
         cc:69:d0:5a:4f:10:03:96:5f:3a:89:61:3a:01:ea:9f:7a:b6:
         0f:a3:37:28:55:64:45:b1:f9:4b:d8:57:31:3f:2e:4e:2d:7d:
         27:78:f9:b1
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUBY58WbjSZuM1AtRv0yrGwjB5BMswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODU3ODEwMDAwMTEwLwYDVQQFEyhCRUNFQjZGNzZB
MTlCODEyMDhGM0QzNDAyNjE3RjUxQUU2OUU4QzI0MB4XDTI0MDkxMTE5NTI1OVoX
DTI0MDkxMjIyMzQ1OVowMzExMC8GA1UEAxMoNzAzRkZCMjAyNDdFNkM0QUFBQzM2
OTZFNDM1MDgxNEYxRDU0QTBDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMdyTVg4yHwDYHHpOA6RrCSCFWVPXAZUg19mgqCl4KbrG1drYi1QaXyTRvf3
X6bNJR4stBudQQmhbN0HXG7CFQnq1lr5OiDgXnKjFs1U3fyuPqfnS2KPFeWbCGUr
FFCJUfct+SzZ5JF65hwqARoXIYMh4YxqDXZIixHpv/7bS0k6wGD6w6+z4AdoxbSO
G80Qg2RAcBO0V+Ubq3OoxELZnbQ7Hr4LoXEuVec7mSgpoDC+9PRnXvHu3yTUY/We
jU3gpS34IIFFD+9KNI4A9Pdy7WTPSQxJ9z3md2yeqp3SvyurGCmwJEjoFyir3xJo
B6pUuSkch74N9Q6wNgAPzFvjnmMCAwEAAaOCAhswggIXMB0GA1UdDgQWBBRwP/sg
JH5sSqrDaW5DUIFPHVSgzDAfBgNVHSMEGDAWgBS+zrb3ahm4Egjz00AmF/Ua5p6M
JDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE4NTc4MTAwMDAvMC9CRUNFQjZG
NzZBMTlCODEyMDhGM0QzNDAyNjE3RjUxQUU2OUU4QzI0LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92czYyOTJvWnVC
SUk4OU5BSmhmMUd1YWVqQ1EuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE4NTc4
MTAwMDAvMC9CRUNFQjZGNzZBMTlCODEyMDhGM0QzNDAyNjE3RjUxQUU2OUU4QzI0
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAOzykkqcVDhskj48i0i5Gv7ERIzBNtZQaWRBdpMd0+TzCLbSl
8svkywa+qaXjJaO+WIo+oNmuJY9HCI9RVrq4uzfg1HmA6odmvfhIPTQUCdYivvPQ
9uyW6Nyt1JqV7KE5ICyoeznmgkBvkOIGhd9310LyChkoTMgEARYvC0UgqcW8FZCl
ikfaGQxtnxzHQzmQIN3o1ieQIxU48xQpZI2hHH/EE8pP+5sRbO1pPXg352CzaNvo
rHoMnMp4/GEBP5SaL+YjAvjeddHYG7InOt6MuzDGVPqQn27zzGnQWk8QA5ZfOolh
OgHqn3q2D6M3KFVkRbH5S9hXMT8uTi19J3j5sQ==
-----END CERTIFICATE-----