Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91857810000/2/97508B29F78ADEFCCB2BEFECF1E21C0049121F8C.mft
File:                     97508B29F78ADEFCCB2BEFECF1E21C0049121F8C.mft (raw, json)
Hash identifier:          dM2mAGfn4B7/RIZdSFJsBkAzSapkUxRtVDiPq6e+Yn4=
Subject key identifier:   CA:D0:C2:B3:FC:D2:03:A8:CD:92:1A:3F:96:3C:7D:BE:60:97:46:DF
Authority key identifier: 97:50:8B:29:F7:8A:DE:FC:CB:2B:EF:EC:F1:E2:1C:00:49:12:1F:8C
Certificate issuer:       /CN=A91857810000/serialNumber=97508B29F78ADEFCCB2BEFECF1E21C0049121F8C
Certificate serial:       12ACA56C9BCEB85A81482C4E181F0B197A89192F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1CLKfeK3vzLK-_s8eIcAEkSH4w.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91857810000/2/97508B29F78ADEFCCB2BEFECF1E21C0049121F8C.mft
Manifest number:          20
Signing time:             Tue 07 Jun 2022 15:00:00 +0000
Manifest this update:     Tue 07 Jun 2022 14:55:00 +0000
Manifest next update:     Wed 08 Jun 2022 15:00:00 +0000
Files and hashes:         1: 97508B29F78ADEFCCB2BEFECF1E21C0049121F8C.crl (hash: svxA8v1L3t8xG7AxBfkY6ozAvx9ilbZcR36XR/g8hq4=)
                          2: 0B571D046EE5DDB45973505832427E4002C57BBD.cer (hash: miI+4WEltrDwm/mV1uCuCFCXGdqXIP+/S41VT/G4FBk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ac:a5:6c:9b:ce:b8:5a:81:48:2c:4e:18:1f:0b:19:7a:89:19:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91857810000/serialNumber=97508B29F78ADEFCCB2BEFECF1E21C0049121F8C
        Validity
            Not Before: Jun  7 14:55:00 2022 GMT
            Not After : Jun  8 15:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0b:47:af:c1:84:18:7d:cb:82:37:c7:cf:f4:
                    dd:89:55:25:2e:07:e7:96:44:f8:bb:22:ad:41:fe:
                    b3:cd:0f:a7:e2:7b:d7:7c:32:d6:d1:95:04:63:c9:
                    76:86:e4:0e:ac:b4:bc:bf:c7:46:92:7b:c6:97:4d:
                    7a:ee:a2:fb:19:eb:a5:a8:a4:df:0c:a1:98:a9:dd:
                    da:3e:7e:bc:85:18:81:7a:63:bf:4c:72:ae:50:5d:
                    c1:fc:2d:10:0c:b8:7a:9d:02:22:84:d5:9c:05:51:
                    fb:8e:d3:17:9d:be:26:db:cb:44:91:e3:73:58:21:
                    a3:dc:e2:a2:7a:eb:17:fc:37:b7:8d:2b:48:20:70:
                    40:39:97:5f:1d:e2:aa:4d:e8:a5:34:74:7c:51:27:
                    90:37:94:39:b0:23:7a:1c:74:bf:ec:91:f1:ee:58:
                    17:a5:3f:37:52:c9:25:28:b1:21:22:d6:b2:ef:23:
                    af:77:10:db:76:a2:3a:30:39:d1:a0:16:60:46:99:
                    07:d7:9e:ca:d6:0a:2b:fa:ec:6e:29:5a:bc:3b:c3:
                    8b:68:d7:6c:38:87:4d:b6:31:3b:a4:1e:12:07:54:
                    77:ac:23:fe:56:cb:26:29:cb:fa:8e:8c:ec:1b:d5:
                    fb:e5:4e:ee:bd:77:46:b2:a9:13:37:32:4e:19:1d:
                    31:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D0:C2:B3:FC:D2:03:A8:CD:92:1A:3F:96:3C:7D:BE:60:97:46:DF
            X509v3 Authority Key Identifier:
                keyid:97:50:8B:29:F7:8A:DE:FC:CB:2B:EF:EC:F1:E2:1C:00:49:12:1F:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91857810000/2/97508B29F78ADEFCCB2BEFECF1E21C0049121F8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1CLKfeK3vzLK-_s8eIcAEkSH4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91857810000/2/97508B29F78ADEFCCB2BEFECF1E21C0049121F8C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:dc:f8:c3:af:70:e5:b9:c5:22:86:3c:7e:ce:95:d0:b7:46:
         3f:08:f9:b5:52:19:9e:bb:74:8f:16:d9:4a:5e:84:f1:08:f4:
         5c:c7:4a:e9:dc:9b:3b:fb:d4:00:8d:9e:00:79:fe:de:f3:3e:
         93:17:ce:47:ee:bd:2d:8f:c7:96:05:c4:92:46:86:30:93:2f:
         c5:5c:bb:28:85:6f:6a:3d:84:db:6c:bd:57:ba:4f:0a:2f:25:
         2b:78:50:ad:e9:ff:7b:a1:bb:62:19:48:69:12:f6:ce:9c:9d:
         fa:a8:10:fe:ac:39:e9:b3:01:21:ef:dd:c9:5a:ab:7a:d4:7d:
         16:a2:4d:ed:79:2f:d1:58:68:e6:be:1c:8f:08:f4:22:02:96:
         4c:81:f6:65:bd:66:cf:c2:ff:63:52:84:98:dd:1d:88:c8:68:
         3e:06:ee:c4:d0:62:cb:a5:35:53:2d:1b:9a:36:2b:2c:ee:a8:
         2a:1f:06:da:6c:92:f7:4a:d7:ab:d2:0f:84:9b:6b:87:e1:0f:
         ab:6b:50:a1:81:c8:af:bb:f5:84:ac:d1:4a:c6:0f:dd:ed:3b:
         58:b1:ef:ea:50:e5:45:e6:60:66:f6:fa:49:ae:75:54:40:a3:
         dd:c4:29:8b:65:de:ac:2b:ec:7f:d7:36:1b:0d:57:cb:eb:4d:
         6b:61:c9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----