Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A918C2870000/0/1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.mft
File:                     1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.mft (raw, json)
Hash identifier:          g2fdOj8VMqj9LIKBE/A08PCc0bEMAfaeldSSmhrOLXw=
Subject key identifier:   DD:DA:5C:31:50:17:85:22:B0:47:D7:28:D3:8D:81:84:2B:67:75:C2
Authority key identifier: 1F:FF:7A:9D:D6:68:F0:B8:F7:A6:C1:98:7C:42:34:BD:9D:40:46:F3
Certificate issuer:       /CN=A918C2870000/serialNumber=1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3
Certificate serial:       41F529901AA585C73F594686EBAF72FEA04450BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_96ndZo8Lj3psGYfEI0vZ1ARvM.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A918C2870000/0/1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.mft
Manifest number:          10
Signing time:             Thu 22 Jun 2023 17:34:03 +0000
Manifest this update:     Thu 22 Jun 2023 17:29:03 +0000
Manifest next update:     Fri 23 Jun 2023 21:27:03 +0000
Files and hashes:         1: 1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.crl (hash: 2WUjftJ2QLnhRKW+cC8i88jv0jdzj4xWMQ0DpiT1LX8=)
                          2: 323430313a343630303a3a2f33322d3332203d3e203634343936.roa (hash: YA7OveE0RNikCGfwOZej1VNBrlBWWxGG35Qh7W6ZLgw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f5:29:90:1a:a5:85:c7:3f:59:46:86:eb:af:72:fe:a0:44:50:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C2870000/serialNumber=1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3
        Validity
            Not Before: Jun 22 17:29:03 2023 GMT
            Not After : Jun 23 21:27:03 2023 GMT
        Subject: CN=DDDA5C3150178522B047D728D38D81842B6775C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:25:a5:d6:9f:9e:60:6e:99:bf:d1:8e:85:11:
                    ed:ff:82:75:23:cc:33:4e:b5:bf:fe:3d:70:aa:a0:
                    6e:95:0e:da:c5:bd:a5:f0:6f:08:e0:0e:ba:41:c1:
                    da:8d:3f:b8:b2:4d:b2:60:c0:7d:f1:7c:20:06:32:
                    ef:a4:d1:04:0a:06:8c:98:c9:93:c0:e5:5a:7f:9a:
                    cf:bd:a4:3e:a2:e0:51:63:18:e3:8f:e6:11:62:85:
                    72:bd:29:ce:f6:c7:ac:75:9c:bf:01:7d:8c:20:f3:
                    8c:73:54:83:55:d4:ba:fe:c8:0f:e9:fc:b2:20:9a:
                    60:9b:40:1f:cf:68:35:eb:38:a7:4e:ab:6b:96:d2:
                    46:82:18:60:c3:e1:ae:f7:83:6b:bd:31:59:d2:52:
                    01:73:87:3a:62:db:a3:6c:6a:25:2f:d2:2e:a8:0d:
                    09:75:9a:70:7e:62:cc:52:42:0a:b9:80:6d:b5:a6:
                    a4:b7:a2:9c:10:f8:e9:6d:4d:b7:5d:00:14:be:2f:
                    bd:35:23:69:09:f7:46:18:f3:19:87:52:28:dc:30:
                    6b:ed:92:30:d8:53:43:75:29:de:28:eb:58:c8:6d:
                    f1:84:48:fa:70:a0:29:5f:ff:4d:dc:ed:fb:95:44:
                    93:5a:02:66:ad:0c:e9:7b:51:7a:68:7b:51:2a:22:
                    77:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DA:5C:31:50:17:85:22:B0:47:D7:28:D3:8D:81:84:2B:67:75:C2
            X509v3 Authority Key Identifier:
                keyid:1F:FF:7A:9D:D6:68:F0:B8:F7:A6:C1:98:7C:42:34:BD:9D:40:46:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_96ndZo8Lj3psGYfEI0vZ1ARvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b6:9d:f2:13:b9:eb:c8:e1:6a:ff:37:39:16:a7:34:5d:d6:
         06:d6:8e:f2:4e:b0:07:87:65:f0:7d:50:a7:a8:d9:d0:13:57:
         cc:46:4e:e3:23:b0:b4:3c:bc:24:84:e3:f3:49:6c:02:9a:e1:
         cd:f4:79:1e:a9:a2:fe:52:0b:84:41:2e:01:be:71:3d:c1:4e:
         8d:21:f9:53:32:da:48:d4:6b:52:f4:51:d3:16:46:19:fc:27:
         28:02:c0:cb:a1:cb:ed:d3:e9:5e:7e:bd:5f:cc:73:02:66:cc:
         10:de:55:a6:ae:89:0f:1a:33:fe:8d:84:3e:76:c4:28:81:3d:
         67:9f:d1:4c:b5:cb:6d:75:92:25:b6:d4:41:62:06:27:7a:73:
         27:7d:d1:48:b2:14:d4:25:ff:62:24:be:d1:3e:21:c8:16:a5:
         d9:a9:a4:a5:3c:b2:e8:7f:e1:96:c2:f4:4e:7f:53:62:33:81:
         2d:1f:c0:01:11:f7:cc:7d:50:8a:91:8f:5b:db:2f:05:31:75:
         f2:d3:78:1d:27:af:fd:56:c2:5e:58:94:eb:ce:e2:17:61:45:
         ce:d7:3e:b2:f0:2f:27:cb:52:5c:c3:2f:6e:60:f1:5c:d5:cf:
         a4:eb:67:24:e5:38:fe:1a:c1:5d:63:63:90:6e:ca:39:b1:ee:
         f4:d3:60:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----