Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A918C2870000/0/913F545EA088A9E81EBDFE45B3B159358FAAC137.mft
File:                     913F545EA088A9E81EBDFE45B3B159358FAAC137.mft (raw, json)
Hash identifier:          l3mdfJNtdCAmxspCtjsJNK6qwY1r+4Q8cOMdenoe9+g=
Subject key identifier:   CC:A9:49:3A:29:FA:CD:F6:33:E7:C7:E8:11:62:1D:4F:79:B6:EC:B4
Authority key identifier: 91:3F:54:5E:A0:88:A9:E8:1E:BD:FE:45:B3:B1:59:35:8F:AA:C1:37
Certificate issuer:       /CN=A918C2870000/serialNumber=913F545EA088A9E81EBDFE45B3B159358FAAC137
Certificate serial:       4E3BF0CF8BDFFB7D44B2CFD190A662EC00D406A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kT9UXqCIqegevf5Fs7FZNY-qwTc.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A918C2870000/0/913F545EA088A9E81EBDFE45B3B159358FAAC137.mft
Manifest number:          04
Signing time:             Mon 12 Jun 2023 12:07:03 +0000
Manifest this update:     Mon 12 Jun 2023 12:02:03 +0000
Manifest next update:     Tue 13 Jun 2023 15:37:03 +0000
Files and hashes:         1: 3230332e3137362e3138392e302f32342d3234203d3e203634343936.roa (hash: sNmfe2Z16hxAb03jOShXFBJXEr8qkpjFvq+rYRijptY=)
                          2: 913F545EA088A9E81EBDFE45B3B159358FAAC137.crl (hash: aYcBzT6990BMhHfgyz/dsfE0ro3zOjuZ0U0DFN5meco=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3b:f0:cf:8b:df:fb:7d:44:b2:cf:d1:90:a6:62:ec:00:d4:06:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C2870000/serialNumber=913F545EA088A9E81EBDFE45B3B159358FAAC137
        Validity
            Not Before: Jun 12 12:02:03 2023 GMT
            Not After : Jun 13 15:37:03 2023 GMT
        Subject: CN=CCA9493A29FACDF633E7C7E811621D4F79B6ECB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:06:a5:fe:c9:c7:47:96:c5:4e:12:5c:24:c4:
                    ec:22:ec:d3:37:29:de:22:5a:66:50:94:d2:6c:72:
                    65:d9:7b:cd:3d:05:4d:f4:7d:c7:25:72:ee:4b:f7:
                    36:42:04:50:2a:01:ec:34:3f:91:27:15:04:1e:87:
                    b1:18:41:d2:fe:ad:45:59:26:16:57:72:41:a2:94:
                    ce:e5:45:57:48:8c:14:7e:f5:9c:27:61:46:8a:a1:
                    b1:ca:81:54:b4:b5:8d:e0:9e:dd:b8:8e:2a:42:9e:
                    20:4d:da:bd:07:57:7b:cd:26:ed:27:d4:ab:23:16:
                    cc:07:c7:5f:8b:ff:dc:eb:4a:41:0c:6b:aa:b8:75:
                    a7:02:91:af:c1:5e:f3:bf:75:ee:a9:72:b4:79:c2:
                    59:3d:5a:d1:28:0c:2a:e9:df:ce:38:10:aa:e9:23:
                    11:c3:7c:51:9f:7f:81:ae:56:6b:3c:44:c4:c3:26:
                    c5:6f:ad:24:09:e5:78:23:b2:2d:81:8f:e7:de:57:
                    fb:97:01:56:9d:86:45:22:f5:70:b3:9b:27:31:cf:
                    94:52:03:5d:91:53:81:21:29:9a:cb:1e:f8:e5:5c:
                    80:bd:4d:df:08:01:0c:0d:3e:76:de:7f:fb:0a:33:
                    d6:68:72:36:36:f2:64:14:30:ae:16:63:3e:65:be:
                    f5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A9:49:3A:29:FA:CD:F6:33:E7:C7:E8:11:62:1D:4F:79:B6:EC:B4
            X509v3 Authority Key Identifier:
                keyid:91:3F:54:5E:A0:88:A9:E8:1E:BD:FE:45:B3:B1:59:35:8F:AA:C1:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/913F545EA088A9E81EBDFE45B3B159358FAAC137.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kT9UXqCIqegevf5Fs7FZNY-qwTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/913F545EA088A9E81EBDFE45B3B159358FAAC137.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d1:40:15:75:4d:c4:37:26:7b:ba:99:01:9d:0d:6e:93:bc:
         dd:96:8f:d6:88:f7:8a:8e:1e:44:c8:d7:ab:1f:02:8c:64:2f:
         8a:4c:e7:55:6a:16:c0:43:a9:ee:5a:64:e8:fd:8f:09:61:20:
         b3:d0:71:37:6c:0f:3b:5e:98:41:84:a3:e5:c2:d8:97:03:d3:
         11:94:17:40:19:f3:a3:1d:6c:07:ef:e6:f8:98:fa:3f:25:10:
         d4:88:f7:d3:e5:a3:95:98:50:53:b1:f5:88:10:71:f6:97:8c:
         36:e9:41:13:55:59:fd:9a:0e:ee:34:d0:44:ae:ba:5b:2d:c5:
         e8:d7:f0:63:2c:3e:49:ef:b1:e2:38:87:dc:54:38:33:14:ff:
         eb:08:21:16:13:39:8c:b9:a0:e6:9c:24:b9:98:30:40:4e:8c:
         df:fb:68:5d:d0:12:86:1a:8b:61:f6:6b:8f:41:eb:e3:8d:c8:
         00:44:d2:4f:72:74:f8:76:4e:5c:86:87:73:27:a1:87:a2:5d:
         e0:37:97:4f:e8:d2:df:7a:32:f7:88:69:c4:8f:37:3d:c3:24:
         13:62:ef:86:dc:3a:f4:c0:11:0c:b1:fa:47:37:4b:7d:03:cc:
         d7:bb:5a:65:a2:ef:5f:5c:81:5f:92:4d:ef:e3:4d:ec:29:f8:
         7e:6f:bd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----