Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/8/6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB.mft
File:                     6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB.mft (raw, json)
Hash identifier:          XSUa+IW7Ix/qZUheEY6GUvlCp+Wtbyi1xSMtjI8AaBQ=
Subject key identifier:   5C:B5:3A:9D:7D:DC:7D:BA:AC:ED:2B:B3:93:F0:4B:98:42:6C:D8:F4
Authority key identifier: 6F:20:4B:C2:AA:0D:E1:A4:00:1F:9A:CD:EA:09:92:55:CE:72:14:FB
Certificate issuer:       /CN=A91F73F50000/serialNumber=6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB
Certificate serial:       144C3EE088D885C919C9499077A15ED6D03003C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byBLwqoN4aQAH5rN6gmSVc5yFPs.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/8/6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB.mft
Manifest number:          0247
Signing time:             Mon 13 May 2024 23:48:56 +0000
Manifest this update:     Mon 13 May 2024 23:43:56 +0000
Manifest next update:     Wed 15 May 2024 00:11:56 +0000
Files and hashes:         1: 6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB.crl (hash: cSb0xAr1lVfT/bpIPZbPMW/u2d5ba8P8vJaI+wchSB4=)
                          2: 323430303a656261303a3a2f33322d3438203d3e2039383838.roa (hash: ifqo402YCWZhthXxmH57e5fXENAG2Rz9TPSmdb/L2jw=)
                          3: 323430303a656261303a3a2f33322d3438203d3e2039343439.roa (hash: wsRFv/hdrLecH0ou0olrksLECwM//yf9O9b1mCVk9yg=)
                          4: 3130332e3131352e39302e302f32332d3234203d3e20313531303432.roa (hash: K/KrDaljp1H4myaxPFT6dCIJNctB1j/tYPwu5Ytg03M=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4c:3e:e0:88:d8:85:c9:19:c9:49:90:77:a1:5e:d6:d0:30:03:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F73F50000/serialNumber=6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB
        Validity
            Not Before: May 13 23:43:56 2024 GMT
            Not After : May 15 00:11:56 2024 GMT
        Subject: CN=5CB53A9D7DDC7DBAACED2BB393F04B98426CD8F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:98:15:e0:26:6c:ae:f0:8f:fc:b5:f6:b3:28:
                    b4:0f:d4:06:81:fe:59:08:63:5d:13:68:16:cb:d0:
                    42:54:b2:8c:38:73:f9:6f:e9:a3:f2:5a:e4:dd:e1:
                    a9:43:6d:14:bc:23:aa:c7:18:dd:9f:13:0a:33:ad:
                    36:0b:52:38:9c:3f:78:28:05:d0:79:84:7f:a6:06:
                    9d:b4:d4:c5:03:d0:b9:e3:b0:a0:07:90:53:e4:12:
                    15:55:14:bc:96:03:58:dd:c6:c9:6d:ab:65:e4:4a:
                    92:f1:37:12:1b:bf:c5:68:b3:98:19:07:c8:3f:6e:
                    cb:a4:70:3c:e6:d9:88:f6:12:32:cd:9c:9a:0b:4a:
                    8c:a8:74:95:8d:eb:79:9f:5c:be:50:4a:5b:c3:e6:
                    ed:63:e9:a8:3d:2f:fd:11:8c:dc:ef:de:84:93:81:
                    21:c6:e0:2f:37:94:57:5d:67:42:29:3c:3b:aa:eb:
                    0b:e3:93:17:e2:1e:f0:cf:25:b0:ec:fe:8e:d9:89:
                    d4:49:75:53:51:f4:14:aa:60:26:89:78:3b:b5:60:
                    8d:ee:71:c8:19:b4:02:87:3f:0d:a5:26:b0:fd:ba:
                    f0:db:a2:ec:97:a7:e9:d1:b4:03:fd:0f:0b:aa:0a:
                    e8:e2:5e:28:6f:55:74:c1:71:9e:5d:ed:43:ce:5c:
                    08:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B5:3A:9D:7D:DC:7D:BA:AC:ED:2B:B3:93:F0:4B:98:42:6C:D8:F4
            X509v3 Authority Key Identifier:
                keyid:6F:20:4B:C2:AA:0D:E1:A4:00:1F:9A:CD:EA:09:92:55:CE:72:14:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/8/6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byBLwqoN4aQAH5rN6gmSVc5yFPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/8/6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c2:91:84:19:5e:0c:ce:bb:22:0f:0e:9a:d2:74:7a:55:ec:
         2a:9f:e8:29:32:c3:d1:c6:90:bf:f7:f7:0d:1c:28:e6:be:06:
         67:a1:10:11:84:c5:59:82:af:cc:db:2a:aa:2d:77:ef:76:11:
         61:a3:ad:e0:d0:3c:bb:43:c8:9f:ea:5f:c8:ef:e3:bd:13:65:
         1d:ed:34:16:f3:99:3e:70:2c:ce:35:05:4c:f6:a8:69:5e:25:
         63:08:c2:6d:88:e0:8b:dd:59:d7:57:2d:6a:51:6f:75:de:76:
         87:59:4b:4c:8c:09:30:46:30:dd:f2:3e:b2:43:c7:ff:01:9b:
         10:bf:7d:79:a8:ba:bd:6a:97:12:44:9a:3d:3d:49:a4:89:dc:
         c8:52:83:10:0d:ef:9c:bb:5c:18:68:59:b1:3c:1a:1d:3e:ab:
         af:88:05:7d:69:99:fd:bb:58:7c:5d:0b:cb:46:6b:70:bc:1c:
         c7:a5:bf:a8:d2:af:be:16:69:c7:49:76:0d:52:62:f3:9a:28:
         ef:d7:3a:ec:4d:fa:e2:80:37:d5:49:cf:d2:b0:82:8c:7d:07:
         ee:26:10:9a:f6:39:93:eb:ae:eb:c7:9f:85:7e:56:a5:a4:57:
         38:aa:91:2c:f4:72:93:7a:37:dd:dc:79:53:67:12:7c:e0:96:
         a6:f6:cc:a3
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUFEw+4IjYhckZyUmQd6Fe1tAwA8cwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjczRjUwMDAwMTEwLwYDVQQFEyg2RjIwNEJDMkFB
MERFMUE0MDAxRjlBQ0RFQTA5OTI1NUNFNzIxNEZCMB4XDTI0MDUxMzIzNDM1NloX
DTI0MDUxNTAwMTE1NlowMzExMC8GA1UEAxMoNUNCNTNBOUQ3RERDN0RCQUFDRUQy
QkIzOTNGMDRCOTg0MjZDRDhGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPOYFeAmbK7wj/y19rMotA/UBoH+WQhjXRNoFsvQQlSyjDhz+W/po/Ja5N3h
qUNtFLwjqscY3Z8TCjOtNgtSOJw/eCgF0HmEf6YGnbTUxQPQueOwoAeQU+QSFVUU
vJYDWN3GyW2rZeRKkvE3Ehu/xWizmBkHyD9uy6RwPObZiPYSMs2cmgtKjKh0lY3r
eZ9cvlBKW8Pm7WPpqD0v/RGM3O/ehJOBIcbgLzeUV11nQik8O6rrC+OTF+Ie8M8l
sOz+jtmJ1El1U1H0FKpgJol4O7Vgje5xyBm0Aoc/DaUmsP268Nui7Jen6dG0A/0P
C6oK6OJeKG9VdMFxnl3tQ85cCGECAwEAAaOCAhswggIXMB0GA1UdDgQWBBRctTqd
fdx9uqztK7OT8EuYQmzY9DAfBgNVHSMEGDAWgBRvIEvCqg3hpAAfms3qCZJVznIU
+zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvOC82RjIwNEJD
MkFBMERFMUE0MDAxRjlBQ0RFQTA5OTI1NUNFNzIxNEZCLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ieUJMd3FvTjRh
UUFINXJONmdtU1ZjNXlGUHMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz
MDAwMDAvOC82RjIwNEJDMkFBMERFMUE0MDAxRjlBQ0RFQTA5OTI1NUNFNzIxNEZC
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAHcKRhBleDM67Ig8OmtJ0elXsKp/oKTLD0caQv/f3DRwo5r4G
Z6EQEYTFWYKvzNsqqi1373YRYaOt4NA8u0PIn+pfyO/jvRNlHe00FvOZPnAszjUF
TPaoaV4lYwjCbYjgi91Z11ctalFvdd52h1lLTIwJMEYw3fI+skPH/wGbEL99eai6
vWqXEkSaPT1JpIncyFKDEA3vnLtcGGhZsTwaHT6rr4gFfWmZ/btYfF0Ly0ZrcLwc
x6W/qNKvvhZpx0l2DVJi85oo79c67E364oA31UnP0rCCjH0H7iYQmvY5k+uu68ef
hX5WpaRXOKqRLPRyk3o33dx5U2cSfOCWpvbMow==
-----END CERTIFICATE-----