Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91FA6CA0000/0/8206A8C59A4EEE4E543D4EF691089C306760AF9C.mft
File:                     8206A8C59A4EEE4E543D4EF691089C306760AF9C.mft (raw, json)
Hash identifier:          rWxM6uOGPDVzZnt5xHe09w3CJe3DS5CV191bnaLUs38=
Subject key identifier:   B6:AB:62:E2:F8:6A:A3:CF:26:E4:9E:8D:95:22:7A:B3:96:F8:64:3D
Authority key identifier: 82:06:A8:C5:9A:4E:EE:4E:54:3D:4E:F6:91:08:9C:30:67:60:AF:9C
Certificate issuer:       /CN=A91FA6CA0000/serialNumber=8206A8C59A4EEE4E543D4EF691089C306760AF9C
Certificate serial:       54963C45D1E9917D098880BA3201C0C242002654
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggaoxZpO7k5UPU72kQicMGdgr5w.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91FA6CA0000/0/8206A8C59A4EEE4E543D4EF691089C306760AF9C.mft
Manifest number:          EA
Signing time:             Mon 01 Apr 2024 15:22:23 +0000
Manifest this update:     Mon 01 Apr 2024 15:17:23 +0000
Manifest next update:     Tue 02 Apr 2024 16:46:23 +0000
Files and hashes:         1: 3230322e3133342e35362e302f32342d3234203d3e20383334.roa (hash: oMMKnNutMS1A4of0qUEwpt8dVXowu+fugPqQpbNDh58=)
                          2: 8206A8C59A4EEE4E543D4EF691089C306760AF9C.crl (hash: xEC1v8sc/RaDCig7KRYVR8vBBGrb+hRkVXcdAJR6/RU=)
                          3: 3230322e3133342e35372e302f32342d3234203d3e20383334.roa (hash: q2UFnkeX8fyTajN2V70/gDrp9rBmJzHix6i1AGagoUo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:96:3c:45:d1:e9:91:7d:09:88:80:ba:32:01:c0:c2:42:00:26:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA6CA0000/serialNumber=8206A8C59A4EEE4E543D4EF691089C306760AF9C
        Validity
            Not Before: Apr  1 15:17:23 2024 GMT
            Not After : Apr  2 16:46:23 2024 GMT
        Subject: CN=B6AB62E2F86AA3CF26E49E8D95227AB396F8643D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b3:ab:4d:c1:ac:51:c9:07:40:31:e6:f9:67:
                    9f:9e:a6:43:5f:ea:b2:93:e4:74:24:0f:78:2b:a6:
                    c6:80:c2:30:5e:98:89:82:52:bb:51:72:3b:07:75:
                    b6:7e:a2:ff:a3:58:cf:8e:78:2d:58:cf:f2:56:df:
                    89:92:1b:0b:2a:cd:b4:c2:a4:d5:d6:83:fd:82:35:
                    f7:2f:6f:e1:8c:03:b2:5a:dc:ea:91:8a:be:d2:87:
                    d4:f0:27:95:d1:90:a6:3d:00:46:83:97:fd:42:b1:
                    aa:42:20:01:85:87:3f:b8:5f:a0:db:fc:6b:df:ba:
                    af:45:44:06:8f:9b:46:7f:c5:5f:63:d4:c6:fc:26:
                    24:4d:90:73:dc:b0:4a:f1:e3:98:a4:ef:8f:f3:8b:
                    ea:be:13:1d:64:f7:6f:a7:ff:f1:73:d9:d7:a9:79:
                    e8:c1:18:51:d7:72:99:20:50:a7:8e:e8:c5:2b:8c:
                    f4:5b:51:39:36:03:98:52:ca:71:c2:34:15:7c:bc:
                    65:16:62:13:75:c1:c1:27:c1:4a:9f:7a:b9:54:d6:
                    24:f1:b8:7e:d3:cf:04:8e:c9:84:c4:7a:92:b4:69:
                    2d:a1:fe:87:92:83:dd:b2:9f:58:c6:29:23:89:a9:
                    9a:66:c8:6a:21:8c:ee:0a:81:a4:fe:76:13:79:81:
                    de:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AB:62:E2:F8:6A:A3:CF:26:E4:9E:8D:95:22:7A:B3:96:F8:64:3D
            X509v3 Authority Key Identifier:
                keyid:82:06:A8:C5:9A:4E:EE:4E:54:3D:4E:F6:91:08:9C:30:67:60:AF:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91FA6CA0000/0/8206A8C59A4EEE4E543D4EF691089C306760AF9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggaoxZpO7k5UPU72kQicMGdgr5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91FA6CA0000/0/8206A8C59A4EEE4E543D4EF691089C306760AF9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ce:1d:7a:9e:95:13:64:7b:59:41:8f:62:63:a4:d3:68:4f:
         76:13:bf:96:f7:42:ab:b0:20:a4:2d:c9:5b:a6:9c:13:8d:51:
         8d:c7:7d:0f:5a:40:6e:58:3e:54:a6:29:94:83:a1:07:a5:1e:
         19:2e:b9:33:a8:51:5e:d2:00:70:a9:23:61:e3:53:f6:0a:ca:
         55:de:b0:ee:f8:3e:27:c4:78:79:26:7c:13:96:e1:80:88:e9:
         95:e7:ab:68:b8:f2:b6:bb:c6:58:7e:ab:87:ec:93:35:a4:33:
         96:5f:eb:ab:ba:d7:2e:58:2c:dc:fe:07:dd:4c:09:95:87:a5:
         81:1b:a1:f0:35:ff:0f:1d:91:44:bb:e4:38:8d:68:ef:c6:ca:
         9a:51:e5:ba:98:50:11:0a:b2:3d:36:fa:c6:fd:5f:85:59:6f:
         20:b5:2b:45:07:a0:e3:4c:ac:30:db:bf:d2:d1:97:18:b3:ab:
         a2:5e:2f:a0:d9:0b:74:6e:61:ef:d1:97:77:06:a9:5e:02:67:
         21:06:f3:f4:64:29:f5:7a:e9:f0:19:11:f3:32:ad:ea:fc:ab:
         c5:20:90:91:24:1e:df:22:86:f4:bb:8e:f5:32:d5:6f:27:9b:
         8e:2f:84:ff:72:5a:d7:fc:8b:ff:1c:7f:ce:b3:9b:84:fd:59:
         5c:de:e0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----