Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft
File:                     iJMypOJcIeib-kP6AC0tHwrX55c.mft (raw, json)
Hash identifier:          2U6CoR8ceCod5G665iTc9yBdM+zoUFjyipoJcIKiGbs=
Subject key identifier:   4D:D0:B4:1D:99:54:2F:06:E1:6A:53:DC:99:9D:A8:D7:7F:BA:8E:88
Authority key identifier: 88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97
Certificate issuer:       /CN=A911BCF8/serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797
Certificate serial:       0C36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft
Manifest number:          0C28
Signing time:             Fri 31 Jan 2025 18:19:42 +0000
Manifest this update:     Fri 31 Jan 2025 18:19:41 +0000
Manifest next update:     Fri 07 Feb 2025 18:19:41 +0000
Files and hashes:         1: iJMypOJcIeib-kP6AC0tHwrX55c.crl (hash: xrhjco6UnVApIshZ2KIHcJvQX1nNu1G65xWNAVFty/Y=)
                          2: AFA9D654D9F711EEA1409D5DC4F9AE02.roa (hash: jv9kj6qt4NhPT9yq4nsD+F0WmRlH/hpUG9ulUFAbwwk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3126 (0xc36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BCF8/serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797
        Validity
            Not Before: Jan 31 18:19:41 2025 GMT
            Not After : Feb  7 18:19:41 2025 GMT
        Subject: CN=679d143d-91cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e5:11:95:76:55:47:05:7a:e3:87:8a:e0:0a:
                    c9:2f:e6:ac:96:7e:d3:4c:83:e2:b8:df:d3:0a:c4:
                    fc:80:74:27:af:a9:b0:69:e0:e4:e4:70:0b:8f:b8:
                    ed:39:c5:3a:04:9e:9e:3c:a0:5e:58:6e:b6:45:f9:
                    e8:9c:2f:64:71:d7:11:fe:c2:0f:97:03:13:13:8f:
                    a4:42:4c:1f:32:b1:4d:16:ed:0b:67:56:4d:6b:7e:
                    f5:de:5b:44:29:fb:77:ef:d3:c9:18:51:a9:13:29:
                    b9:cd:f9:0a:41:b7:ff:89:89:78:4e:cd:33:70:31:
                    ee:9b:2c:09:0f:e1:29:c1:6e:2b:69:12:75:6f:d6:
                    13:08:0e:1e:ad:ca:63:21:54:88:44:9f:db:54:5b:
                    fd:80:7b:36:0a:f6:39:f9:5b:ff:94:c3:8d:a6:e2:
                    e5:9a:46:fe:a6:90:b6:07:d1:83:8c:c9:15:2b:7f:
                    39:2c:22:7b:3d:02:e8:02:86:04:3b:74:d1:5d:80:
                    c7:ea:f8:97:65:f5:54:67:b8:f5:3f:42:a8:b7:2a:
                    f2:08:3f:b6:a4:e4:30:4c:bd:fa:69:18:55:8f:75:
                    86:5e:f6:1f:dd:70:00:62:05:39:a1:3b:81:78:dd:
                    37:0e:2f:11:33:eb:a6:87:74:94:99:2b:c1:3a:6b:
                    d0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D0:B4:1D:99:54:2F:06:E1:6A:53:DC:99:9D:A8:D7:7F:BA:8E:88
            X509v3 Authority Key Identifier:
                keyid:88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:cb:8c:31:e2:53:8b:42:48:95:06:6e:54:95:a1:96:91:73:
         be:12:8a:3e:75:cb:17:5f:74:d5:46:cb:53:5f:94:f0:63:0c:
         1a:f8:f6:55:b5:66:64:54:2d:cd:52:49:cd:65:fa:e3:39:96:
         14:a9:1c:d3:cf:d2:34:95:27:10:a7:55:81:57:0d:bd:a3:96:
         94:c2:bd:4a:46:57:0a:90:49:f8:10:94:71:5e:23:b0:5b:16:
         20:b1:e8:08:03:e2:d0:f9:4c:07:36:e7:b1:96:15:a4:a1:9b:
         72:b1:32:44:d3:a9:7b:2c:41:4d:e4:7f:44:7d:02:56:61:4f:
         67:67:a9:a7:79:42:22:3e:32:01:aa:0c:9e:e7:f2:90:7c:9d:
         8f:7c:18:e8:91:da:82:71:78:d5:db:75:61:a4:b8:c1:2d:de:
         18:c9:3a:87:bd:98:7a:b0:cb:3a:11:10:0a:ab:70:94:d6:1b:
         a8:9a:7e:34:64:0f:eb:81:dd:d6:9a:35:9f:7d:9e:0e:2d:88:
         f6:c9:4e:ff:1c:7b:b4:29:e9:2a:e5:8c:89:c2:38:9b:63:ac:
         8e:b6:8b:2e:7a:20:b6:3c:63:e9:86:ee:be:33:a3:a6:f0:97:
         46:f2:01:a4:c6:5d:25:ca:94:9d:11:a9:ec:39:e1:c6:31:82:
         61:84:48:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----