Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
File:                     GagF0CaVVoPz_uVj-Oagonjwv3E.mft (raw, json)
Hash identifier:          wOq1Uy3tARJgZvdWKfu2p8BKobOo6rJ+eLS7NP0u8/E=
Subject key identifier:   73:39:05:6A:E7:D6:B0:BC:A0:C6:9C:B2:C4:22:57:8F:FE:80:AF:85
Authority key identifier: 19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71
Certificate issuer:       /CN=A912111B/serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71
Certificate serial:       0620
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
Manifest number:          061B
Signing time:             Thu 30 Jan 2025 22:42:31 +0000
Manifest this update:     Thu 30 Jan 2025 22:42:31 +0000
Manifest next update:     Thu 06 Feb 2025 22:42:31 +0000
Files and hashes:         1: GagF0CaVVoPz_uVj-Oagonjwv3E.crl (hash: 4NGSj0hO6/e/vV83XW+00Xp3S+ZlqmeJ84AhHtvuZ6c=)
                          2: 6D3057FC85F511EBB5C36F09C4F9AE02.roa (hash: HJ5B1NeUHZuSr0dNR5r03BZuHl4ib3IbNLeDtkm6M04=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1568 (0x620)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912111B/serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71
        Validity
            Not Before: Jan 30 22:42:31 2025 GMT
            Not After : Feb  6 22:42:31 2025 GMT
        Subject: CN=679c0057-3f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:23:b5:04:2a:82:74:f2:be:6e:8d:b0:ad:b4:
                    80:fb:78:81:7b:e4:d6:a0:86:2a:6e:e1:95:bc:20:
                    c3:c6:df:4a:12:ff:38:6f:67:a6:c8:4d:da:fd:a2:
                    41:81:a2:19:60:d1:95:8e:c6:85:df:36:73:69:c6:
                    a6:96:24:f3:f9:53:0a:14:0d:d7:f7:31:41:f8:6e:
                    c9:a9:72:aa:42:80:2e:22:1a:41:68:70:b0:4e:e2:
                    2d:47:a1:c4:bd:bc:99:e8:0e:a0:d5:a6:68:25:aa:
                    1f:98:1c:8a:2b:f2:a8:65:0a:4d:05:64:48:e2:8b:
                    4f:89:dd:27:5d:03:d5:73:c0:33:7e:32:88:95:d6:
                    68:1a:ab:3b:4b:50:75:99:b5:6b:45:aa:b0:67:ee:
                    4e:8b:92:73:fc:9f:4f:53:33:3c:f5:81:82:5d:0e:
                    b7:cc:1b:28:6b:12:4e:51:41:f5:e6:bc:de:bd:f5:
                    dc:36:61:c1:9a:09:63:88:e4:4c:21:88:e5:8a:4b:
                    d2:b8:8e:5c:01:9f:f2:03:0e:a7:78:cc:94:e4:58:
                    59:e5:1c:13:a6:67:8e:58:a4:b6:d7:9e:ac:5d:00:
                    aa:12:93:56:bd:91:11:be:40:75:28:72:62:fc:b5:
                    ad:64:36:ab:f7:2d:f1:c8:94:73:a5:ee:96:6a:e7:
                    35:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:39:05:6A:E7:D6:B0:BC:A0:C6:9C:B2:C4:22:57:8F:FE:80:AF:85
            X509v3 Authority Key Identifier:
                keyid:19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f3:3c:7f:8e:78:0d:77:ee:8e:0c:cb:81:ed:d6:5b:d7:d0:7b:
         06:20:6f:0d:d0:20:28:65:e3:7d:ec:15:bc:5b:39:87:7e:f2:
         e9:0c:b3:3d:d2:fc:97:60:1c:f1:18:64:7c:cc:84:8f:23:27:
         4d:d2:9c:6c:8e:ea:1f:30:ea:a4:52:eb:a6:4d:5c:40:a4:00:
         c4:54:e4:d3:04:fe:fe:2c:61:a6:02:13:70:42:14:93:72:89:
         6a:90:43:c4:a2:e2:11:db:a9:0d:f4:ee:93:c8:7c:02:8d:04:
         79:8e:7d:a9:13:93:51:b7:7d:cd:f5:6a:45:a7:ec:87:40:69:
         c0:f5:ec:7a:16:10:ab:03:aa:98:21:98:5f:e6:f5:48:27:85:
         01:85:ac:1b:7d:c3:52:c2:83:1b:cd:62:49:38:d2:87:bc:78:
         25:0d:54:5d:36:65:88:f6:c1:d3:3a:a9:8a:ab:28:7a:c0:09:
         45:9c:27:8f:59:fd:2f:5e:37:64:66:35:c7:9f:c0:9f:eb:c0:
         1f:2c:51:55:90:18:0e:a4:ea:73:8d:24:c7:08:ca:bf:04:d6:
         53:2a:3c:d6:f5:8c:96:d3:f0:af:20:5b:80:3b:bb:04:cb:8f:
         6c:37:31:3f:7d:de:ad:a3:2a:1f:da:61:91:ae:33:5a:22:99:
         65:75:32:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----