Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.mft
File:                     VloR-W0tjoTDhh_i4Psx3QvkBrI.mft (raw, json)
Hash identifier:          dsn7G7hvjktPWP/o9RE+xd+bKb5Rvkth+gyJY8Vhrtw=
Subject key identifier:   3E:6E:4B:0B:44:25:DC:04:04:DC:C8:BD:31:01:15:0D:8F:A9:5A:35
Authority key identifier: 56:5A:11:F9:6D:2D:8E:84:C3:86:1F:E2:E0:FB:31:DD:0B:E4:06:B2
Certificate issuer:       /CN=A912481E/serialNumber=565A11F96D2D8E84C3861FE2E0FB31DD0BE406B2
Certificate serial:       0963
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VloR-W0tjoTDhh_i4Psx3QvkBrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.mft
Manifest number:          095D
Signing time:             Thu 30 Jan 2025 20:16:15 +0000
Manifest this update:     Thu 30 Jan 2025 20:16:15 +0000
Manifest next update:     Thu 06 Feb 2025 20:16:15 +0000
Files and hashes:         1: VloR-W0tjoTDhh_i4Psx3QvkBrI.crl (hash: XzpwLmA7yxGV7lk7zFcxxa8kGeqHEMBjUijQKnmplDk=)
                          2: EE89292C896211EA9036675BC4F9AE02.roa (hash: lA5e2mSPqe8KgSZZwnBXpDPyEahqBBJS32O+7JF2tPE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2403 (0x963)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912481E/serialNumber=565A11F96D2D8E84C3861FE2E0FB31DD0BE406B2
        Validity
            Not Before: Jan 30 20:16:15 2025 GMT
            Not After : Feb  6 20:16:15 2025 GMT
        Subject: CN=679bde0f-d823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:83:b3:c4:c2:19:1e:ee:26:0b:15:7d:8d:
                    a8:23:17:58:3c:72:71:bb:33:24:f1:30:fe:d8:19:
                    75:ee:c2:6c:c2:f7:fa:75:71:37:33:ab:73:29:a3:
                    a8:84:70:c5:4c:78:63:1e:bb:ee:3b:00:61:50:b2:
                    3d:4e:54:b2:35:36:1e:73:6b:e0:4a:d4:af:fa:da:
                    14:ce:e8:04:3b:10:d3:9a:ee:88:de:6e:ce:76:5d:
                    e6:12:2e:42:f2:c7:da:ae:cc:e3:9d:a8:ac:ec:2c:
                    c0:87:c7:1c:a7:af:36:0e:49:14:d5:0b:24:77:7d:
                    f8:cb:19:d6:d4:26:14:a4:3d:dd:2d:7b:8c:8b:ac:
                    54:26:65:4d:00:ac:6c:4b:50:1f:cf:4b:58:aa:5d:
                    a5:34:0a:c5:52:85:c7:ba:f1:48:14:d4:c7:2f:49:
                    64:4f:f1:28:48:bd:be:58:70:6d:08:46:c5:81:b2:
                    1c:64:93:2a:ea:c0:c7:71:77:a0:2c:f5:b5:76:32:
                    4b:ca:b4:5f:60:2f:73:df:52:1a:46:36:4b:49:d8:
                    b9:82:12:dd:5b:a7:3a:5a:cd:c2:5e:3e:70:05:83:
                    e6:91:81:57:94:8f:9f:11:9e:8e:e4:a6:ab:ce:b6:
                    16:08:ef:22:e2:46:ea:55:9c:88:ef:ca:fe:fd:91:
                    60:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6E:4B:0B:44:25:DC:04:04:DC:C8:BD:31:01:15:0D:8F:A9:5A:35
            X509v3 Authority Key Identifier:
                keyid:56:5A:11:F9:6D:2D:8E:84:C3:86:1F:E2:E0:FB:31:DD:0B:E4:06:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VloR-W0tjoTDhh_i4Psx3QvkBrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:42:a0:4a:0f:40:b2:5d:57:24:a5:0a:8e:d1:84:4e:0e:ae:
         c1:81:11:84:a4:c3:45:14:a0:dd:05:14:30:62:a5:1f:a1:e5:
         7f:87:1c:d5:89:a5:35:21:8b:b0:83:f9:d6:3c:99:14:84:f7:
         ae:1d:47:c4:00:86:2a:68:54:5c:18:87:21:9f:56:4f:db:79:
         e2:8a:d8:0d:a4:c3:62:d5:ad:9e:05:82:10:ec:1a:f8:24:c7:
         7d:20:c9:cf:54:af:e2:72:5d:25:6e:8d:82:4d:3f:c2:51:c2:
         70:18:9b:12:fc:7e:fc:20:da:cc:ba:64:d0:af:44:47:d7:22:
         18:7c:7a:6c:ea:d6:a1:5b:4a:c5:74:dd:c5:18:e2:bc:5f:76:
         19:44:42:8b:51:0c:4c:94:bb:ea:f1:5f:74:29:97:34:1f:3e:
         01:54:f8:8f:1e:96:51:33:e8:18:dc:38:ad:26:f3:9c:3b:e3:
         93:ac:28:b0:3d:55:92:0b:d6:28:a7:47:12:c2:02:f8:b6:d9:
         5e:33:65:57:18:b8:d2:1e:32:3a:f6:88:ef:5a:67:8c:cb:6f:
         27:6e:a8:27:61:85:38:f6:74:60:79:5e:d0:37:31:d9:b4:65:
         3f:d9:5a:a2:9d:dc:a6:59:57:3a:94:bf:99:4d:12:47:d6:d6:
         6b:60:d1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----