Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft
File:                     jeHQtWEwmAuDkA-3j62mcN4uCmU.mft (raw, json)
Hash identifier:          s1XkRmPPL/fbGZ8zXStJfu7xcoYqdj/1IdABsODnSBQ=
Subject key identifier:   AD:2D:F6:0F:0A:69:CA:BF:81:31:A0:4E:1C:A4:5B:67:7B:22:4B:3C
Authority key identifier: 8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65
Certificate issuer:       /CN=A91281E0/serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65
Certificate serial:       0CC4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft
Manifest number:          0CBA
Signing time:             Fri 31 Jan 2025 18:06:01 +0000
Manifest this update:     Fri 31 Jan 2025 18:06:01 +0000
Manifest next update:     Fri 07 Feb 2025 18:06:01 +0000
Files and hashes:         1: jeHQtWEwmAuDkA-3j62mcN4uCmU.crl (hash: UoJ+pbqx+u8xY1G7ItqyJR8xf2mtC0APTPlQ4EOwRjg=)
                          2: 72B84162E2A411E9A300492AC4F9AE02.roa (hash: QrHwkCxaqX0D4CMUIb/gJ2hugEkme/UAAaAoVbq7U4k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3268 (0xcc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91281E0/serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65
        Validity
            Not Before: Jan 31 18:06:01 2025 GMT
            Not After : Feb  7 18:06:01 2025 GMT
        Subject: CN=679d1109-f6de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dc:f5:38:f7:01:fa:a5:bb:c9:f5:ba:1e:03:
                    bc:54:1b:98:61:d8:3f:e5:fe:2b:cb:b1:7d:72:4e:
                    7a:c3:7a:ba:97:89:7d:e4:03:35:82:f7:50:a7:ed:
                    92:bf:be:b5:df:61:bf:64:e9:0e:b0:ea:ed:a7:a4:
                    f1:5c:a1:4c:fd:05:88:20:05:e0:40:46:52:62:20:
                    a5:bf:08:50:57:17:c2:eb:d0:17:b1:2f:33:4b:7e:
                    7b:fa:38:a4:3e:d2:e3:21:8c:5a:f8:92:b0:cd:87:
                    56:38:11:3a:ed:07:36:48:5d:bc:34:80:4a:68:c2:
                    d9:4a:ea:e3:30:d7:e5:87:0f:f9:fa:9d:0e:db:c8:
                    0f:d0:a8:50:64:a1:f4:9d:f0:a5:85:24:62:b1:8a:
                    44:f6:76:2a:f9:cd:15:81:bc:97:50:76:d7:0d:cd:
                    7f:f5:da:0a:18:05:aa:13:4f:7c:33:3c:bc:6f:db:
                    2b:58:2c:01:c0:23:50:a3:a1:37:73:42:16:fd:89:
                    7b:3a:c8:b3:f7:3a:e4:3b:bf:44:46:26:b9:6d:6a:
                    22:7d:7a:de:9e:2f:3c:88:a9:63:2e:a9:f3:8b:d4:
                    b7:de:1b:fa:85:a4:d5:ab:2e:4c:4b:e8:f2:c1:a6:
                    86:59:55:b3:66:b6:f2:e5:cb:f1:64:84:c8:21:9f:
                    57:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2D:F6:0F:0A:69:CA:BF:81:31:A0:4E:1C:A4:5B:67:7B:22:4B:3C
            X509v3 Authority Key Identifier:
                keyid:8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:38:0f:42:33:ff:77:71:18:8b:6f:99:b2:8a:91:1f:83:f9:
         87:52:cb:28:4f:8b:b9:2f:57:fe:b6:3e:79:46:fe:bc:14:b7:
         ac:90:28:f9:10:c6:9d:18:5f:6c:61:f4:c2:97:e7:27:ad:dc:
         47:96:a4:cb:60:d8:c3:9b:2d:6d:ad:ee:98:ed:9b:83:9d:e8:
         da:6b:8f:4f:3d:d0:94:16:6d:95:a1:30:b9:33:fd:4d:4f:4d:
         e1:7e:0c:0a:e5:1c:2d:cb:d0:99:a3:83:68:b1:e6:72:87:7c:
         f4:af:51:96:9f:79:bc:6d:03:ef:89:1f:f0:ac:31:19:28:3a:
         2f:cf:5e:68:06:e9:fe:b5:c7:68:f4:59:cb:bf:bf:a1:6e:7e:
         14:d2:f2:30:48:b5:f1:5a:01:82:34:4f:82:bc:f5:85:ba:91:
         cf:e6:f9:5e:1f:52:00:37:59:75:5f:8b:55:3e:8f:7a:2f:8c:
         b6:6e:cf:61:6b:de:6b:d5:54:9e:b1:73:33:5a:fe:64:27:f9:
         89:d5:e5:9f:d0:b1:eb:4e:bf:19:f5:00:36:68:41:d4:e1:76:
         b0:7e:26:44:38:1f:95:14:41:4c:c6:c6:68:cd:68:e7:66:0b:
         a9:02:81:9f:fe:f7:83:89:2a:4a:80:ce:23:2d:19:fe:9d:0f:
         39:0d:86:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----