Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft
File:                     3ETtNb69CygywHT8LEaqsM1oL94.mft (raw, json)
Hash identifier:          E0k4dVpavq/9oHLFyTKBay392s342yKmWx4Nx373BqY=
Subject key identifier:   3F:34:3C:6A:52:98:E7:1C:6B:EF:C8:3B:28:18:54:18:A3:2C:79:DF
Authority key identifier: DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE
Certificate issuer:       /CN=A9143B09/serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE
Certificate serial:       104A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft
Manifest number:          189E
Signing time:             Fri 31 Jan 2025 17:22:58 +0000
Manifest this update:     Fri 31 Jan 2025 17:22:58 +0000
Manifest next update:     Fri 07 Feb 2025 17:22:58 +0000
Files and hashes:         1: 3ETtNb69CygywHT8LEaqsM1oL94.crl (hash: jQ5pSfnM723gwh7y5Wx0RTsVbpPR8A/mfUDXbNbtloM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4170 (0x104a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143B09/serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE
        Validity
            Not Before: Jan 31 17:22:58 2025 GMT
            Not After : Feb  7 17:22:58 2025 GMT
        Subject: CN=679d06f2-5929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:10:fe:03:f7:27:70:cc:9e:dc:69:ac:ab:36:
                    5f:e9:0a:67:d5:f9:42:5d:30:d4:a6:ab:89:00:4f:
                    56:69:d3:f2:2f:6d:e5:f1:b1:ed:35:00:27:4a:be:
                    ac:bc:40:64:b3:4f:93:ea:ba:a6:d3:6e:88:26:31:
                    ff:09:0c:a9:f9:b1:fd:0c:b8:c5:9f:ec:c5:c8:e1:
                    42:c8:72:6a:47:03:fa:c0:bc:0f:e5:69:6a:3b:9e:
                    f1:6d:ea:cb:79:34:99:2c:e3:5e:d1:c1:6b:39:be:
                    14:98:b3:62:85:3a:2c:0b:50:af:f5:50:a8:04:4b:
                    bc:53:93:f2:a8:0d:ba:1f:6f:ee:29:0a:92:ad:8d:
                    2f:98:7b:c6:80:21:99:91:63:12:2d:cd:67:94:8f:
                    44:f0:9f:35:63:94:c3:ef:00:4e:90:eb:20:f6:f8:
                    9e:c9:09:91:42:1b:87:82:b4:ea:35:07:fa:09:aa:
                    69:90:90:82:26:45:4a:e5:26:31:66:1e:dc:27:c1:
                    97:38:05:93:b4:16:a7:99:d2:7a:98:31:c3:40:0b:
                    e2:c2:75:a7:9b:47:ac:35:77:3f:3d:4a:f9:15:5e:
                    95:da:f1:d6:86:2c:93:6c:66:28:67:5f:0f:db:3a:
                    2d:83:dc:0f:06:12:dd:68:22:a9:b2:a4:c5:2b:45:
                    00:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:34:3C:6A:52:98:E7:1C:6B:EF:C8:3B:28:18:54:18:A3:2C:79:DF
            X509v3 Authority Key Identifier:
                keyid:DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:4b:a8:49:6f:ce:34:a2:cd:2f:91:b1:2b:d2:f3:33:cc:0d:
         d8:9b:76:2f:95:e5:88:99:03:d0:1b:46:61:25:7c:ea:c5:d4:
         0b:cc:b5:41:02:2c:26:0d:a5:81:d3:2a:b1:13:dc:98:63:0a:
         42:a2:a3:90:c7:6c:12:6e:06:cb:4e:64:22:43:45:b1:d5:59:
         b6:72:c6:fa:67:e6:c6:81:a6:16:ba:0d:2b:17:d2:a3:2a:d7:
         0c:22:41:b7:dc:a4:53:96:1a:f6:df:1f:75:cd:7c:05:b0:4b:
         6a:20:21:18:25:08:e5:41:72:b0:c4:47:40:1d:6f:6a:79:46:
         a2:51:4e:2d:5e:cd:f8:47:0d:f1:32:a1:23:18:07:6b:2a:17:
         07:d9:ed:ac:9c:8c:b0:dd:5c:bc:1e:30:f0:09:dd:96:45:f4:
         a1:5b:c8:02:08:14:d1:be:2a:67:6a:4e:a9:52:62:ef:69:8b:
         a5:8e:89:af:40:84:ae:c3:23:87:5b:60:63:4b:61:6e:29:16:
         4b:48:63:59:94:9f:c5:65:93:f8:52:73:de:69:9e:9f:ff:e2:
         84:59:94:8c:cf:8e:e8:4d:86:93:12:13:b9:ce:22:4e:41:19:
         3b:36:50:e0:d2:59:55:7e:25:7b:d9:35:e4:80:e3:10:3d:7e:
         e5:dd:f3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----