Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
File:                     UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json)
Hash identifier:          kd/AaR2Ill+UwbztpsKcqGC4rrkK4qmkMBt9KczV+50=
Subject key identifier:   07:40:7F:15:52:79:0D:41:C4:2A:20:34:06:49:22:96:3C:7D:63:32
Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0
Certificate issuer:       /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0
Certificate serial:       0A12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
Manifest number:          0A0C
Signing time:             Thu 30 Jan 2025 19:56:15 +0000
Manifest this update:     Thu 30 Jan 2025 19:56:14 +0000
Manifest next update:     Thu 06 Feb 2025 19:56:14 +0000
Files and hashes:         1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: TJBxtMZo2zhKCnG5s5cHuKZhEAohSMi6OT053/YBD5E=)
                          2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: nyOJoLIDGp7/wafl1yH4CbKrruUiB3iOpUkQ72n7ZjM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2578 (0xa12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0
        Validity
            Not Before: Jan 30 19:56:14 2025 GMT
            Not After : Feb  6 19:56:14 2025 GMT
        Subject: CN=679bd95f-0649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:59:ab:ca:d0:39:62:a0:d9:bd:aa:b6:6e:1c:
                    46:f9:5e:64:b4:a4:b8:02:63:03:cc:a1:e9:58:b6:
                    68:6c:4f:3b:34:51:cd:2a:e0:8b:0c:12:36:6f:24:
                    21:9b:23:30:4c:e0:cf:69:30:7e:66:e3:3e:71:85:
                    e0:7d:2d:8a:79:26:60:ee:85:d9:d2:ef:0c:27:9b:
                    f3:de:d3:7c:82:a3:82:76:e2:65:82:84:a0:ec:1e:
                    6e:32:37:b8:60:10:c3:a6:b2:8b:aa:ac:be:48:fe:
                    46:5b:1e:c3:74:79:09:76:d3:25:a3:67:f9:3f:0e:
                    03:e3:bc:e1:ca:78:e0:51:ab:75:f1:26:34:f7:03:
                    81:f3:03:35:25:6c:dd:1e:6e:4e:51:5b:a4:e5:26:
                    18:8f:01:d4:d9:70:65:22:0c:fe:cb:46:53:0c:0a:
                    58:84:d5:6e:ec:41:e7:0a:c4:a4:55:53:e7:69:5a:
                    fb:1a:6f:52:e0:58:94:61:be:e3:72:3b:c9:1a:eb:
                    67:3b:28:4d:f4:ea:8e:e1:a2:ef:42:7a:8b:db:bc:
                    41:ea:fa:25:09:7c:54:62:7e:e8:a7:d7:ba:d7:37:
                    8c:86:aa:3d:83:5c:30:92:bd:11:9b:8a:9a:23:a9:
                    7e:b3:ed:45:b2:8e:ea:2a:cd:5b:2d:27:db:58:4a:
                    4a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:40:7F:15:52:79:0D:41:C4:2A:20:34:06:49:22:96:3C:7D:63:32
            X509v3 Authority Key Identifier:
                keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:a1:aa:87:c8:fe:b8:01:63:9a:b6:32:4b:15:d9:99:45:f6:
         4f:2e:14:eb:aa:8e:43:dd:c0:e8:02:fe:a0:fb:e5:60:30:d2:
         21:d6:e0:ab:5c:6a:d8:32:54:0b:be:71:32:47:a6:a7:d1:4f:
         f7:53:1e:82:0b:bd:1a:b9:71:1f:96:65:ad:2c:07:cd:17:89:
         dd:f8:f9:a5:ad:bf:37:c5:8c:f2:9a:81:04:94:79:ef:81:d7:
         e8:d6:d5:44:7e:1f:09:4d:ab:12:3a:d9:e6:b4:d6:d0:81:98:
         11:14:b6:4f:34:d5:26:5f:f7:71:0e:fc:b1:46:41:d7:62:f1:
         83:af:c3:2e:45:1a:68:d9:dd:07:44:df:24:0d:e1:00:46:45:
         70:6d:83:e9:f7:58:9f:ee:6b:43:72:1d:c1:8a:ce:c5:04:30:
         e1:ea:a3:80:bb:de:5c:a6:79:2f:a0:ff:c5:71:e3:1c:0e:47:
         6d:28:6e:50:07:cb:f3:e2:5f:95:6c:52:df:38:2f:fd:13:2a:
         19:6c:7a:cc:85:e6:4b:6c:e7:ce:8c:e6:39:46:4c:b2:98:5b:
         39:41:32:26:76:fd:4d:27:f4:25:e5:66:8d:11:6e:84:cf:94:
         8d:7e:4d:72:5a:8c:3b:e7:82:52:63:f2:48:d5:a5:f8:2a:bd:
         b0:68:ba:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----