Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
File:                     IugbMnyx-zUB4Fr6uUEhkY_bW14.mft (raw, json)
Hash identifier:          8WJAV5/1hG8IhPzbO//oAD5zVYVHJPpwlucT59ikd3M=
Subject key identifier:   15:72:C0:69:AC:95:77:83:B6:8B:51:8C:97:7C:D9:7A:1D:F6:70:5A
Authority key identifier: 22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
Certificate issuer:       /CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Certificate serial:       1819
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
Manifest number:          17F0
Signing time:             Fri 31 Jan 2025 16:33:32 +0000
Manifest this update:     Fri 31 Jan 2025 16:33:31 +0000
Manifest next update:     Fri 07 Feb 2025 16:33:31 +0000
Files and hashes:         1: IugbMnyx-zUB4Fr6uUEhkY_bW14.crl (hash: 9C8UYDGjjquJEK8fByZ2Nt1h0g59KON/pM0B3pOASEg=)
                          2: 7E847B60998D11EEB9881356C4F9AE02.roa (hash: A02TkzE0gtzmmXM02idw5IYDPMR1UoGdX1Nto88Ee1Q=)
                          3: 99D6FBE6341F11E9BF826924C4F9AE02.roa (hash: n/zZhuhV9LV6VYEegyXndY9jGAj5j33BeGHT7RYFJDo=)
                          4: 609B8BC27D7B11EDB6B77173C4F9AE02.roa (hash: F+bKxuMFe/azlpMrtazRkcBCTDWemTegUDadHGY8Jy8=)
                          5: 0BB101A23A1611EE95906330C4F9AE02.roa (hash: MAIlx13p8z5kihExt2+9LFbBg3Q8xn+yKSecs350V/0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6169 (0x1819)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
        Validity
            Not Before: Jan 31 16:33:31 2025 GMT
            Not After : Feb  7 16:33:31 2025 GMT
        Subject: CN=679cfb5c-45c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8d:15:7a:46:5a:7f:3b:7c:33:c7:3e:b9:6c:
                    21:3a:3d:38:4b:d1:15:ee:87:c9:9a:bb:b5:26:20:
                    25:ce:23:c2:d9:05:91:65:7b:e7:af:89:5b:bc:9c:
                    11:5c:99:a6:73:9f:58:b9:c3:8e:ee:ed:75:8e:2e:
                    4f:65:6b:64:be:7e:fd:32:50:23:19:5c:84:a9:ed:
                    75:50:bd:76:54:ce:a8:be:01:e6:29:e6:65:4b:82:
                    98:d9:e3:37:72:e7:ca:df:2d:3c:8f:69:a4:cf:ba:
                    76:09:5e:21:c0:95:17:78:ab:64:8d:a3:93:bf:ae:
                    fe:53:06:82:b1:98:0c:92:01:37:bd:ac:fe:19:5d:
                    bd:a3:97:1f:7f:ad:d0:33:10:0f:fe:82:6a:4e:98:
                    2c:7e:24:f1:2d:6b:76:d6:31:01:4b:44:a2:28:86:
                    10:7b:4b:d8:a0:b0:fa:ba:f5:b1:24:1b:d7:fb:0c:
                    47:68:b7:ac:e9:8b:b8:e4:f5:4b:53:1e:28:fa:e9:
                    f7:43:9a:13:96:70:e2:ab:8f:7a:3a:c4:08:a1:b1:
                    b7:88:b9:de:dc:a1:e5:d8:46:c1:e5:07:b6:c3:52:
                    73:4c:01:fd:ab:0f:f5:16:29:d9:89:15:18:8d:c7:
                    b6:22:ab:21:8f:b2:50:11:99:50:e2:c9:04:c9:cf:
                    fb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:72:C0:69:AC:95:77:83:B6:8B:51:8C:97:7C:D9:7A:1D:F6:70:5A
            X509v3 Authority Key Identifier:
                keyid:22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e6:59:33:a8:73:7d:17:6a:22:7a:b6:0b:23:a5:e3:2a:94:
         ad:8d:0f:60:42:b8:a6:a2:68:fd:49:b4:49:89:db:e1:bd:e6:
         0b:b0:dc:26:e9:6b:b5:83:8f:75:6e:29:e9:90:fb:43:55:67:
         59:90:b4:85:dc:d3:81:18:7c:d9:1d:52:f7:a6:ae:e0:92:0c:
         aa:1a:11:88:cd:a2:7a:b8:93:eb:e3:f8:10:3c:4b:4b:9c:4d:
         79:90:11:d9:57:d2:c6:1f:33:f8:e0:41:76:0b:ce:2c:19:ff:
         cb:4e:e5:e3:9a:d4:43:24:7f:b1:c4:75:12:9c:94:7c:08:18:
         d9:21:1b:13:91:53:7a:9d:6e:30:a8:52:e5:c9:39:5b:de:21:
         7a:6e:16:da:39:9d:12:aa:c4:6a:c1:94:ad:36:4a:49:3c:3d:
         ea:55:fa:18:9e:db:a2:89:f2:c2:53:6f:88:30:3d:ec:c5:0f:
         a0:ce:38:ac:bb:7e:d6:70:1a:03:be:e4:a4:8a:2f:aa:31:0f:
         4f:22:9e:00:64:bc:3a:7f:25:62:2c:61:14:ad:7b:b9:0a:01:
         6e:87:c6:d2:4e:8e:d5:58:7e:d7:18:b7:4a:99:5e:98:d3:dd:
         c0:4a:e9:ca:b7:0e:f3:83:69:95:03:e2:91:b1:80:00:87:d9:
         2e:16:e6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----