Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
File:                     1WjiWa6pXRNIxmPjlfyma-wQwwk.mft (raw, json)
Hash identifier:          KRg4qidcQDz7acu2FJ6n1WwIPzqAjYtr+lHZ9IL4x2M=
Subject key identifier:   E8:B8:DB:2D:5A:3B:7D:B5:53:E0:B4:01:44:1C:92:4C:D6:E8:17:16
Authority key identifier: D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09
Certificate issuer:       /CN=A914C086/serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309
Certificate serial:       3449
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
Manifest number:          3448
Signing time:             Fri 31 Jan 2025 15:10:36 +0000
Manifest this update:     Fri 31 Jan 2025 15:10:36 +0000
Manifest next update:     Fri 07 Feb 2025 15:10:36 +0000
Files and hashes:         1: 1WjiWa6pXRNIxmPjlfyma-wQwwk.crl (hash: 3JBC0pJhWHsyReoxGlMIJZtXvNDHHMUdPO/pC7vosXA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13385 (0x3449)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C086/serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309
        Validity
            Not Before: Jan 31 15:10:36 2025 GMT
            Not After : Feb  7 15:10:36 2025 GMT
        Subject: CN=679ce7ec-8e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d6:77:75:88:0f:51:65:98:9d:3e:5a:6a:31:
                    57:c1:db:79:b0:c8:ea:50:67:83:69:ce:66:ec:a2:
                    2f:6d:cc:81:8c:2a:09:e0:50:7c:df:54:9f:60:3e:
                    3b:5d:21:fd:8f:05:09:96:5c:7a:30:85:37:ed:59:
                    be:1f:af:4f:0d:0b:12:87:cd:07:15:f3:48:87:b7:
                    18:dd:e3:84:7e:48:86:98:44:60:c9:17:73:0e:15:
                    70:e5:08:74:bb:a7:1e:38:66:f7:23:9d:85:59:09:
                    1c:8a:15:34:e4:66:be:30:ac:6f:f9:dd:6b:75:fb:
                    74:24:76:4e:9e:79:8a:9f:81:32:ee:b1:e6:15:d7:
                    6e:ae:0d:3c:c7:76:f0:6b:1f:ba:ea:21:55:d6:4d:
                    50:ae:7a:61:09:a2:58:a1:bc:0f:44:d0:57:69:36:
                    44:4c:f6:eb:f6:ce:6d:4f:d7:fb:26:39:38:37:d9:
                    0c:89:05:6b:8d:83:f9:5c:bf:1c:66:71:7c:2d:b8:
                    27:92:46:29:9c:5a:a8:79:67:81:45:e0:b9:2e:21:
                    c8:5d:ac:73:5a:19:71:da:c2:a4:62:7c:e4:90:3f:
                    f1:3c:99:60:56:97:ed:c6:f5:ae:98:00:f8:9f:36:
                    07:32:dd:88:c4:b5:20:90:9d:5d:75:8a:45:30:15:
                    2f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B8:DB:2D:5A:3B:7D:B5:53:E0:B4:01:44:1C:92:4C:D6:E8:17:16
            X509v3 Authority Key Identifier:
                keyid:D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a2:3a:86:7a:89:6f:97:e0:28:29:61:6e:d0:c0:14:84:38:
         5e:0c:26:94:a5:15:86:af:21:06:78:13:8b:30:8a:14:9f:24:
         df:dd:7d:e9:8f:e3:d9:9a:63:4c:e2:ba:e6:bb:7c:7b:76:6e:
         28:ab:54:89:f8:f7:e3:f1:e9:1c:ba:55:fd:c5:e0:35:ce:29:
         fa:e8:65:d1:8c:95:58:4a:7c:ed:66:1a:af:67:25:f7:4e:40:
         63:35:27:a8:06:c0:e3:7d:a2:10:05:5a:49:83:b3:be:15:41:
         1d:e1:d0:1e:e0:ab:f7:d1:b2:6b:09:2a:da:64:ef:cd:ad:45:
         3b:87:04:97:6b:2a:0a:cb:45:c6:fc:a5:f5:59:68:99:b7:f0:
         04:78:ce:80:b1:8a:3d:dd:f8:e5:12:25:82:c0:03:cf:59:8d:
         18:7e:79:10:29:fb:74:64:33:e0:99:77:6a:80:d9:ef:f9:70:
         43:9b:2b:bc:da:ac:e6:5a:b2:e6:e2:52:43:fc:6f:c5:f0:bc:
         53:8c:c4:ff:14:a0:8e:40:5e:9a:ca:28:f2:dd:5f:0d:d4:96:
         a6:9f:8b:45:30:11:ab:6f:f9:39:65:6c:7b:4c:64:e2:74:c6:
         0f:3f:2c:73:fe:17:4b:2f:7b:9c:3f:9e:01:d8:c5:88:af:b6:
         62:8f:48:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----