Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft
File:                     33HZn0zTs4Mms-1HyOSl35ieQvI.mft (raw, json)
Hash identifier:          W9BcX0PUOlPFM+0H/7LdmIveeKhpErY5yZAI41aoEnA=
Subject key identifier:   50:C2:F9:26:31:ED:BA:B8:ED:52:74:D1:14:DE:EC:7A:90:1F:9E:6D
Authority key identifier: DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2
Certificate issuer:       /CN=A915A0EE/serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft
Manifest number:          013A
Signing time:             Fri 31 Jan 2025 03:39:39 +0000
Manifest this update:     Fri 31 Jan 2025 03:39:38 +0000
Manifest next update:     Fri 07 Feb 2025 03:39:38 +0000
Files and hashes:         1: 33HZn0zTs4Mms-1HyOSl35ieQvI.crl (hash: 594ouONzKHsmYK2KrZMYWFi09rTcWQeTZulfv30cV1o=)
                          2: 1BDBCE5013A011EE91039C41C4F9AE02.roa (hash: 22aaI99D5AWtJSeJ++1PDVBO7upMl84FHbNH+yIrm8U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0EE/serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2
        Validity
            Not Before: Jan 31 03:39:38 2025 GMT
            Not After : Feb  7 03:39:38 2025 GMT
        Subject: CN=679c45fb-37f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:32:63:00:aa:2e:89:a9:22:2d:14:f0:ed:f0:
                    f9:ac:29:c2:c7:9c:42:58:af:63:f0:71:20:2c:6b:
                    d7:3b:1a:cb:d6:f8:8e:0b:6b:c0:41:79:29:f6:f9:
                    b1:d8:fc:06:b6:09:bf:86:6d:10:d0:8a:86:80:d1:
                    ae:f4:db:e2:a6:fe:c1:1e:7f:f7:74:c1:a3:f6:23:
                    e5:3e:a2:4d:da:b2:e7:75:a0:49:32:79:f5:b8:2f:
                    25:f7:71:6c:c1:ee:bd:26:1d:50:c1:c4:bb:8e:d1:
                    b6:d2:fb:31:11:93:42:2c:12:ac:3f:7e:ee:35:d6:
                    85:86:44:c6:e2:ff:52:cf:90:40:ef:9c:cb:c7:6c:
                    e9:0c:38:da:a9:5b:56:ff:af:61:bb:85:58:66:1e:
                    66:3e:24:c7:ed:ba:b8:18:cd:eb:44:7b:a0:ec:c1:
                    05:0a:57:84:5a:95:8f:9d:c8:21:ee:e5:92:40:00:
                    c3:7d:76:b3:c5:8a:c2:ce:bc:b6:17:fa:7d:ac:7f:
                    60:ef:92:3a:a8:95:b0:52:c8:29:5c:4f:fb:59:c6:
                    a2:92:1c:60:7b:c6:71:cb:5c:16:13:bd:ac:ed:be:
                    a7:c8:68:1f:a6:57:88:da:80:33:1d:6e:0b:40:de:
                    45:2b:b4:e3:cb:e7:59:c0:93:c4:6a:c1:8b:b5:12:
                    51:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C2:F9:26:31:ED:BA:B8:ED:52:74:D1:14:DE:EC:7A:90:1F:9E:6D
            X509v3 Authority Key Identifier:
                keyid:DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b1:2f:2b:74:e7:a7:df:a5:95:56:52:9e:26:a7:66:28:a5:
         76:6f:ed:c9:80:0a:e1:3e:db:66:72:5d:75:59:7f:84:e9:4b:
         4d:56:e9:ad:6f:2b:a5:1a:dd:53:06:e9:83:3f:7b:1c:22:99:
         d8:81:cd:33:78:44:59:1d:6d:9f:c2:3c:c2:27:1e:34:de:bf:
         80:9b:66:58:fe:a2:ca:ad:f2:54:f6:07:7a:63:81:66:7a:94:
         30:87:5c:40:c6:f0:ad:c5:47:28:8d:83:90:8e:82:f5:71:e0:
         f9:b2:67:4a:b9:0b:61:6c:5e:11:0b:f3:b4:ef:2a:db:66:93:
         29:ae:80:1e:09:d8:bc:71:d6:97:e2:cb:e8:49:3a:9e:53:8b:
         e3:e5:9a:e5:72:3a:ec:a8:df:79:b5:70:9a:e3:55:3e:c1:20:
         49:3d:4e:fb:8b:02:51:f9:12:f8:ee:f9:30:76:03:ea:f2:97:
         85:fd:d2:29:a0:a8:87:13:26:52:2f:e9:ec:18:99:7f:7c:e8:
         1b:04:75:0b:36:d2:07:cb:e9:2f:05:2f:be:1d:f3:56:3f:d2:
         95:fb:2c:9c:5f:1d:8f:8c:a2:ea:64:22:f2:5a:bf:c3:28:a2:
         c8:de:8f:47:0b:52:19:b2:dd:c8:13:dc:df:6c:b4:ff:9c:a7:
         e7:43:79:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----