Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
File:                     5ufguvNPIMPZye8md2gF84JGO4Y.mft (raw, json)
Hash identifier:          ve+4WrH/1aijxEljXwOHebRuOHzle0mqGnbgqX75FDY=
Subject key identifier:   30:D2:F7:C8:3A:84:E6:C3:8D:38:75:4B:31:2A:EC:4C:35:16:4E:1D
Authority key identifier: E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86
Certificate issuer:       /CN=A9160BD2/serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86
Certificate serial:       0634
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
Manifest number:          062F
Signing time:             Thu 30 Jan 2025 22:42:39 +0000
Manifest this update:     Thu 30 Jan 2025 22:42:38 +0000
Manifest next update:     Thu 06 Feb 2025 22:42:38 +0000
Files and hashes:         1: 5ufguvNPIMPZye8md2gF84JGO4Y.crl (hash: RyqH1liUczEaHOvL2Vad2kl2sUTpQ9kC8q0A5xJL/6g=)
                          2: 159A3C967D7211EBA0A7FF60C4F9AE02.roa (hash: Zxo0mKrJYkISVsqHRZIlLeBZhk5GaXEPMnvmTBTNLew=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1588 (0x634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160BD2/serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86
        Validity
            Not Before: Jan 30 22:42:38 2025 GMT
            Not After : Feb  6 22:42:38 2025 GMT
        Subject: CN=679c005e-ee1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:74:fd:e1:e2:13:4d:5c:60:c0:81:dd:e5:
                    d8:90:eb:fc:52:81:52:e6:fb:1e:95:82:10:fb:a7:
                    cf:20:a6:9d:69:96:2b:af:0c:04:ee:70:fc:12:04:
                    21:5b:3c:a9:b3:71:2a:2c:d9:05:df:3c:e9:bd:ec:
                    2b:35:dc:8f:e0:f9:3f:73:82:6b:2e:af:84:aa:a1:
                    a1:ab:24:f5:ec:26:a2:db:d7:1e:5c:c3:7c:ef:23:
                    84:10:39:ea:3c:98:0d:a5:8f:9e:a7:83:6a:33:99:
                    80:a7:70:e3:7b:5f:b8:b0:cb:c3:91:57:e8:9e:0b:
                    f1:48:65:b7:00:de:ce:89:ea:ec:c9:cf:e9:d7:01:
                    2d:13:08:77:c7:1c:a9:29:5e:40:59:af:3b:58:61:
                    38:6a:5e:eb:f8:66:92:a8:0e:95:a6:e2:49:94:16:
                    74:4d:9a:d7:b0:da:17:e3:93:d2:bf:b2:84:13:b8:
                    33:fd:f3:a9:44:84:0a:aa:1c:70:26:69:5d:93:d2:
                    fc:1d:07:00:d9:98:9f:72:3d:66:bb:1e:2d:b2:69:
                    17:f1:75:f4:0d:30:b9:ac:bd:4b:50:8c:12:61:d7:
                    aa:58:b3:53:13:f7:ea:50:ea:af:89:d5:ab:90:83:
                    b2:8c:b0:7c:12:07:1f:47:00:b0:16:43:32:82:40:
                    d8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D2:F7:C8:3A:84:E6:C3:8D:38:75:4B:31:2A:EC:4C:35:16:4E:1D
            X509v3 Authority Key Identifier:
                keyid:E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:08:db:dd:2f:d3:b0:2f:4f:93:39:48:7b:5e:67:f0:ac:9a:
         60:d9:c5:6e:47:f7:e4:9e:42:d3:4b:6e:ec:0f:c5:a0:fc:ba:
         05:c7:eb:9e:c6:42:a7:d7:64:47:2a:92:a5:52:6b:30:c2:4a:
         8d:b8:3e:2d:17:05:6f:c4:e8:66:2d:23:c3:dc:54:dc:77:ce:
         73:a1:3a:a9:05:64:e3:31:aa:2b:0e:8a:55:3d:8e:49:5d:06:
         20:23:17:9e:49:3d:8d:3b:39:6f:da:92:a3:30:94:37:5d:6d:
         98:ee:50:01:de:2b:b7:b8:85:87:45:54:ea:22:15:95:4e:a9:
         c5:3b:cf:6c:aa:49:77:0d:23:e7:19:79:89:d0:5e:40:30:96:
         f9:a2:f3:72:9d:f0:df:2a:86:ac:19:a0:03:e6:13:27:99:b4:
         dd:a3:95:84:87:98:64:10:2b:93:b2:d4:3c:2b:19:3e:ec:c1:
         40:78:98:7a:d6:df:63:bc:52:cc:e5:df:1e:4b:87:25:7d:e0:
         bb:3b:e0:4c:cd:53:54:d8:f5:8d:15:a1:b1:14:19:2a:c4:97:
         e6:ac:37:2e:17:ce:c3:94:8c:f0:3b:14:46:6a:89:18:e6:d4:
         74:b6:d5:95:47:61:52:96:32:3d:0c:0d:31:db:f7:cf:12:71:
         1f:df:fa:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----