Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.mft
File:                     gb_ekWnVwsDrRRdiB1NzdpnfFqw.mft (raw, json)
Hash identifier:          EWKE3dCkbVINJ5RJPJFeSuH3P+F8mYYIthd/AGWQVFc=
Subject key identifier:   C9:F6:D4:92:16:C7:38:1B:75:21:8E:E3:5F:68:66:05:9B:38:44:35
Authority key identifier: 81:BF:DE:91:69:D5:C2:C0:EB:45:17:62:07:53:73:76:99:DF:16:AC
Certificate issuer:       /CN=A916C6A1/serialNumber=81BFDE9169D5C2C0EB4517620753737699DF16AC
Certificate serial:       054E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gb_ekWnVwsDrRRdiB1NzdpnfFqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.mft
Manifest number:          054A
Signing time:             Thu 30 Jan 2025 23:26:54 +0000
Manifest this update:     Thu 30 Jan 2025 23:26:54 +0000
Manifest next update:     Thu 06 Feb 2025 23:26:54 +0000
Files and hashes:         1: gb_ekWnVwsDrRRdiB1NzdpnfFqw.crl (hash: 0QruJ2XtziiyBOE5/8D447jmXjQuiyTCB3RpkvVucsA=)
                          2: 72AA1A38D7CB11EBB8307453C4F9AE02.roa (hash: 80C8kkeWhjJMm/bDl1BH7p52+xZp3ros5mN2WiCpBqk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1358 (0x54e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C6A1/serialNumber=81BFDE9169D5C2C0EB4517620753737699DF16AC
        Validity
            Not Before: Jan 30 23:26:54 2025 GMT
            Not After : Feb  6 23:26:54 2025 GMT
        Subject: CN=679c0abe-02cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c5:0a:78:04:5e:05:7e:63:92:bc:f2:b0:0a:
                    5e:4b:60:33:7a:ba:8d:87:71:33:d9:7e:78:26:ea:
                    00:e4:87:5f:9c:e2:a6:fc:2f:d4:f9:64:a9:34:18:
                    f8:a3:0a:5a:3d:83:68:19:23:f6:7b:52:f0:9a:7c:
                    31:84:ed:f0:df:f1:a3:41:35:22:40:2a:75:83:88:
                    3e:ae:74:90:ca:f0:72:91:aa:d5:d3:a6:db:e3:b6:
                    5d:1b:c9:20:ae:02:be:cb:57:18:75:52:24:8a:65:
                    6d:41:a8:af:f2:51:69:0d:b6:1b:b0:90:3d:20:51:
                    97:63:a2:09:d3:01:8a:cc:e6:67:9f:48:db:fb:b8:
                    3c:12:63:0a:7d:4b:ef:74:07:cf:a1:1d:a1:2a:6d:
                    57:be:d3:3d:c8:56:3a:02:da:9e:ca:11:e6:fe:0c:
                    e8:c2:7d:ff:78:8d:b0:1e:cd:2f:49:d2:3b:28:cc:
                    14:43:93:6c:07:cb:2e:66:1a:ae:f5:06:99:a9:85:
                    e2:93:13:87:16:24:e6:b0:8d:b3:a7:14:23:c4:c3:
                    16:c0:f9:e1:1d:33:6e:fd:7a:b4:ec:4f:a7:a2:03:
                    61:db:e6:db:87:c1:34:de:46:42:3c:01:58:e1:30:
                    26:47:ec:dd:51:55:0b:24:a0:80:d3:e6:cb:9a:87:
                    09:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F6:D4:92:16:C7:38:1B:75:21:8E:E3:5F:68:66:05:9B:38:44:35
            X509v3 Authority Key Identifier:
                keyid:81:BF:DE:91:69:D5:C2:C0:EB:45:17:62:07:53:73:76:99:DF:16:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gb_ekWnVwsDrRRdiB1NzdpnfFqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c9:da:e7:66:1c:14:81:b8:1c:e1:fa:96:20:16:5e:73:cf:
         9a:3c:90:96:d6:92:b9:3f:51:cf:25:67:b4:b2:c4:30:b1:f9:
         97:aa:55:5a:66:f1:68:d9:b6:eb:fd:45:66:76:0a:a0:91:7c:
         d7:7c:63:c2:06:f9:50:b5:5c:6d:44:33:4e:e3:8e:59:fe:7b:
         8a:ba:16:3d:f3:69:1f:6c:f4:c5:cf:fe:4b:f0:17:1d:5e:d5:
         a9:f2:cc:8a:2f:17:d8:91:77:08:6f:37:87:ef:1f:67:44:4d:
         58:52:66:7a:76:ac:3c:cd:f6:12:a5:4e:a2:14:a3:55:b1:d8:
         0c:46:c7:5d:96:55:f3:7c:97:a6:51:cb:56:7e:0d:5b:cf:bb:
         45:15:c5:d6:1b:9b:0b:f5:23:a8:34:1c:39:21:30:6b:25:43:
         4d:70:91:80:82:05:0a:1d:37:44:78:60:6a:ef:83:ed:1e:f2:
         44:95:7c:3f:de:f2:54:74:d9:d9:47:dd:99:ba:92:0d:d3:83:
         cc:32:f9:88:4d:79:c6:69:94:7d:0e:48:c5:a3:46:84:5f:25:
         02:d2:ca:83:df:af:c6:d9:ae:97:f4:4a:d0:1a:ad:e3:a4:70:
         53:81:92:62:f7:7b:5a:07:a3:80:bd:bd:48:27:1b:02:7d:ec:
         58:70:b5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----