Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
File:                     CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft (raw, json)
Hash identifier:          dFBcoYqRlsMuhg41DD+TJGZZZcQr1RW6+nXjbRP1KWg=
Subject key identifier:   F4:AF:B7:73:77:57:7C:2A:3A:5A:90:C6:CF:86:FC:48:53:3D:53:D3
Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A
Certificate issuer:       /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
Manifest number:          84
Signing time:             Fri 31 Jan 2025 05:39:37 +0000
Manifest this update:     Fri 31 Jan 2025 05:39:37 +0000
Manifest next update:     Fri 07 Feb 2025 05:39:37 +0000
Files and hashes:         1: CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl (hash: pifVZOeyqs15JtzULe/LtZXexzaopXGRA9X23yqvY1k=)
                          2: FDC5FC0C232411EF868B873EC4F9AE02.roa (hash: ollqUlHXEfXQhQfDGC+/77xh3ifYmQTxENHBKgBxBPw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
        Validity
            Not Before: Jan 31 05:39:37 2025 GMT
            Not After : Feb  7 05:39:37 2025 GMT
        Subject: CN=679c6219-dbef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:2b:54:c4:0f:be:06:e4:04:15:e1:0c:de:
                    b2:a5:da:1b:b1:20:0a:b1:d4:dd:12:d2:e6:02:3f:
                    61:74:4d:b9:98:da:41:36:4a:41:da:f4:68:01:1a:
                    b2:e1:94:a1:b0:8e:97:ff:ad:19:08:9e:f6:f8:57:
                    b9:b4:47:5a:e2:70:12:fe:78:27:5e:d0:09:46:c0:
                    4d:1d:42:21:bc:cf:31:bd:dc:57:80:a8:59:de:63:
                    6d:54:3b:77:67:f3:fd:e3:b3:f4:85:4e:46:5e:22:
                    71:f9:7f:8b:68:ba:05:7a:75:be:17:59:91:a1:9c:
                    5e:39:b4:2b:85:66:ed:25:a8:7e:4a:a5:90:57:e6:
                    9f:7f:77:47:94:0c:51:a8:e8:35:94:80:ab:2d:6c:
                    5c:3d:0f:49:82:3d:db:31:f1:81:d6:7b:98:f5:20:
                    b9:3c:af:16:48:fc:ec:4f:6b:cb:3e:7a:4e:55:17:
                    0f:3a:01:2d:1e:da:72:52:b5:6a:7c:e9:e0:e2:13:
                    7c:bf:6f:0d:57:eb:1c:49:66:50:23:d1:09:a3:47:
                    db:57:db:f4:9b:d7:1e:c1:f8:ca:1a:10:6a:3c:67:
                    94:63:be:8a:45:f7:19:93:7b:71:8d:09:d9:6f:de:
                    10:3e:ec:f9:13:f9:f6:4e:0e:51:2d:d7:5c:dc:a6:
                    1b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AF:B7:73:77:57:7C:2A:3A:5A:90:C6:CF:86:FC:48:53:3D:53:D3
            X509v3 Authority Key Identifier:
                keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ea:1d:d8:89:7e:42:c5:6b:ad:c9:44:42:ac:f6:6d:fe:f6:
         f8:80:f7:49:de:37:7b:5a:09:ad:a0:8b:08:14:6b:27:88:69:
         37:1c:d7:da:7c:83:88:4b:f7:82:db:df:a1:e9:65:58:6b:2a:
         47:fc:44:0c:41:1a:26:85:21:17:78:e4:ef:ec:42:e9:d2:41:
         94:8d:10:b4:12:2a:67:4f:ba:16:e1:f5:43:23:47:3e:02:a7:
         86:aa:20:80:a9:19:54:ec:17:fb:bd:c5:66:e2:df:7c:49:9c:
         da:72:df:4c:e8:51:ac:16:35:84:9f:a9:bd:80:3a:31:8e:1a:
         58:8d:8b:60:f3:4a:33:90:c1:f1:30:07:14:f9:0f:6f:9a:68:
         a7:08:7f:ea:3b:e5:1e:7e:19:e5:74:c6:07:3f:7c:ba:79:3b:
         cb:89:96:91:4b:fb:b5:1b:89:48:dd:fb:a8:35:98:c2:65:48:
         3b:aa:62:a3:2d:e1:b4:a6:fd:2b:ba:84:2f:23:eb:77:2e:76:
         3d:0b:2f:a0:88:77:27:f3:fe:f7:8e:84:3e:3a:a2:f4:9c:4f:
         8a:1e:4a:ee:26:7a:c1:1a:bd:0d:8e:53:d1:3c:59:5a:2f:ac:
         c4:ac:7d:2b:04:b7:8d:91:b2:1d:58:64:8e:19:7d:cf:c0:bb:
         29:df:22:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----