Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
File:                     T2scW0K2HdXigZOWenDRiiKP73Y.mft (raw, json)
Hash identifier:          FUG0P3jdzm5oPu2UP/wE8TBJMAgrDMjagWV2nMYRGEY=
Subject key identifier:   81:20:5C:31:5C:0A:83:A1:DD:67:43:82:FA:91:48:B6:9E:B9:F7:B5
Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76
Certificate issuer:       /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
Certificate serial:       0C4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
Manifest number:          0C44
Signing time:             Fri 31 Jan 2025 18:14:51 +0000
Manifest this update:     Fri 31 Jan 2025 18:14:50 +0000
Manifest next update:     Fri 07 Feb 2025 18:14:50 +0000
Files and hashes:         1: T2scW0K2HdXigZOWenDRiiKP73Y.crl (hash: 95I77czixLt8hEjfqfqJJ66fxAPA79dIbmh7My3q9xU=)
                          2: 7DF47F46F95611E996377877C4F9AE02.roa (hash: tyN6SyYObf2tdZtNgOBXF+pjOU8OjiIuifYvGe4SD3w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3147 (0xc4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
        Validity
            Not Before: Jan 31 18:14:50 2025 GMT
            Not After : Feb  7 18:14:50 2025 GMT
        Subject: CN=679d131b-80c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:88:21:e4:af:64:d7:32:ee:ae:63:1b:b1:24:
                    9a:d5:1d:99:69:00:8f:af:cc:90:3d:b5:44:c4:ba:
                    49:0a:ac:88:7d:14:d1:a9:9a:5b:81:6d:e6:ee:d0:
                    03:c1:52:6f:58:7f:ed:47:cf:a7:9c:fd:de:6b:62:
                    8c:f7:17:3d:b0:b6:84:7d:91:2d:ae:c2:68:e5:32:
                    8d:d7:55:ec:35:f9:d3:76:5f:e0:da:20:11:af:e6:
                    5c:b0:3f:29:fb:4e:95:7a:00:45:91:a1:f8:69:53:
                    b9:8a:b4:50:b5:60:d1:f1:69:76:ea:a6:d3:56:4f:
                    bb:82:29:22:7d:d4:20:76:d4:b5:94:77:5b:ea:cb:
                    f7:a0:f2:d8:d9:80:12:2e:94:31:f0:01:4d:02:ba:
                    9b:00:66:6e:0d:b3:9c:42:81:3b:09:37:5d:c4:fa:
                    8b:7e:a5:30:50:2c:82:60:5b:2d:b2:e5:ce:4c:92:
                    ce:e5:35:59:9c:24:f1:64:0c:de:56:c9:81:fa:43:
                    92:e5:ad:48:3a:5c:f9:50:3e:04:44:ed:c4:d9:49:
                    04:a6:59:0b:97:3e:50:14:e6:f0:d9:96:8e:f6:aa:
                    aa:a3:fa:2f:9b:ed:d9:2c:88:2c:b8:17:31:84:8c:
                    e8:0f:56:fa:49:77:98:47:95:7e:9b:68:fb:20:e3:
                    52:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:20:5C:31:5C:0A:83:A1:DD:67:43:82:FA:91:48:B6:9E:B9:F7:B5
            X509v3 Authority Key Identifier:
                keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:fc:a7:47:37:ab:ea:89:2b:6f:70:72:1d:d4:cf:d2:c7:7e:
         21:97:d7:bf:f8:53:33:e9:e5:f1:54:8d:c6:2a:12:7c:f9:3c:
         5d:8e:a9:5a:31:51:5c:7a:a8:d2:2c:eb:38:0d:90:27:d8:76:
         84:93:0b:40:85:d2:cc:02:a6:97:5e:6b:61:d8:1e:6a:9e:00:
         4c:41:58:d3:ee:c7:4e:9c:fb:7c:c3:15:d0:8e:ff:7c:f6:7f:
         f3:c8:ff:2c:a1:5b:b6:ff:64:15:bb:a2:6f:c3:02:de:ed:06:
         85:8d:79:d2:50:62:ae:99:f7:66:b7:33:c3:bf:78:66:dc:81:
         99:10:8a:38:f4:1e:f4:a3:ab:01:ff:fb:35:fd:eb:3d:0b:d1:
         df:cf:65:20:43:5a:98:ef:f7:91:09:33:7f:74:f9:c4:8a:89:
         c7:d9:a4:c1:f4:94:18:50:b3:d8:24:c0:c4:62:f4:53:63:71:
         c5:37:aa:ef:f6:3c:a7:10:17:de:41:4d:ca:f9:5e:1c:12:40:
         c7:73:02:55:cc:3f:d0:9c:60:e0:72:7c:01:33:6b:90:5f:f4:
         f3:19:c4:b2:5e:a0:43:64:af:9a:4e:3c:49:a4:c6:70:71:e4:
         30:d7:c7:27:0a:2c:04:18:3b:2c:c8:36:b0:15:59:a4:0b:48:
         a1:7e:82:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----