Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft
File:                     eo-Oag5Y9XX8feHNg4R51_c_4nk.mft (raw, json)
Hash identifier:          eHm14hNEj6iUkHMyxwSswtat63i/S0LUmFtw3JM+qQo=
Subject key identifier:   1B:9F:C5:E5:1B:87:15:6F:19:08:94:93:55:6F:A0:3B:34:2A:88:C6
Authority key identifier: 7A:8F:8E:6A:0E:58:F5:75:FC:7D:E1:CD:83:84:79:D7:F7:3F:E2:79
Certificate issuer:       /CN=A91775B7/serialNumber=7A8F8E6A0E58F575FC7DE1CD838479D7F73FE279
Certificate serial:       3464
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft
Manifest number:          3457
Signing time:             Fri 31 Jan 2025 15:09:52 +0000
Manifest this update:     Fri 31 Jan 2025 15:09:52 +0000
Manifest next update:     Fri 07 Feb 2025 15:09:52 +0000
Files and hashes:         1: eo-Oag5Y9XX8feHNg4R51_c_4nk.crl (hash: w+J0/a2+OyUCBP0r8jFfm68uvwyCRVP5DsmJi2Z3iLM=)
                          2: 92210D6AB66711EC86445C11C4F9AE02.roa (hash: d5k3YRL/FAKw8Wd7VKIcrrwAMtmamoxhcmJJDByEkkQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13412 (0x3464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91775B7/serialNumber=7A8F8E6A0E58F575FC7DE1CD838479D7F73FE279
        Validity
            Not Before: Jan 31 15:09:52 2025 GMT
            Not After : Feb  7 15:09:52 2025 GMT
        Subject: CN=679ce7c0-cb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:59:8e:30:24:e2:be:e0:59:10:18:d8:ab:9e:
                    96:f7:ef:27:49:13:04:7d:80:b8:79:02:a4:f2:62:
                    9c:cb:e6:e5:e1:68:b9:9b:bb:1f:5e:4c:5d:58:d3:
                    11:d2:a4:36:ad:f9:76:2c:c1:5f:48:e2:53:35:23:
                    8c:05:66:12:7d:2a:8a:61:d6:e0:5f:46:26:c6:58:
                    ce:0e:91:82:bf:9f:cc:f9:62:f0:23:fb:68:e1:dd:
                    13:8b:80:c1:95:63:52:13:c1:d1:fe:7b:a7:23:5c:
                    a8:a4:3d:af:8b:7e:4f:56:96:ea:0d:45:07:3e:81:
                    96:41:14:d0:59:e3:5c:50:05:74:5f:cd:61:d4:ee:
                    33:7a:db:4e:e6:51:20:b9:31:77:72:03:89:a0:59:
                    05:f0:c6:d1:37:b5:bb:12:8b:09:52:b7:b4:5d:27:
                    95:73:1f:b0:f7:17:80:de:56:87:f2:3d:04:9e:b7:
                    1f:ad:b2:64:a5:90:25:94:7e:41:3c:be:dd:38:f9:
                    0d:c1:2e:78:ac:8d:74:9f:35:ec:74:50:42:97:1f:
                    81:27:18:af:52:85:9b:eb:8c:49:ab:e2:49:3b:e3:
                    b7:42:9f:e3:f7:fc:d1:d2:19:27:83:7e:40:c3:a1:
                    90:aa:fb:35:b8:11:ba:57:6e:3c:f1:33:07:18:ca:
                    bb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9F:C5:E5:1B:87:15:6F:19:08:94:93:55:6F:A0:3B:34:2A:88:C6
            X509v3 Authority Key Identifier:
                keyid:7A:8F:8E:6A:0E:58:F5:75:FC:7D:E1:CD:83:84:79:D7:F7:3F:E2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b7:14:1e:eb:03:2b:e5:78:b0:59:cc:6c:77:99:02:fc:ce:
         87:7c:9f:79:92:2d:49:9c:81:44:d8:99:05:c9:ba:bc:58:a0:
         54:9c:26:ee:d0:1f:f0:11:a2:0f:36:af:39:9f:ca:2b:17:86:
         cc:77:ca:94:54:7a:93:c6:8a:03:89:29:ef:ac:9b:1d:4f:bb:
         49:27:ac:dd:6e:11:fb:d9:e6:19:ab:10:06:0d:42:9a:bd:9b:
         6e:ac:20:7e:df:14:71:5d:6b:f7:49:91:79:cc:22:da:86:a7:
         d7:90:a9:42:5b:8a:9b:69:12:67:c2:eb:a3:f6:6c:4a:f2:1f:
         81:c5:b0:3d:25:43:c2:39:d9:ce:69:5f:19:07:89:21:dd:e0:
         ec:22:a2:21:da:29:e3:9d:2c:ba:92:eb:2b:66:ee:4e:8c:4e:
         2f:df:30:96:10:9b:bb:75:15:1b:c7:7f:3e:f0:b0:79:24:7b:
         15:d2:ea:44:51:ac:53:44:df:16:e3:08:44:e2:ed:c5:dd:61:
         9f:a8:1b:39:17:fe:2a:ad:b7:7f:5f:6d:d7:f0:1f:c5:17:77:
         a2:32:81:65:6e:6a:16:e8:ba:b1:0c:45:3a:bb:44:14:24:b2:
         90:1f:06:66:fb:b0:fa:26:fa:b1:e2:67:e5:b2:9a:4e:a7:ca:
         8a:a7:31:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc1QjcxMTAvBgNVBAUTKDdBOEY4RTZBMEU1OEY1NzVGQzdERTFDRDgzODQ3OUQ3
RjczRkUyNzkwHhcNMjUwMTMxMTUwOTUyWhcNMjUwMjA3MTUwOTUyWjAYMRYwFAYD
VQQDEw02NzljZTdjMC1jYjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx1mOMCTivuBZEBjYq56W9+8nSRMEfYC4eQKk8mKcy+bl4Wi5m7sfXkxdWNMR
0qQ2rfl2LMFfSOJTNSOMBWYSfSqKYdbgX0YmxljODpGCv5/M+WLwI/to4d0Ti4DB
lWNSE8HR/nunI1yopD2vi35PVpbqDUUHPoGWQRTQWeNcUAV0X81h1O4zettO5lEg
uTF3cgOJoFkF8MbRN7W7EosJUre0XSeVcx+w9xeA3laH8j0EnrcfrbJkpZAllH5B
PL7dOPkNwS54rI10nzXsdFBClx+BJxivUoWb64xJq+JJO+O3Qp/j9/zR0hkng35A
w6GQqvs1uBG6V2488TMHGMq7pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBufxeUb
hxVvGQiUk1VvoDs0KojGMB8GA1UdIwQYMBaAFHqPjmoOWPV1/H3hzYOEedf3P+J5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzVCNy8wOEE0OUJEMjFE
QTIxMUUyOTM2NDk1OTQwOEIwMkNEMi9lby1PYWc1WTlYWDhmZUhOZzRSNTFfY180
bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VvLU9hZzVZOVhYOGZlSE5nNFI1MV9jXzRuay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzVCNy8wOEE0OUJEMjFEQTIxMUUyOTM2NDk1OTQwOEIwMkNEMi9lby1PYWc1WTlY
WDhmZUhOZzRSNTFfY180bmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCMtxQe6wMr5XiwWcxsd5kC/M6HfJ95ki1JnIFE2JkFybq8WKBUnCbu
0B/wEaIPNq85n8orF4bMd8qUVHqTxooDiSnvrJsdT7tJJ6zdbhH72eYZqxAGDUKa
vZturCB+3xRxXWv3SZF5zCLahqfXkKlCW4qbaRJnwuuj9mxK8h+BxbA9JUPCOdnO
aV8ZB4kh3eDsIqIh2injnSy6kusrZu5OjE4v3zCWEJu7dRUbx38+8LB5JHsV0upE
UaxTRN8W4whE4u3F3WGfqBs5F/4qrbd/X23X8B/FF3eiMoFlbmoW6LqxDEU6u0QU
JLKQHwZm+7D6Jvqx4mflsppOp8qKpzE0
-----END CERTIFICATE-----