Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
File:                     mRs2LGa5oYApqN1CgVXZfHbgEgk.mft (raw, json)
Hash identifier:          SD1ARO9XCUroazs7It1m/eLNeZ2AuDh5SSeMkb7CSG0=
Subject key identifier:   B9:21:A5:E9:33:D6:78:3D:F7:F5:17:BF:E9:15:12:97:80:ED:72:85
Authority key identifier: 99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09
Certificate issuer:       /CN=A9178D2A/serialNumber=991B362C66B9A18029A8DD428155D97C76E01209
Certificate serial:       04E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
Manifest number:          04E0
Signing time:             Thu 30 Jan 2025 23:48:38 +0000
Manifest this update:     Thu 30 Jan 2025 23:48:37 +0000
Manifest next update:     Thu 06 Feb 2025 23:48:37 +0000
Files and hashes:         1: mRs2LGa5oYApqN1CgVXZfHbgEgk.crl (hash: klgEs1GQinjFoGHa+UWMqLJ+Ra/eqI5ZUknATExnm6w=)
                          2: DB9C041801B311ECBA0E715CC4F9AE02.roa (hash: waxDgjsSvTIC1yAg99PxNdSD6AsFvhhlz5Q0XX8Iie8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1252 (0x4e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178D2A/serialNumber=991B362C66B9A18029A8DD428155D97C76E01209
        Validity
            Not Before: Jan 30 23:48:37 2025 GMT
            Not After : Feb  6 23:48:37 2025 GMT
        Subject: CN=679c0fd5-e5a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b2:03:04:24:0e:2d:5e:a1:bf:c1:b6:6b:d1:
                    a6:28:fc:f6:f6:a1:b6:27:1b:f8:79:02:0a:a2:2b:
                    d7:1c:3c:05:5d:ae:3f:91:a1:98:10:e7:ec:11:6a:
                    8f:bf:d3:30:cf:53:67:db:9b:fd:0a:7e:a5:ea:44:
                    3a:ea:e7:6f:0f:e0:17:4f:14:e9:20:01:97:65:8b:
                    18:f9:a4:5a:48:1f:71:b0:1d:4e:3c:e9:11:cb:d2:
                    73:a5:c8:db:a3:64:fe:a8:76:47:33:82:e8:91:6b:
                    f1:ac:d0:a7:c6:47:86:d4:34:01:17:c8:f5:d0:86:
                    8d:7a:aa:f8:3c:ee:7f:bf:be:4a:59:3b:1e:a3:d1:
                    ad:8f:6c:fe:df:8d:d9:e6:57:89:98:be:51:44:3a:
                    44:37:dd:98:86:0e:2c:14:34:6c:93:3f:1a:f2:d8:
                    e2:02:30:77:10:fd:34:32:27:e8:f0:e7:62:af:14:
                    11:ff:cd:e4:75:a7:06:de:ce:3a:23:d6:e2:08:3e:
                    d0:e0:d4:d8:99:fd:c0:44:13:9a:a9:be:8c:74:7b:
                    e2:d8:24:3a:4e:13:ef:b9:c9:33:8d:ee:b6:a0:65:
                    79:82:b4:13:92:97:e5:bb:56:bb:c5:e8:e9:2e:d7:
                    17:a0:2c:33:c9:ea:4c:7d:f3:48:ef:a7:91:42:d6:
                    1a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:21:A5:E9:33:D6:78:3D:F7:F5:17:BF:E9:15:12:97:80:ED:72:85
            X509v3 Authority Key Identifier:
                keyid:99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:a7:f9:da:ba:37:08:37:30:14:22:8a:c9:50:6a:8a:28:e7:
         d9:0d:96:fd:5b:c5:84:dc:f5:3e:cc:30:1b:60:ca:b0:ff:d6:
         df:87:68:7b:b8:4a:a2:c6:30:e5:04:5d:3f:5c:cb:df:a0:87:
         8d:fb:06:17:85:c9:d0:31:78:45:ef:67:1c:98:5c:be:65:3b:
         cb:18:3c:c8:f5:c7:0a:8f:89:57:fe:11:db:5e:ef:76:93:5a:
         45:d1:17:6b:1c:55:a5:6f:ce:74:b8:ed:72:22:39:ec:23:38:
         68:3e:18:37:bd:1f:2a:8d:71:3a:df:66:32:be:71:f2:89:bc:
         fb:06:d3:1c:fb:59:11:38:0b:4d:bb:11:9d:7a:93:81:7c:db:
         2e:64:be:67:cd:76:44:0a:04:4d:22:97:0e:3d:d6:76:84:3f:
         da:12:32:7b:12:e2:0b:b1:ea:90:2e:90:7d:2f:cf:75:c5:a6:
         22:ef:12:a8:71:07:f2:39:d4:de:93:82:c4:ef:83:81:e1:a5:
         74:08:e4:a2:63:b2:37:0f:9f:c3:62:ba:72:31:b1:23:47:4f:
         dc:47:13:f3:f9:94:73:75:f5:e8:f7:62:bf:be:3e:7d:8f:d3:
         bb:b5:99:0d:6e:b8:de:57:0b:2e:50:8b:bb:f9:d4:c6:d5:5c:
         22:bc:f0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----