Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft
File:                     g3GOntShsiknnjylVdRNbh_KjMU.mft (raw, json)
Hash identifier:          FrGfJg69Ro0R0G+hB/NpG6Ys9+V6E7abCIfRD0s/hPo=
Subject key identifier:   E0:C0:54:12:15:CA:E3:B2:B4:F1:6F:60:B4:CD:9B:29:4D:CF:1A:FE
Authority key identifier: 83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5
Certificate issuer:       /CN=A917A17B/serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5
Certificate serial:       0C10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft
Manifest number:          0C06
Signing time:             Fri 31 Jan 2025 18:30:47 +0000
Manifest this update:     Fri 31 Jan 2025 18:30:46 +0000
Manifest next update:     Fri 07 Feb 2025 18:30:46 +0000
Files and hashes:         1: g3GOntShsiknnjylVdRNbh_KjMU.crl (hash: Xv5AZiXbtB6M0DEWsKdMzqGoAGWgpqUEd2TxORtXhtg=)
                          2: A473C9A008F311EE98719810C4F9AE02.roa (hash: XJVLx8NnT51CedP11E2S/7EWqPqU5YY70j5sKBFjL+M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3088 (0xc10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A17B/serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5
        Validity
            Not Before: Jan 31 18:30:46 2025 GMT
            Not After : Feb  7 18:30:46 2025 GMT
        Subject: CN=679d16d7-1e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:da:59:2c:fe:51:60:83:49:04:04:6a:85:f2:
                    24:6a:bd:6d:e0:71:7b:a3:7e:19:e2:9a:0a:e5:f1:
                    90:19:9a:dc:4b:b7:2b:35:31:d1:51:8e:01:d1:09:
                    2c:95:24:be:cf:41:04:2a:9b:6e:ef:47:b2:e2:1f:
                    df:1d:d8:9f:cd:64:d8:90:67:4a:36:78:5c:c8:e0:
                    a7:93:54:83:18:00:a4:7e:2e:7f:c3:fe:ea:13:a8:
                    02:70:b4:16:28:87:78:46:d5:fd:3f:42:68:3f:c1:
                    f0:58:f3:20:39:c5:e6:03:80:1c:d4:a5:59:28:8f:
                    e5:0c:87:9a:0c:39:a9:ed:5f:ba:89:3c:ec:32:25:
                    ec:d2:3c:20:d5:bb:76:48:76:9f:6b:2b:9a:40:96:
                    fa:6b:e5:fc:1c:c1:d5:a5:f5:9a:fa:e7:bc:95:91:
                    dc:0c:0f:0b:46:76:85:79:e7:a9:e3:10:15:a7:7b:
                    ce:9d:43:6d:9a:0d:08:67:1f:62:ab:c5:3b:2b:59:
                    18:b6:da:c0:fc:b3:0a:d5:97:da:b4:19:43:4a:9d:
                    33:b1:f1:d8:b9:fd:52:58:42:54:e7:cc:8f:f6:4c:
                    3d:10:f4:14:a7:c9:11:ff:0e:5e:c5:0e:2e:d0:ba:
                    bb:05:b6:29:81:5d:b3:8b:8b:c7:35:eb:75:15:d7:
                    75:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C0:54:12:15:CA:E3:B2:B4:F1:6F:60:B4:CD:9B:29:4D:CF:1A:FE
            X509v3 Authority Key Identifier:
                keyid:83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:68:3e:4b:a8:db:46:63:84:a5:df:3f:db:95:78:6b:4b:50:
         6e:6e:07:b6:17:df:64:06:bd:a9:3a:1d:45:48:1e:07:69:4b:
         58:90:3e:a4:8f:ce:9b:46:81:b2:5b:a3:0c:87:82:6e:0f:a2:
         63:1b:71:dc:d6:8f:5f:f9:28:7b:5d:f9:0a:f2:30:e7:c8:18:
         b7:9e:fa:22:9c:9b:43:bf:8e:9f:25:24:96:1d:c4:28:be:dc:
         33:a1:68:b4:b4:f8:a4:a2:73:35:7b:98:71:ef:24:f2:81:95:
         01:ac:92:41:af:d2:e8:99:42:17:41:52:c1:48:d7:a6:49:0b:
         67:58:4a:dd:03:9c:f9:87:ed:da:be:82:07:0d:55:1f:d5:dd:
         66:14:51:48:9a:7a:48:1a:a9:0d:23:9b:36:73:b7:40:b3:be:
         55:07:b9:51:be:9e:f8:91:4d:45:f4:4f:60:52:8e:29:7b:7d:
         9e:7b:d9:d7:4c:76:d3:6a:21:07:ba:64:dd:9a:d6:02:09:23:
         aa:67:ff:1d:a1:bd:bd:1a:2a:f0:25:67:6d:ed:2e:cc:56:b3:
         63:16:a7:df:37:e0:c5:17:a7:96:95:69:e4:01:7b:e3:a0:03:
         50:23:9a:3b:5e:04:d5:7f:fd:bc:09:af:6c:b2:d2:41:7f:9b:
         ae:63:8a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----