Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft
File:                     iTEhgF-UFH033MbXS2N4Rvcjl8U.mft (raw, json)
Hash identifier:          RvOo3ZMr2ftSAG45w58ubxberm+cET4ovKGgs1QsffM=
Subject key identifier:   48:F6:F9:15:30:B2:B0:35:AB:3A:01:53:AF:2D:F0:1A:E4:43:FA:51
Authority key identifier: 89:31:21:80:5F:94:14:7D:37:DC:C6:D7:4B:63:78:46:F7:23:97:C5
Certificate issuer:       /CN=A917E00F/serialNumber=893121805F94147D37DCC6D74B637846F72397C5
Certificate serial:       0517
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft
Manifest number:          05DA
Signing time:             Thu 30 Jan 2025 23:36:33 +0000
Manifest this update:     Thu 30 Jan 2025 23:36:33 +0000
Manifest next update:     Thu 06 Feb 2025 23:36:33 +0000
Files and hashes:         1: iTEhgF-UFH033MbXS2N4Rvcjl8U.crl (hash: q0DqE6mVQyd4n5ZBJRJKXE/qc5fNOR6/5XUxYJvK87E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1303 (0x517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E00F/serialNumber=893121805F94147D37DCC6D74B637846F72397C5
        Validity
            Not Before: Jan 30 23:36:33 2025 GMT
            Not After : Feb  6 23:36:33 2025 GMT
        Subject: CN=679c0d01-8f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5c:a5:0f:3f:c9:38:a6:a6:e6:9f:ff:77:04:
                    59:17:33:3e:02:01:d7:33:59:b5:de:99:fd:9a:b2:
                    46:f6:62:c9:97:24:4c:f4:fd:3e:53:9d:28:af:67:
                    6c:ac:fe:9f:f9:9c:aa:c1:91:4e:37:69:df:a2:0d:
                    02:ea:f0:37:81:cc:d7:bf:8c:ff:b5:52:b8:fc:60:
                    7f:1b:4c:ec:9a:0e:2e:e1:c2:f6:5b:d6:4a:7a:3b:
                    46:07:58:95:19:25:91:77:27:18:b3:dc:66:f8:a9:
                    63:a5:d0:92:d5:67:09:58:43:1b:75:4b:23:4f:d1:
                    b7:ae:22:c7:30:ea:ca:94:1e:5d:96:c1:ee:36:8f:
                    c2:50:cb:88:44:77:75:ff:0a:86:68:fa:fc:63:5b:
                    50:95:69:29:59:dc:93:03:96:44:1a:45:cd:94:0b:
                    c5:e5:d5:7e:68:1c:f6:e0:bb:5b:38:b5:2a:ea:6a:
                    d9:df:cc:b6:91:78:67:a1:e6:35:ba:43:27:22:c8:
                    a8:1c:60:99:08:12:91:05:74:e1:a1:0a:93:28:1b:
                    ca:27:0c:6c:86:da:11:0b:c1:96:b7:50:9b:b7:28:
                    2a:7b:0c:e1:56:69:78:20:4d:11:31:6c:f6:e7:95:
                    bc:21:09:ea:95:d7:92:de:60:db:5f:b5:39:6f:3d:
                    4c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F6:F9:15:30:B2:B0:35:AB:3A:01:53:AF:2D:F0:1A:E4:43:FA:51
            X509v3 Authority Key Identifier:
                keyid:89:31:21:80:5F:94:14:7D:37:DC:C6:D7:4B:63:78:46:F7:23:97:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:e7:02:b0:20:6c:0b:28:44:a5:f5:2a:68:de:49:2f:8e:56:
         b7:ca:23:0d:b5:31:0b:9b:49:a8:0f:57:ec:2f:1b:47:a0:f4:
         ef:44:cd:26:d7:69:20:8e:5a:75:d0:1f:48:59:34:a6:21:19:
         e0:06:fe:75:bd:d7:b0:e6:f5:fe:4a:d1:90:4c:f6:46:17:e5:
         9f:12:3d:dd:2c:a5:71:92:72:97:d6:8b:89:3d:f6:5a:ec:47:
         55:53:95:92:97:76:d5:31:1c:7b:40:e3:3a:a5:57:51:d7:4c:
         d5:2d:ab:6a:7c:5b:f7:5b:8e:e6:50:0b:9e:62:4a:68:3d:a2:
         4f:52:a5:9e:b6:ea:fa:7c:28:f4:5c:50:59:ff:db:73:08:55:
         38:1b:af:1a:16:c7:3f:40:4d:85:4e:10:b4:19:d8:2b:42:d9:
         38:e9:21:e8:ed:65:e8:04:17:e7:98:89:8a:1a:32:cd:12:51:
         60:ce:45:fa:26:79:f7:86:6f:64:6c:35:6d:8a:b0:f2:d4:b3:
         67:e1:e3:83:b5:ac:6f:87:48:d8:0f:16:54:de:5b:b9:42:e2:
         ef:2d:84:70:99:b5:ba:33:dd:c5:e4:db:c5:fe:3b:13:a8:89:
         7a:6b:20:f2:a3:39:d1:62:5d:79:88:7e:0d:62:79:11:b8:0a:
         aa:90:ee:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----