Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft
File:                     tji5qb9-MI8fus87TDpEVx8p33c.mft (raw, json)
Hash identifier:          kEMYwJUhGNmdSzOK1YIA+H2tXsTqvv+HADB4zdN99As=
Subject key identifier:   98:6B:E5:E5:9F:AE:D9:2F:20:C2:14:10:6A:7A:79:3A:9E:2A:8F:59
Authority key identifier: B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77
Certificate issuer:       /CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77
Certificate serial:       0887
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft
Manifest number:          087F
Signing time:             Thu 30 Jan 2025 20:40:00 +0000
Manifest this update:     Thu 30 Jan 2025 20:39:59 +0000
Manifest next update:     Thu 06 Feb 2025 20:39:59 +0000
Files and hashes:         1: tji5qb9-MI8fus87TDpEVx8p33c.crl (hash: Y9CvPE+uQq3KzspEB2DV/TTBptodOBebI+qu3INp2rw=)
                          2: 5B5592F07B0711ED9D595969C4F9AE02.roa (hash: X3za7tb012nQ35aH6QmGQxHCcdo71+UHrc8XplSbxaA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2183 (0x887)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77
        Validity
            Not Before: Jan 30 20:39:59 2025 GMT
            Not After : Feb  6 20:39:59 2025 GMT
        Subject: CN=679be3a0-4bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:da:22:1e:da:fc:ec:3f:14:25:2a:16:7e:14:
                    5a:4e:47:a8:74:4c:6c:f2:88:b6:e6:1c:37:22:fc:
                    e8:5e:41:5f:e4:c1:67:ac:a8:c5:25:0e:3a:32:29:
                    35:5a:fb:4a:32:ae:ed:37:ca:19:de:c0:7c:22:b9:
                    71:4d:16:65:74:3f:13:1b:36:d0:b3:bf:d5:3d:cb:
                    63:ae:7b:f8:2a:1c:c0:1b:df:9a:c7:46:b8:72:d9:
                    5d:6a:98:60:44:b7:4c:b8:e9:04:4d:c2:6f:69:26:
                    e0:67:ec:0d:7f:e6:13:f9:83:4d:62:30:18:ce:08:
                    f9:40:45:08:15:07:c4:04:16:fc:d5:8a:4b:c9:a8:
                    9d:57:ba:19:f5:54:16:64:63:7a:f1:41:f2:5c:bc:
                    a8:58:6b:19:1a:3e:06:5a:f1:d1:8f:8f:a8:4a:50:
                    cd:ac:b0:1b:07:15:c0:b8:eb:0a:b1:d0:64:e9:9e:
                    4d:01:13:5f:fe:2e:cf:81:a1:d9:27:b1:93:53:7a:
                    ef:9a:46:ec:02:fe:9d:9b:c1:ee:17:59:ae:2c:01:
                    80:78:85:eb:5f:ac:13:82:0a:15:88:4c:aa:c8:8b:
                    92:a1:ac:2a:9d:ec:72:86:08:f0:64:0c:cb:75:96:
                    72:94:98:8e:d6:d1:ce:3f:ff:37:d3:ed:b8:47:1a:
                    e4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6B:E5:E5:9F:AE:D9:2F:20:C2:14:10:6A:7A:79:3A:9E:2A:8F:59
            X509v3 Authority Key Identifier:
                keyid:B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:a6:91:de:c9:70:66:af:c0:f7:d7:c7:3a:5c:7a:0f:ad:1a:
         83:38:fa:95:4c:7c:fc:4e:dc:72:70:28:ab:32:e8:7f:a1:a8:
         0f:09:13:52:f4:23:c7:9c:5e:f9:44:b3:f8:b5:7a:49:01:cc:
         95:41:f8:25:b3:fa:66:35:46:ca:4b:35:0b:17:7e:63:26:c6:
         42:b3:94:0d:b8:0e:80:af:f3:68:95:30:14:54:ff:69:8a:1e:
         6d:b4:c2:e7:b9:c9:90:91:81:42:ec:b3:4e:bd:e3:7d:dc:35:
         8c:cf:ac:01:4a:d0:74:40:11:c7:f5:20:64:e9:50:13:6f:55:
         3c:48:fb:20:0d:73:2d:cb:57:49:a0:55:ce:3d:c3:e9:26:71:
         8d:bb:48:c1:a9:67:f8:d0:72:94:92:92:82:43:f9:e2:4f:06:
         7e:e4:8c:eb:36:b8:50:c4:2a:4a:c7:64:c6:5f:cd:17:2e:f3:
         13:63:36:6b:ff:12:a5:d9:7a:68:77:11:99:13:fa:cc:2a:b5:
         29:35:fd:ac:5e:25:4f:66:81:86:61:56:47:9b:9f:88:b6:c4:
         07:23:6a:69:a5:72:85:05:72:cb:91:6e:fc:26:77:d9:d2:16:
         20:56:da:b2:14:56:d1:af:20:6a:9b:1b:e6:fa:31:0a:5e:3e:
         81:b1:17:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----