Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
File:                     UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft (raw, json)
Hash identifier:          I3lOsTUswX3QGKfM4wfxs6bhMncKqU6buzLlPiSWidM=
Subject key identifier:   3D:08:31:20:B4:AA:86:11:E1:BA:97:82:30:67:E9:C2:64:2F:23:9E
Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
Certificate issuer:       /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
Certificate serial:       0121
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
Manifest number:          011C
Signing time:             Fri 31 Jan 2025 03:57:33 +0000
Manifest this update:     Fri 31 Jan 2025 03:57:33 +0000
Manifest next update:     Fri 07 Feb 2025 03:57:33 +0000
Files and hashes:         1: UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl (hash: OMrx7+1SeKFx1qBWz8Y1bXdkUwIe9gl4vJuH3llsPmE=)
                          2: 160A52A854EF11EFB9156612C4F9AE02.roa (hash: foSc151i9Iw1FdFYIvaUCOjJLGeEf5CPJvtL9xEjyMc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
        Validity
            Not Before: Jan 31 03:57:33 2025 GMT
            Not After : Feb  7 03:57:33 2025 GMT
        Subject: CN=679c4a2d-cd12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:26:61:10:47:50:8f:36:89:79:79:49:72:ff:
                    e3:c6:6a:74:d4:de:5d:cc:44:d7:89:82:c4:9a:f1:
                    02:a8:07:5a:15:9f:c4:95:41:44:46:ae:1c:ed:bb:
                    30:28:15:5d:78:90:82:c8:87:59:26:da:d7:63:8c:
                    0e:0b:72:1e:ab:28:11:5d:56:09:36:8b:7c:a4:5d:
                    97:1d:e9:16:75:2f:01:21:14:57:42:73:5e:38:3e:
                    a3:9d:eb:25:55:aa:b8:7e:59:d0:ef:06:c1:0b:38:
                    85:59:46:36:40:f3:ac:1b:e1:db:a3:99:fa:f1:c7:
                    89:c6:7f:a3:c9:96:23:55:74:02:9c:a8:dc:20:00:
                    03:2a:87:09:5d:8c:ab:fe:42:b6:61:4c:00:c0:9b:
                    c8:48:44:49:a4:e7:5c:3a:4b:1f:87:4b:5a:e2:9b:
                    7b:fc:73:93:75:5d:ba:14:0e:e9:10:55:cc:44:2c:
                    53:d2:d5:32:28:0b:68:80:c2:1b:14:14:96:41:ad:
                    57:ce:e9:94:2c:81:a2:74:66:e5:db:f3:4d:e5:46:
                    bb:6e:95:fd:26:25:df:11:77:7c:a9:4e:d2:6a:bc:
                    e1:ae:be:a7:f3:bc:0f:25:b1:02:fa:b5:59:8f:b1:
                    8b:7f:44:11:b5:69:a7:d9:fa:f8:05:08:76:d5:8e:
                    57:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:08:31:20:B4:AA:86:11:E1:BA:97:82:30:67:E9:C2:64:2F:23:9E
            X509v3 Authority Key Identifier:
                keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b9:bc:eb:97:2c:56:73:9c:04:bd:37:e9:13:de:07:e1:d0:
         fd:af:7e:0b:c5:f7:9b:f8:dd:7a:92:dd:c9:9d:4c:69:04:e0:
         40:fb:15:14:69:25:29:4c:36:15:e8:d0:ba:c6:92:18:31:2f:
         87:39:f8:c9:82:0a:04:6f:a8:ea:ac:54:34:f0:01:c6:82:71:
         3b:7b:3d:1a:78:79:3c:0c:58:87:6a:72:c0:79:91:7d:03:e5:
         f9:8e:df:ab:72:9e:57:97:35:e7:ed:fa:0b:c4:54:39:11:bf:
         65:54:c6:f8:28:b3:8b:21:66:3a:88:17:aa:8e:14:ea:45:d7:
         a8:cd:d3:47:f1:09:c1:48:22:6c:d5:f3:f4:f2:6a:ac:cf:ce:
         80:14:f4:6c:e8:60:00:e7:1c:3c:c5:c7:1b:ca:20:62:57:11:
         e4:6b:df:e0:8a:1c:ce:c2:06:55:b2:b1:41:5a:84:54:d0:82:
         cb:eb:59:cd:ed:cc:c0:81:7a:1a:f2:47:a8:60:b5:44:9c:8b:
         d6:4a:49:69:84:12:f5:8d:8b:a5:84:fe:d8:73:0c:86:c2:43:
         bf:87:d2:54:eb:e0:2e:71:56:9c:a3:75:e5:2e:85:36:f5:86:
         be:67:15:cb:55:8e:0e:2a:4a:cb:2a:07:25:58:58:8e:52:30:
         85:ae:d4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----