Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
File:                     kJUWWXx2-jz_qxUgjArpiGY0qgM.mft (raw, json)
Hash identifier:          mIVdNrCd7cwkYcPvk2clUctkCgHTC5Uh8crmufxnT8Y=
Subject key identifier:   44:A8:64:C1:8F:86:CA:64:41:84:70:2B:1F:BC:79:0F:18:62:14:10
Authority key identifier: 90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03
Certificate issuer:       /CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
Certificate serial:       0A6A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
Manifest number:          0A63
Signing time:             Thu 30 Jan 2025 19:49:00 +0000
Manifest this update:     Thu 30 Jan 2025 19:49:00 +0000
Manifest next update:     Thu 06 Feb 2025 19:49:00 +0000
Files and hashes:         1: kJUWWXx2-jz_qxUgjArpiGY0qgM.crl (hash: NvxMWeyNalKPBZV2lpctmL5hmEYd1lA8Q0PguvlbTJ4=)
                          2: 54EDB8542E1811EBB4E80B1FC4F9AE02.roa (hash: vez5gs+Pt4ya6YLdOueO0QMF6IGNEZr0U1SUVMLX8CY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2666 (0xa6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
        Validity
            Not Before: Jan 30 19:49:00 2025 GMT
            Not After : Feb  6 19:49:00 2025 GMT
        Subject: CN=679bd7ac-80c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:48:2b:85:63:e2:17:7a:5f:4c:09:78:7e:4e:
                    91:5f:de:c3:52:dd:0f:d5:62:bd:8e:e6:3f:76:59:
                    8b:ca:38:3c:6c:df:d8:70:29:ed:40:20:b5:bb:9d:
                    d3:8f:f7:5c:b1:c4:75:56:ee:e0:fc:30:42:77:0e:
                    24:06:cb:fa:c4:68:e7:4f:3e:56:62:47:9b:6d:cc:
                    ca:79:3f:2b:d6:91:32:a1:4e:28:b2:e9:87:79:d4:
                    d4:ef:9e:a8:63:c6:5a:c6:b4:03:ca:c0:5a:0d:cf:
                    ba:1c:43:6e:46:db:09:55:25:68:ab:7c:b4:09:90:
                    0a:e0:cb:c7:07:09:74:48:51:cc:89:9a:bd:cf:d4:
                    49:31:9a:fc:45:68:e6:64:51:7b:91:20:e2:55:a5:
                    fd:ef:a0:9e:2f:36:0e:46:ff:1f:52:bd:ab:25:c9:
                    76:2c:d8:97:fb:f6:dd:af:19:0b:62:1b:1c:ed:2b:
                    c4:62:0e:63:f4:cb:53:5e:69:59:15:d3:a8:fa:86:
                    5e:71:5f:1f:4a:2c:3f:f5:d3:aa:9a:11:1b:48:3c:
                    b9:4b:66:b9:f5:8b:d9:03:e4:fe:41:6d:83:53:1f:
                    bc:63:79:aa:ba:f3:43:c7:f3:87:46:ca:4f:e2:34:
                    5a:cc:fc:01:1f:43:ce:77:ec:06:94:df:af:b0:f4:
                    08:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A8:64:C1:8F:86:CA:64:41:84:70:2B:1F:BC:79:0F:18:62:14:10
            X509v3 Authority Key Identifier:
                keyid:90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a1:7f:8a:49:f7:eb:25:3d:58:17:a5:b5:cf:8b:0a:9f:b5:
         79:11:37:56:f9:59:ba:1d:5d:42:bd:ae:ec:dd:60:0a:b4:0c:
         79:b9:52:08:fa:f2:a5:15:ea:27:da:7c:9e:02:fb:c6:93:d4:
         36:17:e0:2c:b5:52:f6:ec:55:75:75:6c:91:0e:9a:fa:d5:e9:
         9b:4b:b7:ef:98:32:f8:54:61:f9:a1:d4:e2:f3:85:0b:d5:11:
         b6:a9:58:dc:0e:90:87:a6:7b:38:99:90:51:80:45:db:27:aa:
         46:f0:7d:4d:93:e8:a8:e6:e5:3c:c3:b8:6c:57:76:15:ca:d1:
         0c:24:11:87:45:12:78:e8:a5:32:42:46:be:6c:12:ef:64:ae:
         e8:a5:5a:7b:e1:2d:c4:41:99:b2:2e:2b:91:76:11:31:74:26:
         54:34:a1:e8:13:72:96:0c:45:10:f6:3b:cf:72:75:5d:c7:53:
         54:39:f0:70:24:5c:1d:49:1f:69:95:ff:b7:cf:a6:74:74:5c:
         32:77:a4:a3:ff:ad:99:74:45:3c:e6:8d:e2:d8:77:73:d2:44:
         31:d6:c6:35:e8:c5:bb:53:eb:f9:c2:04:08:df:2a:3f:1a:56:
         e5:c2:85:f4:68:2d:da:a6:a9:bb:69:7f:fb:c0:11:29:67:90:
         ea:bf:aa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----