Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
File:                     SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft (raw, json)
Hash identifier:          uUyVl90AbYx6gRCvXgxnaH4RLGOQx5vrTym4ygvhaSE=
Subject key identifier:   62:E1:94:A5:E8:3D:D3:0F:9C:79:5B:7F:88:50:CD:A1:67:DC:D4:93
Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
Certificate issuer:       /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Certificate serial:       01B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
Manifest number:          019D
Signing time:             Fri 31 Jan 2025 02:46:43 +0000
Manifest this update:     Fri 31 Jan 2025 02:46:42 +0000
Manifest next update:     Fri 07 Feb 2025 02:46:42 +0000
Files and hashes:         1: SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl (hash: UNhPju3xp2Wdj5dzFWa6kEZuKTo08VLIwldqRQ1jdtc=)
                          2: C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (hash: v/jaXAzZ3zqjA/FFCsb5LG3XmHkZ6SrkiodSFMHoHXI=)
                          3: CD23AE8C403011EEA773CE47C4F9AE02.roa (hash: AeibaNJLpaTPWil7j4GEFIcO329YJiVNQhWzIDubw3g=)
                          4: 6985BF0062D611EEB5C5721CC4F9AE02.roa (hash: v8Ohi2heIavbMrsxkeCZxN8LxhYk0piFR46tFcvgr/o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
        Validity
            Not Before: Jan 31 02:46:42 2025 GMT
            Not After : Feb  7 02:46:42 2025 GMT
        Subject: CN=679c3992-3e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ae:70:42:fa:fb:40:2e:45:ac:02:15:27:7d:
                    4b:24:ce:c0:11:0e:86:45:49:5d:0a:31:77:db:50:
                    49:66:74:03:3a:3b:bb:2d:3d:ee:7f:84:eb:bd:fd:
                    2e:5a:3a:eb:b8:3a:42:9e:06:98:30:55:cd:4f:58:
                    97:27:14:ae:7e:c2:31:95:41:67:73:29:c9:89:ef:
                    c3:52:e1:ba:e0:38:80:8a:11:69:18:ce:6a:77:45:
                    d4:73:7b:7f:73:31:a1:33:18:66:6e:0e:96:19:ba:
                    a1:7f:bb:8a:f6:0d:02:e2:89:9a:78:27:e3:31:86:
                    9a:95:ea:20:cf:c0:cb:a5:e9:72:87:74:c3:3f:32:
                    b0:3e:84:f4:7a:fe:e6:56:48:af:ce:c1:df:8f:df:
                    03:5a:91:dc:4d:8f:36:2e:23:fb:e3:45:c9:b0:02:
                    fe:d7:58:d2:f8:bc:08:4e:42:5c:28:e0:e2:ea:d0:
                    52:5f:b0:8d:a2:71:dc:e1:6a:59:1d:b8:11:df:77:
                    cc:e0:5b:fa:3c:95:45:37:4b:08:89:45:cf:6c:58:
                    72:92:fc:e7:70:d2:09:9f:3d:c5:09:70:f9:d8:27:
                    2f:53:1c:e5:97:a9:16:2a:b1:a5:be:42:f2:45:7a:
                    dc:ca:c0:35:c9:66:9a:78:60:b6:68:78:f1:e0:96:
                    fe:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E1:94:A5:E8:3D:D3:0F:9C:79:5B:7F:88:50:CD:A1:67:DC:D4:93
            X509v3 Authority Key Identifier:
                keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:37:80:86:0a:e8:3f:27:af:01:f0:27:e9:7e:8b:e9:80:a3:
         a4:a7:89:f7:f8:ed:c1:7a:d4:d8:d0:42:5c:05:fb:74:92:1b:
         c3:fb:d3:92:9d:69:a9:4b:b8:d8:19:48:bb:2b:89:65:02:88:
         12:3f:6c:af:b4:74:4f:f2:dc:cf:5c:2b:39:92:4f:d7:38:d2:
         21:6a:90:69:c4:63:fb:84:96:90:ca:94:04:e1:c2:15:6e:56:
         74:90:54:fb:cc:75:09:58:18:2f:d8:ea:b4:e9:8d:48:74:f0:
         c4:0b:ec:7b:5b:96:9a:60:3e:6e:11:0e:ae:60:ca:ce:26:c5:
         84:45:85:bc:e5:9e:43:2e:5c:f4:f6:a5:29:a6:ab:51:f7:38:
         d0:08:29:4b:52:4d:da:f1:05:82:75:34:84:1f:b1:1f:0d:f3:
         0e:54:24:93:fe:07:d8:ab:d6:70:3b:d4:f3:01:4c:e5:41:e0:
         ae:48:38:f1:bd:b2:11:61:f3:dc:fc:f2:ba:50:ef:35:6d:61:
         54:b2:22:b5:d2:e8:b6:8e:61:2a:99:ca:4e:24:92:91:c4:5d:
         16:c0:66:82:ef:97:b1:36:57:5f:74:e4:c5:c9:31:80:39:47:
         7a:2e:60:28:a9:bf:f4:46:c4:13:ea:33:94:e4:7b:1c:d5:69:
         93:d1:80:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----