Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft
File:                     k32ZUe4fk_ysJDM7CD-dfy458Pk.mft (raw, json)
Hash identifier:          cwtDgZJKz0Q5G8XQrQH3gUNkrVAz9znwXek4eWNqhYw=
Subject key identifier:   66:12:17:09:32:1E:D1:F1:52:A7:AD:65:8E:75:40:12:9F:28:8D:95
Authority key identifier: 93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9
Certificate issuer:       /CN=A919C8C4/serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9
Certificate serial:       085D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft
Manifest number:          0857
Signing time:             Thu 30 Jan 2025 20:45:17 +0000
Manifest this update:     Thu 30 Jan 2025 20:45:17 +0000
Manifest next update:     Thu 06 Feb 2025 20:45:17 +0000
Files and hashes:         1: k32ZUe4fk_ysJDM7CD-dfy458Pk.crl (hash: 82TKuT3UmobqwOeTEnUbgnl3TMXB7Ze2xqmcup5vZds=)
                          2: 6A3C327ABD1711EA8A3C8E20C4F9AE02.roa (hash: ZaOhtNpoJXpwbixd1fVCzbCopkeyjuePv/WgNhSqITE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2141 (0x85d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C8C4/serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9
        Validity
            Not Before: Jan 30 20:45:17 2025 GMT
            Not After : Feb  6 20:45:17 2025 GMT
        Subject: CN=679be4dd-ffbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:de:fe:63:23:a8:ec:d8:84:f6:03:95:3b:9d:
                    b9:cf:aa:a8:ae:de:13:20:7d:71:7e:44:3c:fe:17:
                    80:a7:17:b6:ab:9f:2e:da:89:5e:ef:4c:89:e3:bf:
                    42:f2:66:d2:46:4d:a8:0d:f4:17:d1:0d:2e:4a:92:
                    1b:73:c4:8c:bb:cb:88:fe:9d:4d:de:e7:b3:cf:c4:
                    5e:01:34:4c:71:f8:14:58:72:38:5b:0f:c2:0a:bc:
                    a0:cb:e4:50:75:28:f4:e6:f5:f0:df:12:1e:a6:16:
                    23:41:a9:fa:42:7d:86:f4:4c:a4:6b:7e:67:16:31:
                    1f:b4:2e:b0:a9:b5:8f:3e:74:cd:85:c6:65:75:ed:
                    6e:dd:81:c5:c7:46:4c:71:26:cb:ee:0f:66:21:ed:
                    ec:ed:39:b2:0c:c3:5f:23:ee:57:0a:e4:3e:1d:6a:
                    9d:51:aa:97:12:6a:82:b5:65:83:91:86:94:98:bf:
                    50:62:62:13:a7:3f:83:8a:b5:9f:00:f9:83:d4:b7:
                    3c:6a:ff:01:18:d0:fa:55:96:36:b9:8c:24:1e:df:
                    d7:ab:44:46:68:07:ad:1f:7d:b1:59:23:b7:70:8f:
                    fd:98:72:55:5c:6c:9d:25:4e:05:48:97:6c:68:aa:
                    47:6c:34:fb:13:8e:31:8f:2c:2c:39:09:00:e8:64:
                    f7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:12:17:09:32:1E:D1:F1:52:A7:AD:65:8E:75:40:12:9F:28:8D:95
            X509v3 Authority Key Identifier:
                keyid:93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:1f:bc:44:1c:18:e7:60:4b:ed:76:1b:eb:29:70:cb:df:5c:
         ad:e0:02:1a:ef:e1:cf:0c:ca:07:7a:b1:2f:d0:ab:dd:ef:df:
         4b:94:e2:dc:6b:f8:2a:e4:fc:9a:00:71:66:ec:48:03:7c:d2:
         5b:c2:c8:ff:f6:9a:e1:28:aa:d5:2f:a7:e7:35:b9:4a:8c:9a:
         d3:15:73:b4:ae:27:7c:29:fd:a1:1c:ea:37:5d:2a:11:cc:79:
         25:1d:c1:a6:55:b2:03:b5:f8:fd:bb:e1:12:f6:e7:91:ca:e2:
         bd:20:53:87:ea:95:cf:e3:f6:be:18:83:d8:20:5f:34:2c:77:
         73:cc:83:a7:aa:b6:38:42:96:bc:06:97:59:eb:2a:ff:42:11:
         3b:9b:90:e2:96:f2:b7:bb:1f:0f:df:6b:13:f5:e8:be:ea:59:
         97:4a:16:f3:8d:04:f4:64:92:f5:e7:e4:17:6f:d8:3e:bd:05:
         70:cd:e6:c0:51:2f:b8:08:78:8c:22:03:74:29:4f:a0:ce:c8:
         ad:af:b1:7c:3e:7e:2c:0f:c5:87:ce:23:6d:0c:9e:3f:8a:c4:
         e9:91:3d:d3:29:18:3c:e2:70:90:42:8e:54:9f:29:d1:53:67:
         cc:bd:06:26:89:e6:67:45:bf:89:d4:ca:4f:d3:5d:5f:09:84:
         fe:9d:67:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----