Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft
File:                     D-jKZIcKPWORHI0tZRuinKztDso.mft (raw, json)
Hash identifier:          L7GUZrKeA5Nm06m2IVx+/nNM531acq4ha+E8NSzP3Eo=
Subject key identifier:   41:E2:A6:56:FD:FC:99:EE:23:8C:18:28:04:8E:C1:D6:AF:4D:3C:7B
Authority key identifier: 0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA
Certificate issuer:       /CN=A91B428B/serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA
Certificate serial:       097D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft
Manifest number:          0977
Signing time:             Thu 30 Jan 2025 20:13:50 +0000
Manifest this update:     Thu 30 Jan 2025 20:13:50 +0000
Manifest next update:     Thu 06 Feb 2025 20:13:50 +0000
Files and hashes:         1: D-jKZIcKPWORHI0tZRuinKztDso.crl (hash: z7hQa1moTG9y1V6swuGMiQ7qBudsehwJyLURZMwsEko=)
                          2: 319DF660847811EA8EE07E81C4F9AE02.roa (hash: FKZsZ6eAd5BvbnauopEY4uKdxyNb8Ct9XBk7pe2RwBw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2429 (0x97d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B428B/serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA
        Validity
            Not Before: Jan 30 20:13:50 2025 GMT
            Not After : Feb  6 20:13:50 2025 GMT
        Subject: CN=679bdd7e-06dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b5:a1:9b:46:4d:5a:d6:3d:2b:1c:cf:1c:16:
                    a2:36:5f:5a:00:67:ac:f8:ac:69:99:f2:7d:bd:71:
                    a6:bb:7c:da:21:6f:15:63:1f:11:73:60:8f:56:09:
                    2b:01:6d:4f:c8:14:11:26:74:ee:dc:22:4f:55:9e:
                    8b:72:14:f2:fe:9b:21:74:02:d7:61:68:03:ba:81:
                    a5:d1:94:0c:66:c1:a1:dc:d0:79:cf:9f:64:a4:73:
                    91:91:07:9b:c7:9e:5b:d5:1b:7b:42:43:61:fd:de:
                    6e:b0:4d:d3:f8:5e:51:e9:eb:a7:4d:82:5b:3e:89:
                    fc:1f:20:c2:10:75:fe:dc:37:57:1e:42:2d:43:2e:
                    ec:ed:1a:9d:a5:3f:f8:8a:bc:b3:37:cd:27:29:71:
                    15:6b:5b:6a:1c:9a:94:37:a6:f2:9b:4f:9d:dc:37:
                    a6:d5:04:69:2e:f4:6c:43:9c:ee:1a:3b:1a:64:6c:
                    fd:79:e9:e5:91:79:d2:a6:9a:ab:de:9a:b3:40:f8:
                    94:ee:4b:68:1b:08:c7:a6:64:3d:8d:d9:81:e9:82:
                    b5:59:27:fb:ac:d2:0d:e6:49:29:fd:6d:d1:8e:55:
                    d7:22:d8:04:d0:23:85:d1:9c:b2:97:b3:93:0b:1f:
                    33:b2:be:93:38:3d:43:96:07:dc:ec:58:84:64:fa:
                    74:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E2:A6:56:FD:FC:99:EE:23:8C:18:28:04:8E:C1:D6:AF:4D:3C:7B
            X509v3 Authority Key Identifier:
                keyid:0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:dd:cd:fb:75:94:82:20:8e:4e:64:2e:3e:29:3f:01:83:81:
         26:57:9a:cf:73:7a:91:40:a0:6e:0d:d1:9c:e3:12:73:0d:04:
         9f:1f:6c:96:68:da:49:cc:28:59:27:90:0b:32:53:52:c3:26:
         53:79:14:7f:d2:37:f1:58:6a:14:3c:48:fa:84:64:1f:c0:73:
         37:73:6e:d0:69:d4:ac:22:09:cc:2a:2e:5e:c5:dc:30:96:dd:
         77:2f:c8:88:6f:1b:b0:ff:1e:73:af:61:37:95:08:a6:da:59:
         8d:4e:4b:c0:a7:85:1e:34:8e:8d:c5:e0:b3:6a:2b:33:7a:9f:
         c6:fb:a3:bb:94:7a:67:18:6f:36:d2:b5:45:ae:0c:08:94:c5:
         0a:8e:1e:e9:ef:92:39:d8:1c:e9:3a:e7:c2:64:f1:fe:d6:2f:
         83:b6:66:6a:1e:77:75:6e:aa:75:d2:f2:a3:c1:27:ec:f1:bf:
         93:a7:be:9d:2b:93:f3:01:49:ac:a4:ed:97:e8:72:a7:16:45:
         7f:88:5c:5a:47:54:5e:e2:ce:d4:19:b4:d3:52:2a:4f:dc:9b:
         76:17:4f:4a:82:e1:c7:13:77:97:6e:e7:1a:bb:10:0e:94:e1:
         f6:7f:54:99:1b:2e:d7:e5:60:67:47:20:8c:c0:38:02:ab:60:
         39:10:30:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----