Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft
File:                     3vCat-atSADQZ9cCq_MCJincVuA.mft (raw, json)
Hash identifier:          8LOVL8+eVwIrxLSJ+Z5DD6dAXreb6mNZHtmrmMXywWc=
Subject key identifier:   9E:3A:32:B6:BA:B4:88:FB:3B:A9:E1:E7:23:3B:23:4B:F2:B6:7A:C1
Authority key identifier: DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0
Certificate issuer:       /CN=A91B7B32/serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft
Manifest number:          0103
Signing time:             Fri 31 Jan 2025 04:09:11 +0000
Manifest this update:     Fri 31 Jan 2025 04:09:11 +0000
Manifest next update:     Fri 07 Feb 2025 04:09:11 +0000
Files and hashes:         1: 3vCat-atSADQZ9cCq_MCJincVuA.crl (hash: uC3WWl/EcO3my/ovKdTYyJMDwuXxXH10oDKAtzWqscE=)
                          2: 2B7210D251F211EEA079D567C4F9AE02.roa (hash: 62+q+uvhfjJ30zAscNkGLPxXNqqCO9Ks9yOvU1E/mYM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7B32/serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0
        Validity
            Not Before: Jan 31 04:09:11 2025 GMT
            Not After : Feb  7 04:09:11 2025 GMT
        Subject: CN=679c4ce7-5d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:d2:d7:ea:7b:f1:74:95:d3:eb:75:34:b4:
                    1c:b8:c6:ad:93:af:f8:d8:eb:2f:3c:74:28:ac:fc:
                    a1:c6:04:66:bb:4b:63:38:91:c0:33:7d:b5:8e:e0:
                    e8:50:a3:a3:15:49:a2:96:5a:98:fe:82:4e:81:34:
                    d6:f0:7f:5c:8c:0c:bd:bd:74:82:ea:b7:50:de:9a:
                    63:4c:fd:9b:3e:75:59:22:a5:f5:d8:5c:fe:75:f4:
                    bf:d6:98:df:2b:c9:6f:b7:6c:d2:51:ba:ce:df:ed:
                    22:34:8e:27:c5:fb:16:3a:c9:6f:d1:94:69:48:dd:
                    30:1f:26:3f:84:be:ce:3d:f6:11:4d:26:99:c0:9c:
                    57:1c:c2:ca:ff:2b:84:e7:a8:47:da:30:76:59:0b:
                    24:8a:51:ec:1b:51:f5:e9:45:23:62:92:c3:28:a1:
                    3d:de:29:6a:30:54:ca:42:b1:5d:4f:b7:49:70:97:
                    cd:66:6a:96:17:9e:58:9e:12:0e:ae:50:05:56:2d:
                    68:d9:2a:bf:2b:a3:7d:23:d1:31:9d:f3:ea:a5:f9:
                    95:03:f5:0c:94:e3:1b:15:14:50:ad:e9:2b:12:a7:
                    75:8e:7d:96:0b:6c:93:b3:8e:37:71:17:70:02:82:
                    79:1c:bb:5a:60:51:51:57:c7:dc:a7:63:71:37:fa:
                    40:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3A:32:B6:BA:B4:88:FB:3B:A9:E1:E7:23:3B:23:4B:F2:B6:7A:C1
            X509v3 Authority Key Identifier:
                keyid:DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:5a:0c:27:ed:03:5d:5f:83:8a:ea:43:53:28:33:0a:05:6e:
         60:d3:69:97:0d:e4:db:57:ff:26:78:df:bd:fc:0b:20:34:31:
         ce:c4:dd:87:ae:8b:88:07:f0:c2:31:16:39:ba:68:ad:6b:f8:
         8a:f3:4f:75:66:66:ca:a0:93:9d:a9:5b:9d:0b:46:c6:79:10:
         e3:af:0a:83:4f:85:c0:68:30:a9:a2:99:97:99:c1:4e:a9:4c:
         fa:20:b1:cc:ba:38:82:a5:65:1a:68:70:c3:eb:da:10:69:65:
         6f:0f:1f:80:7a:80:aa:57:6b:c1:37:40:7c:e6:f9:bc:2d:d6:
         0b:7d:f9:66:6d:e3:89:98:78:26:18:61:d0:2c:03:76:59:39:
         d7:ee:a4:7e:29:0d:29:8d:fd:75:ad:66:38:f5:72:3d:93:18:
         92:ad:3e:8e:b5:5d:3a:60:95:c6:84:98:08:da:5e:b4:7d:3e:
         36:12:2e:e2:7c:59:29:50:ad:4f:b5:6a:23:8d:3e:38:c9:9c:
         68:d1:e6:17:07:5a:a4:1a:b8:05:ad:b2:50:bd:a8:b5:2d:73:
         a7:8f:c7:70:d8:b8:a4:e7:c9:77:52:75:65:ef:81:70:e4:e8:
         70:a1:f4:c5:8f:6e:59:5c:aa:fe:3c:8f:0e:a3:12:54:6a:2f:
         e2:a9:f3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----