Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft
File:                     iseesut_a1et3hy6QDxuWCNtNEU.mft (raw, json)
Hash identifier:          NjllHkQLrZGFPdPvtzuq5SL5kWZwYrSnYsqe5HxyVkQ=
Subject key identifier:   87:25:29:D2:81:B4:B6:A8:81:9F:DC:06:E7:3F:46:AE:58:88:35:AD
Authority key identifier: 8A:C7:9E:B2:EB:7F:6B:57:AD:DE:1C:BA:40:3C:6E:58:23:6D:34:45
Certificate issuer:       /CN=A91BF026/serialNumber=8AC79EB2EB7F6B57ADDE1CBA403C6E58236D3445
Certificate serial:       0832
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft
Manifest number:          1F18
Signing time:             Fri 31 Jan 2025 16:37:50 +0000
Manifest this update:     Fri 31 Jan 2025 16:37:50 +0000
Manifest next update:     Fri 07 Feb 2025 16:37:49 +0000
Files and hashes:         1: iseesut_a1et3hy6QDxuWCNtNEU.crl (hash: l6nPRJmWcYudv4mGH3FfFuJrnm4/G2X1SrTecpu1dus=)
                          2: 710575A2635611ED90FD8A69C4F9AE02.roa (hash: C8MKsyPVWAimK6phH4+d0OSiM41QQRf2a7Iq+R3FboQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2098 (0x832)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF026/serialNumber=8AC79EB2EB7F6B57ADDE1CBA403C6E58236D3445
        Validity
            Not Before: Jan 31 16:37:50 2025 GMT
            Not After : Feb  7 16:37:49 2025 GMT
        Subject: CN=679cfc5e-b1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:52:e3:c5:bb:ab:35:f0:46:19:f7:5d:34:
                    ba:4e:65:74:ba:ca:28:1e:c1:9f:ea:fb:e0:76:45:
                    48:0f:9a:e4:2f:df:8b:0f:6a:0c:fd:ab:c9:c2:79:
                    43:0d:a1:7a:c1:70:6c:95:89:c8:84:be:e9:27:f6:
                    bf:44:ee:37:ea:9c:b2:05:d6:49:c1:43:b4:3b:bf:
                    86:dc:85:1d:13:50:c7:a4:1b:48:e8:a6:9c:c2:43:
                    22:b3:50:1d:89:a5:0c:77:28:fb:64:fc:cd:af:4b:
                    f3:8d:c4:58:a8:4c:9b:83:4b:85:98:e4:0c:cd:a9:
                    70:da:ed:e5:a4:43:1f:96:a6:81:62:d8:94:35:6c:
                    e4:52:9f:77:96:70:91:15:78:c9:9a:a6:b8:5f:0d:
                    f1:18:d0:64:11:97:cb:18:9b:e4:b3:9f:d3:e5:d3:
                    00:77:3c:ee:a0:45:91:fd:22:fc:fd:4c:f4:74:a5:
                    f7:aa:79:85:8a:8c:f0:bc:cc:38:35:60:a3:30:e4:
                    f6:b0:01:37:6a:ef:fc:11:71:15:15:02:7b:46:a6:
                    04:88:c0:ce:1f:7e:e5:de:5a:ca:19:79:14:8a:ae:
                    41:11:a4:2b:dd:3f:87:1c:32:38:76:bf:44:ac:0d:
                    8a:b7:a9:0b:96:11:e9:77:82:d7:d6:51:45:7e:a9:
                    c5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:25:29:D2:81:B4:B6:A8:81:9F:DC:06:E7:3F:46:AE:58:88:35:AD
            X509v3 Authority Key Identifier:
                keyid:8A:C7:9E:B2:EB:7F:6B:57:AD:DE:1C:BA:40:3C:6E:58:23:6D:34:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:8f:21:8b:b0:bf:1a:bc:17:66:e6:bc:56:b6:fd:1b:d3:42:
         1e:f6:86:c0:08:e0:b8:e0:3e:b2:d8:28:ed:ad:3f:7d:aa:d8:
         62:9e:26:a1:3e:bf:1c:50:e3:7a:ab:e9:32:cb:fb:dd:05:1a:
         13:76:64:32:40:4a:0c:42:fb:0b:d5:a9:00:b7:f8:4d:a9:80:
         a7:9e:1c:59:13:d5:79:a7:98:27:d7:00:0e:4a:50:0e:1f:4d:
         f1:29:bd:52:d5:61:04:0b:ec:75:bd:7a:5a:a0:0f:48:57:ce:
         be:c9:ff:2d:a4:8c:fa:0a:34:19:59:f4:4d:4b:d6:52:54:a9:
         5c:82:77:b4:c3:31:3a:85:62:4b:35:7b:74:64:30:88:a3:fd:
         06:c7:46:ba:c0:0d:77:52:8a:34:7e:14:e8:af:62:7e:b7:b2:
         55:71:5e:7b:2f:02:b7:e7:d4:79:30:36:5a:b4:8d:d3:de:57:
         d6:a9:ea:1f:6c:e6:9b:0e:b3:79:89:b4:1d:06:f5:72:d5:6b:
         d2:28:4d:7d:4b:b8:fd:e7:3a:6c:69:87:b9:98:1e:8d:bb:52:
         c1:9e:80:93:90:c6:75:a4:d5:34:d6:9a:14:98:55:ef:f6:52:
         c8:78:ee:2d:f2:df:14:f7:27:bc:a6:65:32:13:af:c2:2b:54:
         f1:01:63:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----