Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft
File:                     nag9eBUvVmRHEvSlgLqVNV-IgUc.mft (raw, json)
Hash identifier:          B1rktUXkMrqIdyWkSwqpiYMR8WaUas/2W4EBtHFkuo8=
Subject key identifier:   AA:86:7B:34:64:0C:6D:F4:63:DD:61:E5:BF:BF:D1:10:C8:22:D4:38
Authority key identifier: 9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47
Certificate issuer:       /CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147
Certificate serial:       08C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft
Manifest number:          08BD
Signing time:             Thu 30 Jan 2025 20:32:00 +0000
Manifest this update:     Thu 30 Jan 2025 20:31:59 +0000
Manifest next update:     Thu 06 Feb 2025 20:31:59 +0000
Files and hashes:         1: nag9eBUvVmRHEvSlgLqVNV-IgUc.crl (hash: P5R60qECG/AC6Wc+nKWZpqfx+VdZgyDIc/buH5QOwjs=)
                          2: 9C3E2D18A98111EAB4B3FD50C4F9AE02.roa (hash: uVDqEWvFSoFCutjWZ+pfrsUVRlgkPu0drLynarAKc08=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2244 (0x8c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147
        Validity
            Not Before: Jan 30 20:31:59 2025 GMT
            Not After : Feb  6 20:31:59 2025 GMT
        Subject: CN=679be1bf-b6e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cc:c4:06:76:03:34:0b:da:0d:e6:12:89:46:
                    9e:94:1a:71:78:cd:54:7d:1c:4b:73:d6:ff:26:57:
                    32:09:dd:2d:39:2c:be:fc:9b:ab:e3:a0:a6:bb:53:
                    be:9a:0a:35:35:a7:59:d0:0d:5b:34:74:f7:c9:3f:
                    0b:0f:36:54:ea:5c:cb:71:8d:c6:03:71:ef:9a:e8:
                    eb:33:f4:dd:e8:ee:57:90:c4:4d:7c:4b:db:62:a6:
                    46:b4:83:61:1a:96:27:57:52:1a:ab:5b:e4:e0:54:
                    a9:ed:0f:1a:52:f4:5b:b0:57:59:76:29:df:9d:6f:
                    51:f6:e8:51:e1:0b:23:e9:84:33:d6:f1:a2:b7:b7:
                    47:ba:1f:3c:ad:17:bc:c4:8f:fe:75:cf:24:ca:d0:
                    fe:03:f2:0b:95:62:86:a2:1e:2e:3c:d3:d2:aa:41:
                    dc:87:73:3f:0e:2b:d0:4c:f6:e8:60:47:60:ec:1b:
                    ab:62:f2:d7:a8:db:d0:87:2b:49:bc:c6:f0:88:e3:
                    07:e6:1f:da:96:04:8e:69:93:4e:05:53:77:1e:67:
                    47:4b:41:b7:5b:cb:b0:9b:53:97:8e:05:30:5f:a7:
                    55:f9:73:f5:1c:0e:fb:b8:80:46:25:b4:70:af:86:
                    fe:ba:76:55:b8:a4:8f:b5:9f:09:15:e2:3e:30:e7:
                    2a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:86:7B:34:64:0C:6D:F4:63:DD:61:E5:BF:BF:D1:10:C8:22:D4:38
            X509v3 Authority Key Identifier:
                keyid:9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:18:1b:b3:73:42:52:72:c4:fa:a3:c5:a9:0b:bc:c6:16:a2:
         01:d0:e6:f6:81:50:8d:08:66:48:0b:a4:19:e8:3c:22:0e:6b:
         42:68:8c:33:b3:77:8e:1e:d8:e9:cc:7e:62:4b:74:29:e3:c0:
         a1:19:36:4c:80:08:70:54:1f:6a:e1:ce:6e:e3:85:e8:c0:da:
         43:17:75:54:46:d9:35:5c:0b:50:4b:28:90:50:e9:2f:04:04:
         38:af:13:28:6e:f8:1f:65:b6:1e:e2:5a:66:55:34:21:62:57:
         db:ce:26:2e:27:24:ba:61:b0:8f:9f:77:44:15:d1:44:a3:60:
         8b:3a:88:5d:e5:0f:14:e2:76:b1:21:4d:b7:b8:79:07:3b:45:
         e8:aa:f8:6b:37:19:6d:ce:90:23:4c:8f:c2:e1:71:7f:52:d1:
         ee:92:15:06:6b:10:34:a5:94:40:cb:17:3b:4e:be:65:b8:44:
         e9:9d:2a:ac:4f:ad:b0:1e:ac:b8:96:47:8a:e5:0b:27:6e:80:
         84:6f:07:2b:70:3c:78:67:6b:16:8a:d4:9e:4b:8e:63:04:aa:
         c9:c2:80:be:e9:38:48:bd:f1:a4:87:25:64:52:9d:d4:22:cb:
         46:44:9f:5b:22:00:b8:ee:4c:03:81:db:10:13:0f:c9:f0:32:
         1c:cd:0b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----