Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
File:                     REDuIbNImmUKYWsSDY5b5Xku4Es.mft (raw, json)
Hash identifier:          TD7gckwgXW8z9mMww9ac2QFbWg9X14ug/0P7tMESxOo=
Subject key identifier:   44:B0:58:EB:E8:6A:28:45:B1:95:02:24:C5:6F:FA:10:43:DD:47:BC
Authority key identifier: 44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B
Certificate issuer:       /CN=A91CE3A3/serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B
Certificate serial:       0C0E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
Manifest number:          0C07
Signing time:             Fri 31 Jan 2025 18:26:23 +0000
Manifest this update:     Fri 31 Jan 2025 18:26:22 +0000
Manifest next update:     Fri 07 Feb 2025 18:26:22 +0000
Files and hashes:         1: REDuIbNImmUKYWsSDY5b5Xku4Es.crl (hash: RIaj2YqKaEDkyRBTadTIoJhx5q2E8jD7SK0u/KUpbOc=)
                          2: 7155C8563E5E11EAB043A522C4F9AE02.roa (hash: kzRNRyDp5yy+6xuR6mT9mG0c89/n8LtjaHr1+0MkgX4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3086 (0xc0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3A3/serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B
        Validity
            Not Before: Jan 31 18:26:22 2025 GMT
            Not After : Feb  7 18:26:22 2025 GMT
        Subject: CN=679d15cf-4239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:48:37:07:b2:dd:8d:91:80:2c:d3:4e:56:bc:
                    f1:b5:ca:57:0e:00:f0:de:16:01:e3:48:62:f1:b8:
                    4f:5e:ef:c5:2f:53:da:37:52:30:49:b3:48:d2:bc:
                    87:ce:d1:44:fc:a6:0d:5e:87:52:93:27:a4:0b:f2:
                    61:e3:47:af:5f:e8:07:3a:6d:5b:15:60:b3:f5:b1:
                    72:f2:3f:72:63:9e:34:3b:4f:ed:d0:80:a4:18:42:
                    98:12:1a:af:b2:ab:e9:8a:0e:6b:12:c5:1b:a2:7b:
                    de:36:6f:ae:94:04:e0:92:b9:7a:ac:fa:c8:52:99:
                    2a:c0:58:ee:20:57:23:db:b4:f4:92:67:07:43:b0:
                    b4:6b:a3:d3:7d:ce:31:12:d2:ee:08:2a:cd:a4:d8:
                    31:2d:e2:e7:52:06:c5:c0:51:96:3c:2b:1a:89:c4:
                    23:ef:13:98:a7:2e:c7:8d:9c:f6:35:38:81:34:df:
                    70:0c:d3:bf:e5:45:20:4c:12:98:f4:c9:a9:ac:8f:
                    4e:f9:06:20:69:b6:74:d4:f6:56:e0:83:52:ec:83:
                    ae:5f:de:54:57:c7:65:f7:ed:ef:08:5c:fd:92:0b:
                    0e:28:5d:48:34:49:92:bf:15:1e:12:dd:3d:af:45:
                    6b:dc:ef:38:ca:aa:87:58:8a:f9:b8:cd:64:26:09:
                    1e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B0:58:EB:E8:6A:28:45:B1:95:02:24:C5:6F:FA:10:43:DD:47:BC
            X509v3 Authority Key Identifier:
                keyid:44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a7:ae:b2:b7:40:0a:20:9e:45:48:7a:48:1d:ef:f6:42:b6:
         47:a6:c1:d8:33:e9:4b:fb:08:86:77:e7:6c:6b:64:64:72:7d:
         34:2c:16:46:51:2a:0f:54:02:fe:6f:d6:7b:20:dd:c6:22:4f:
         9b:83:bc:69:65:7c:40:1f:97:c5:82:fa:09:93:c1:eb:1a:48:
         c2:a8:62:2e:bc:30:90:66:9a:81:9c:97:16:2a:63:dd:f8:f1:
         a8:4d:f7:14:5f:32:e7:9d:dd:84:27:4b:e4:51:1d:0a:7a:cb:
         3b:34:d1:12:d8:b9:36:7e:38:9b:37:fb:e2:e3:c0:ba:c5:e3:
         2a:1b:61:48:cf:c3:80:3a:c0:7f:07:3e:fb:22:e8:8c:80:58:
         12:10:a9:d6:61:d1:ef:0b:34:3b:e4:28:8a:5f:37:30:54:4c:
         3e:4f:b8:1d:e7:c9:9a:61:08:e0:29:bd:68:bb:70:13:63:2c:
         56:73:b4:0d:58:52:7c:45:50:08:1f:87:bf:7d:53:0f:22:97:
         ff:3f:6f:96:ad:c7:1c:7b:90:72:94:ad:ff:2a:8d:22:3f:b6:
         61:1e:be:12:5d:56:f5:99:35:4e:ab:60:2c:a8:d9:bb:fe:26:
         8f:19:f3:c8:01:be:30:46:95:66:69:84:86:74:8e:e9:eb:3e:
         92:3c:bc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----