Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
File:                     PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft (raw, json)
Hash identifier:          bQgiGBgBR3cmcMdXJ/y5wz7M7m7lL4cuTvSizh6oeKw=
Subject key identifier:   2C:73:9F:8E:92:CE:9E:54:41:19:33:A3:4A:C3:C2:23:9F:B1:03:7A
Authority key identifier: 3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F
Certificate issuer:       /CN=A91D28C2/serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
Certificate serial:       0672
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
Manifest number:          066C
Signing time:             Thu 30 Jan 2025 22:23:56 +0000
Manifest this update:     Thu 30 Jan 2025 22:23:55 +0000
Manifest next update:     Thu 06 Feb 2025 22:23:55 +0000
Files and hashes:         1: PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl (hash: eA0xO0FItQVHNDNMh2Qb7dloLvroyqJGrcIo34taywU=)
                          2: 69911E0893AB11EEADF5F71BC4F9AE02.roa (hash: QCHui8d37ydNx5pkaHoJoeho1nXwmP/z+o5jMR8k9Tw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1650 (0x672)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D28C2/serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
        Validity
            Not Before: Jan 30 22:23:55 2025 GMT
            Not After : Feb  6 22:23:55 2025 GMT
        Subject: CN=679bfbfc-e8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d1:86:f2:66:42:2b:cf:7e:38:8a:45:d7:7d:
                    e9:99:e5:c7:ed:f4:84:67:9e:12:3c:1a:cb:47:16:
                    ba:b7:1a:26:9c:46:ef:dc:89:a4:19:6d:c3:b0:b7:
                    65:61:45:be:f2:5d:22:da:60:ce:4f:62:a8:4e:1e:
                    8c:ea:10:5c:41:52:a6:da:0e:04:36:34:7d:1f:94:
                    15:a4:a9:bc:67:28:49:0e:fd:40:bc:1b:de:8d:6e:
                    96:36:10:d6:3c:24:c4:44:41:86:07:c1:15:2d:8c:
                    73:87:86:f2:d9:a6:68:93:e2:9c:a2:9e:9e:84:ba:
                    b9:12:91:0f:87:bd:9a:4e:5e:dd:08:2a:22:29:88:
                    24:fa:c6:aa:90:6c:51:0a:76:12:d4:73:23:38:60:
                    ac:e1:05:38:26:17:27:ff:0c:c1:e8:7f:13:71:dd:
                    e6:4d:8b:65:32:c3:58:51:3d:e6:66:ac:ab:06:19:
                    71:87:30:b0:ae:b4:d1:24:49:21:25:c2:ba:56:dd:
                    8e:94:ab:63:a6:6e:bc:89:d1:6b:1d:8b:9e:b5:ac:
                    82:fd:94:8e:50:2f:9a:f5:2f:26:81:4d:38:58:c1:
                    bc:6f:12:89:f3:24:4c:28:28:c5:0c:9e:b0:a7:ef:
                    14:cf:82:e3:96:fe:ef:82:f6:05:0f:49:e9:8e:f0:
                    5c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:73:9F:8E:92:CE:9E:54:41:19:33:A3:4A:C3:C2:23:9F:B1:03:7A
            X509v3 Authority Key Identifier:
                keyid:3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:cf:c4:84:d5:fd:b4:6f:14:8c:b3:cf:7b:b7:ad:ac:d0:b9:
         f0:90:d8:d5:83:b7:e3:b4:a6:88:50:3d:a5:29:7f:30:6a:b3:
         0f:61:bc:cc:1c:39:bf:a2:30:6d:1c:99:17:0e:ba:87:77:6c:
         9a:2d:d3:ef:8e:d6:5b:4e:09:ee:18:b1:c2:ca:9d:54:fd:83:
         05:4d:3f:94:d8:1f:61:4c:3b:e9:7f:b5:aa:62:06:74:80:6c:
         e1:8a:ab:88:3a:9b:81:6f:64:a6:d7:4b:5d:47:49:89:96:25:
         6c:34:04:68:80:8b:e3:f3:13:4e:53:6c:2a:e4:bd:b9:5b:02:
         83:54:e5:db:a3:68:ad:f3:2a:b5:c8:bb:09:91:ce:e2:89:7a:
         9e:61:91:c7:fb:61:dc:0f:9a:22:97:67:bd:45:3f:09:82:2f:
         1f:96:2b:18:62:30:a2:c3:6c:3f:b5:91:d8:c2:da:ad:a1:b6:
         ba:3c:2e:04:f6:d0:f0:00:eb:69:24:d1:ac:c3:ac:53:34:f5:
         e0:db:65:67:33:14:af:82:99:fe:e4:6a:f7:31:13:14:d6:44:
         81:f9:aa:10:de:6f:e7:a9:63:9f:d5:c3:ca:ed:03:1d:01:a0:
         75:69:1a:bc:c1:35:28:ac:fa:12:92:b3:12:c4:6b:b1:0d:df:
         84:d2:cb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----