Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBD27/DE5E774E7DCD11ECA6BD9D32C4F9AE02/8hTt1--NAG-Coif85lvF8-ZIo_o.mft
File:                     8hTt1--NAG-Coif85lvF8-ZIo_o.mft (raw, json)
Hash identifier:          FNljLkk/L2cCe9zGlzJXvZpJDi5oxnOQYa+aukNisB8=
Subject key identifier:   A4:D3:CF:22:55:3F:39:92:6E:FA:91:6D:93:A7:EB:B1:1E:C4:66:72
Authority key identifier: F2:14:ED:D7:EF:8D:00:6F:82:A2:27:FC:E6:5B:C5:F3:E6:48:A3:FA
Certificate issuer:       /CN=A91DBD27/serialNumber=F214EDD7EF8D006F82A227FCE65BC5F3E648A3FA
Certificate serial:       03AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hTt1--NAG-Coif85lvF8-ZIo_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBD27/DE5E774E7DCD11ECA6BD9D32C4F9AE02/8hTt1--NAG-Coif85lvF8-ZIo_o.mft
Manifest number:          03AB
Signing time:             Fri 31 Jan 2025 00:46:06 +0000
Manifest this update:     Fri 31 Jan 2025 00:46:05 +0000
Manifest next update:     Fri 07 Feb 2025 00:46:05 +0000
Files and hashes:         1: 8hTt1--NAG-Coif85lvF8-ZIo_o.crl (hash: eG5ERgWrY41UZcZgXraojtzIK0bscaRGnlwEqw5jwoQ=)
                          2: 1A15CABE7DD111ECBB4A7D84C4F9AE02.roa (hash: cvcGyNcc42SIpQ685Vf1az6PZMwbXQgpnrfaFAmN05o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 943 (0x3af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBD27/serialNumber=F214EDD7EF8D006F82A227FCE65BC5F3E648A3FA
        Validity
            Not Before: Jan 31 00:46:05 2025 GMT
            Not After : Feb  7 00:46:05 2025 GMT
        Subject: CN=679c1d4e-4d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cd:47:81:3c:a8:e5:a0:ef:8d:d1:97:4c:c0:
                    19:c1:5e:c6:c5:97:8d:0b:7e:c6:99:ad:b8:99:70:
                    a4:75:45:b2:5b:b4:de:15:fe:1a:49:49:32:02:f4:
                    77:77:8c:bf:40:1b:c3:ac:9b:de:70:f7:99:3f:4b:
                    d6:81:bc:7e:0c:08:b7:3a:2e:d7:59:79:25:0b:07:
                    48:42:56:7e:a3:07:bc:4d:86:44:e0:fe:2f:76:83:
                    1d:aa:d8:49:97:a3:ed:57:38:73:e4:46:db:03:6b:
                    35:e2:13:57:95:01:44:5b:ae:bf:7a:be:82:58:fb:
                    99:10:c5:84:d7:66:d9:d4:0f:bd:ed:8a:8a:f5:7a:
                    5f:04:22:d9:d6:2c:a4:c0:bc:f8:93:6a:ba:76:b4:
                    d9:21:c8:ef:e3:70:ed:4c:94:c1:b9:2d:9a:e7:3e:
                    9b:a7:d5:d0:41:31:4a:be:e3:8d:6f:ab:35:d0:4e:
                    93:15:7f:b9:71:92:3d:39:61:a4:89:80:03:f4:06:
                    8c:ec:b1:87:4a:99:15:0c:ee:d9:04:73:3d:6e:5d:
                    3f:65:0b:e8:37:70:62:e9:c5:6f:5d:b6:ef:bd:74:
                    1c:85:4c:a6:b1:5c:4d:18:34:b3:b7:60:86:e8:7c:
                    3a:3b:6e:81:9d:db:47:b4:0e:21:a7:4d:75:51:5f:
                    df:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D3:CF:22:55:3F:39:92:6E:FA:91:6D:93:A7:EB:B1:1E:C4:66:72
            X509v3 Authority Key Identifier:
                keyid:F2:14:ED:D7:EF:8D:00:6F:82:A2:27:FC:E6:5B:C5:F3:E6:48:A3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBD27/DE5E774E7DCD11ECA6BD9D32C4F9AE02/8hTt1--NAG-Coif85lvF8-ZIo_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hTt1--NAG-Coif85lvF8-ZIo_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBD27/DE5E774E7DCD11ECA6BD9D32C4F9AE02/8hTt1--NAG-Coif85lvF8-ZIo_o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:a9:7e:1a:7a:17:e3:37:e3:a9:70:2e:97:9d:a4:8e:32:e2:
         9d:ef:24:bc:a8:b8:83:9f:32:0d:f4:88:44:61:cb:b4:d1:fc:
         b7:f4:dd:57:81:bb:e5:76:ab:7e:03:ba:ec:aa:00:ef:e5:b9:
         a2:bc:0e:7f:9b:13:7a:e4:fb:d3:61:ee:b3:8b:f6:13:f8:57:
         7f:0e:02:33:1e:ac:8f:8d:54:b1:d9:47:a5:22:b5:13:11:c5:
         cb:1b:a1:26:40:be:33:f8:06:c6:07:1f:8f:59:0f:0c:dc:e3:
         dd:1a:5e:68:59:34:c8:a5:e7:7e:b8:c6:df:3c:b0:b9:45:25:
         e7:09:63:c3:97:ec:ff:24:c5:d9:5f:f7:d9:f1:f6:ca:ed:bb:
         f3:b5:d5:a9:a8:4c:7a:88:7d:81:f1:45:e0:b2:61:2e:e5:c5:
         4b:1b:7a:08:f6:a8:a4:26:82:ff:1f:b7:12:4f:5c:e6:e0:8e:
         82:83:dc:28:4e:f7:96:e8:c8:e3:b2:b8:75:1e:e2:ef:e1:07:
         64:5f:e1:c9:45:7b:6d:65:d3:c5:48:65:5f:25:db:c2:74:e4:
         2e:c8:56:82:d8:51:42:5e:a8:09:ba:da:96:f1:67:f2:d3:8f:
         d6:7e:b8:98:88:a6:f0:22:84:f1:c2:80:8f:9d:a5:ae:6f:4e:
         a9:a2:74:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----