Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft
File:                     ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft (raw, json)
Hash identifier:          v0LKCyrh8QNSuL3EGYwkT2sH9bY1Z5o1IPlPYvl/hEU=
Subject key identifier:   AA:BC:06:B3:00:65:17:4C:B5:5B:AD:09:39:F4:25:05:E2:32:33:2B
Authority key identifier: A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30
Certificate issuer:       /CN=A91EDF00/serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530
Certificate serial:       0428
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft
Manifest number:          0424
Signing time:             Fri 31 Jan 2025 00:24:43 +0000
Manifest this update:     Fri 31 Jan 2025 00:24:43 +0000
Manifest next update:     Fri 07 Feb 2025 00:24:43 +0000
Files and hashes:         1: ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl (hash: AJf3ceOY0usNFOicKjO6cAmMMvrToeXFuPBpwO1ff9s=)
                          2: 1B97FEB84E8111ECA3589560C4F9AE02.roa (hash: xAvVS/7W7xtAjphmjIYm8eiwHHWi2VdeCNpBEO7D7og=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1064 (0x428)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDF00/serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530
        Validity
            Not Before: Jan 31 00:24:43 2025 GMT
            Not After : Feb  7 00:24:43 2025 GMT
        Subject: CN=679c184b-0c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:33:58:74:d1:06:cf:f2:89:00:4c:bb:c3:c8:
                    2f:ab:c0:5b:f1:64:bf:5f:34:f8:65:55:99:9f:07:
                    7e:44:80:1d:b6:13:a3:0d:18:9e:b3:7c:c7:53:75:
                    1c:8e:fc:55:03:6b:f4:d8:18:fe:39:bd:d9:10:9a:
                    0b:93:c6:01:f8:bd:8a:6f:c7:7e:9e:f5:44:8f:ba:
                    05:77:66:00:c2:f4:b8:45:c7:3b:ce:37:0f:74:69:
                    91:41:f1:a2:3f:d8:24:9e:35:67:0a:3f:f5:eb:af:
                    a7:01:9f:c4:b9:d2:57:9d:a9:15:f8:e4:d1:bd:da:
                    83:41:ba:c4:d5:85:97:03:1e:aa:e0:2d:d3:f9:be:
                    91:18:61:55:e6:a3:3c:37:e6:c2:49:a1:eb:9c:98:
                    c1:0c:8e:c5:94:32:b6:73:da:e4:82:44:c8:04:b8:
                    74:54:d0:cf:a3:b5:c8:e4:50:41:0b:c0:ae:b9:96:
                    b2:c1:00:1d:e0:01:95:30:ec:d4:a1:a3:ab:58:5a:
                    9c:62:2a:c6:31:74:b0:d7:97:44:d0:98:91:25:0f:
                    67:9a:08:26:66:52:a4:81:89:1c:0c:e4:09:9b:82:
                    31:ce:db:93:1a:52:c2:35:09:4d:30:da:b8:44:4f:
                    25:08:1a:19:c7:fa:84:6e:b4:06:4c:5e:db:99:8c:
                    48:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BC:06:B3:00:65:17:4C:B5:5B:AD:09:39:F4:25:05:E2:32:33:2B
            X509v3 Authority Key Identifier:
                keyid:A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:7c:63:bb:99:17:2c:74:c4:52:4f:8c:9e:6d:1e:b1:9e:cb:
         78:ec:a5:e3:4e:6f:fa:2b:37:ef:27:0e:f1:89:df:ce:f1:e1:
         ee:ee:06:d7:d1:02:cb:d7:11:ff:30:7a:77:98:ac:6f:5c:e3:
         4c:04:3e:43:a1:d8:a8:dd:b0:55:f9:23:96:b3:04:a4:53:ca:
         8b:2d:c3:55:f4:03:48:bc:48:ae:3c:0a:39:f1:f8:5d:04:52:
         2f:f1:26:99:4d:e2:f5:f4:a5:bc:f2:d5:33:3f:7e:9a:9a:c4:
         c8:ef:ce:eb:0f:8c:1b:a8:f3:e4:20:bf:81:0e:94:d3:7f:34:
         06:83:62:b6:8f:03:8e:58:59:b4:27:f6:a7:99:2f:ec:14:09:
         84:06:de:c7:c7:d6:cf:d9:e9:3f:65:c4:64:b8:63:5b:f7:38:
         fb:2d:0d:c7:9a:d6:bb:07:b8:02:9b:38:e8:67:2c:ff:e9:0f:
         c1:61:05:e9:0f:4e:1e:25:17:af:b7:cf:72:2f:e9:71:1e:e4:
         47:4d:5c:af:7d:3c:3c:ff:c0:b5:6f:cf:a8:12:a7:c0:70:a4:
         8d:3a:ba:6a:7c:4f:9d:1a:93:1e:6d:6f:83:06:93:bd:3d:bb:
         7a:83:7b:f3:b5:fa:35:b2:b8:68:91:e5:15:83:e0:5d:d1:b1:
         2a:f3:2e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----