Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft
File:                     rbkheCH_vuCW4c7EcJijFFokbqA.mft (raw, json)
Hash identifier:          MA6f9gFYppzEcDk7qEJfVpiCywkqBfovNcfLhliAEa0=
Subject key identifier:   67:2F:80:73:AB:71:45:0F:D0:F1:C9:79:93:8F:A4:91:33:AE:35:AE
Authority key identifier: AD:B9:21:78:21:FF:BE:E0:96:E1:CE:C4:70:98:A3:14:5A:24:6E:A0
Certificate issuer:       /CN=A91F6E63/serialNumber=ADB9217821FFBEE096E1CEC47098A3145A246EA0
Certificate serial:       0532
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbkheCH_vuCW4c7EcJijFFokbqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft
Manifest number:          052C
Signing time:             Thu 30 Jan 2025 23:33:52 +0000
Manifest this update:     Thu 30 Jan 2025 23:33:51 +0000
Manifest next update:     Thu 06 Feb 2025 23:33:51 +0000
Files and hashes:         1: rbkheCH_vuCW4c7EcJijFFokbqA.crl (hash: 09mkvqlLmfqWK5KviSY+eMB0P34BAHqV6IgJRbGtMbU=)
                          2: 0C0402DEE5CD11EBADAD0E66C4F9AE02.roa (hash: C+71hKrmRR9fYlphYRnTOW1PJp3T8YQjGXM58/kjFCU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1330 (0x532)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6E63/serialNumber=ADB9217821FFBEE096E1CEC47098A3145A246EA0
        Validity
            Not Before: Jan 30 23:33:51 2025 GMT
            Not After : Feb  6 23:33:51 2025 GMT
        Subject: CN=679c0c60-753d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dd:e8:5c:08:d7:34:69:5e:4a:93:9f:b8:f0:
                    2e:5e:54:6f:ed:65:13:64:51:ef:fd:7d:b6:6a:7d:
                    e2:c0:d8:4f:ed:4d:34:02:91:4f:8d:6c:70:58:cd:
                    38:0c:ab:83:c1:53:e2:08:50:1c:61:56:0d:64:de:
                    58:ea:4c:ef:34:37:e5:38:85:fa:87:3e:a3:06:a9:
                    8a:4d:86:8c:ef:2c:3e:97:23:e1:15:b6:fd:de:ac:
                    8b:e7:8d:8e:ef:f4:82:9f:7f:d0:9d:c8:ba:7f:54:
                    f5:65:7e:24:5a:d9:14:ff:d5:13:20:da:a2:ef:dc:
                    94:42:0b:50:28:db:3b:c6:cb:a0:d6:18:5b:d6:9b:
                    38:45:ba:bd:a2:e6:b3:d0:d0:eb:c6:29:ef:ea:a9:
                    83:6a:72:d5:df:55:23:47:83:00:9c:fa:e0:83:f7:
                    d1:a2:37:ca:b6:1e:47:0c:5c:c3:1c:07:d6:2e:82:
                    51:27:52:08:49:2f:5a:84:e0:8a:b6:ed:1e:45:48:
                    84:6c:f9:59:0c:8e:cd:ce:fe:dd:43:97:35:84:fb:
                    e8:7c:a3:50:ed:58:47:d9:b6:a0:b7:fe:8e:6c:14:
                    8d:55:bc:a4:9a:df:09:e1:41:6c:71:3f:81:82:6e:
                    61:05:c9:47:9d:28:24:66:9b:87:c0:83:7d:18:f1:
                    0c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2F:80:73:AB:71:45:0F:D0:F1:C9:79:93:8F:A4:91:33:AE:35:AE
            X509v3 Authority Key Identifier:
                keyid:AD:B9:21:78:21:FF:BE:E0:96:E1:CE:C4:70:98:A3:14:5A:24:6E:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbkheCH_vuCW4c7EcJijFFokbqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ce:06:30:de:3d:75:dc:36:d5:e4:4e:96:9a:e8:76:21:79:
         73:ba:e1:35:ea:ba:79:ab:4c:ad:38:97:93:bf:4c:ab:5c:2b:
         f9:df:b4:88:cb:e4:70:d4:83:95:19:4f:fa:d1:5b:ef:66:fe:
         3c:69:ca:5a:f7:4d:45:f8:b2:c3:41:4b:42:30:00:af:02:b2:
         17:e4:eb:38:18:50:84:ee:98:99:f6:df:65:cb:70:44:7e:75:
         cb:04:2f:82:cd:ee:b8:5d:6c:e5:ba:9a:88:dc:70:e2:9c:71:
         30:1d:fb:3e:92:ba:d4:b9:3a:8b:2f:60:c3:10:b0:a5:ed:a4:
         0f:e2:9d:b8:e0:eb:90:9e:80:25:fe:f8:a7:9d:49:81:57:10:
         11:8a:52:2d:91:41:c1:1e:c3:31:63:34:10:40:8a:c9:99:c9:
         72:c8:b4:06:4d:86:f3:c9:89:74:af:f0:2b:a6:fb:39:b9:64:
         e8:e9:5b:cf:0e:4f:ed:15:85:f5:68:6e:03:b1:6b:06:38:8f:
         ac:ef:7a:cb:c9:51:74:f5:1d:8a:6a:9a:b3:64:8d:f0:34:7b:
         9a:b4:f7:67:09:14:6f:c0:ca:b3:dc:aa:69:08:fc:4a:65:0b:
         f0:32:95:45:6a:ef:80:35:06:58:a1:4b:fd:2a:ea:ce:06:44:
         8f:0f:37:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:49:22 2025 by rpki-client