Manifest

$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
File:                     lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft (raw, json)
Hash identifier:          B6n9nrHzHhxvWPK4rz6YABtzHVqORfS+eHW7YWhHWMw=
Subject key identifier:   97:8A:4A:CA:67:DA:13:70:53:DA:F9:04:44:DB:2F:37:5F:D5:EB:01
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer:       /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial:       447E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Subject info access:      rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
Manifest number:          4476
Signing time:             Fri 31 Jan 2025 14:50:29 +0000
Manifest this update:     Fri 31 Jan 2025 14:50:29 +0000
Manifest next update:     Fri 07 Feb 2025 14:50:29 +0000
Files and hashes:         1: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl (hash: xZxcUHtane4V8WOl0kcajYYogu6O0wKGivLro8Ly+q4=)
                          2: 4kPzvoJVabsWrLN0vJjavmkLF8E.cer (hash: AYWGFvwUByg/qqQVdaQIffRzOvV/lSsH6Y0ettSlDW4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17534 (0x447e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
        Validity
            Not Before: Jan 31 14:50:29 2025 GMT
            Not After : Feb  7 14:50:29 2025 GMT
        Subject: CN=679ce335-5571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:73:87:66:94:73:ff:04:6f:19:2b:22:95:e7:
                    c4:2d:2d:54:ea:80:43:a1:23:14:21:61:09:e8:f8:
                    18:4a:4b:b6:56:a9:fb:d7:17:e0:a3:70:69:90:3e:
                    0d:c2:1c:cd:fb:6d:35:4d:95:66:cc:e4:6d:ea:30:
                    08:38:ad:99:ca:39:58:d2:fa:da:99:e7:ce:10:42:
                    3f:42:08:ff:40:87:99:1e:1c:23:d9:41:47:60:ce:
                    1f:b5:35:79:21:11:0f:c8:9b:3d:97:5b:c9:93:a8:
                    79:47:d7:8f:bc:e8:54:2e:a6:c8:2e:d0:5b:02:c4:
                    ef:69:2a:f5:fa:ce:34:21:ed:3c:fd:31:f9:66:fd:
                    83:d9:fd:70:95:70:59:33:f2:60:59:e2:4e:24:b1:
                    e8:4d:8a:fa:d1:c2:09:59:f3:c0:bd:7a:08:61:97:
                    ef:2c:a9:85:6f:04:62:55:7c:ef:6c:d2:4f:fb:bc:
                    42:c9:e4:2b:7b:71:5b:04:e1:fb:17:a8:c5:84:64:
                    fc:28:40:5c:f1:ac:1e:ac:b4:33:ef:ef:5b:ba:42:
                    7f:0d:58:65:02:e1:32:3a:ea:e0:4b:da:52:12:e2:
                    29:7b:c1:7a:54:33:cb:81:8f:ba:ae:8b:51:f9:00:
                    30:12:c4:1a:b8:a9:88:8a:b3:78:4a:3f:8f:23:63:
                    a0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8A:4A:CA:67:DA:13:70:53:DA:F9:04:44:DB:2F:37:5F:D5:EB:01
            X509v3 Authority Key Identifier:
                keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:41:fd:fd:bb:49:cc:d2:8b:36:3b:50:2c:16:6a:c9:67:99:
         a2:d5:75:34:a4:bf:56:ef:44:d8:f1:d8:ab:9d:4c:87:10:cd:
         b6:86:04:1b:90:0e:4b:75:b0:d4:1c:e7:82:b2:61:f4:1e:e0:
         47:b4:7e:74:7d:4b:aa:40:f9:85:3d:8e:21:f7:16:d7:8d:8c:
         0d:66:c4:8e:99:74:e1:d7:fa:32:04:0b:bb:ff:5e:6f:53:a9:
         c7:b8:7a:07:be:b2:48:71:79:d1:5f:4d:bd:b1:05:69:0e:a0:
         77:65:f5:5f:44:5c:c1:ff:de:7c:da:5a:8c:91:71:be:92:e6:
         43:fc:ae:fb:17:13:9b:2c:3a:c2:be:25:bd:bc:f2:12:3e:97:
         9f:72:54:4a:58:e1:65:8f:34:c3:b8:6d:ac:ae:c4:97:80:fc:
         b0:c4:3c:b5:44:69:bf:6d:0c:b5:f4:d2:a3:82:fb:9d:64:b1:
         e9:b9:65:88:d5:9d:ef:cd:13:9c:c0:f8:9e:7d:ee:7f:b2:37:
         d5:cc:01:c7:d0:0c:a6:0e:2b:14:35:09:20:12:c9:51:9c:b5:
         2d:0b:fc:e3:39:3f:f1:ae:bd:33:0d:71:75:a0:d5:a9:51:b8:
         7a:11:1a:bd:66:9c:79:82:72:61:3a:7e:51:17:d0:1c:5f:66:
         6b:42:c4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----