Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
File:                     B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft (raw, json)
Hash identifier:          voUZJo7thyg52qhKoK1iSINrG08MsRw0Ox0Mlk/phyE=
Subject key identifier:   C9:21:9D:01:2D:84:F8:95:06:2B:17:22:CE:CF:0F:20:88:C3:82:9A
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Certificate issuer:       /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial:       6EDF52189E2A379EB5304211BC2DF7154B45D74D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
Manifest number:          0573
Signing time:             Sun 07 Jan 2024 02:03:12 +0000
Manifest this update:     Sun 07 Jan 2024 01:58:12 +0000
Manifest next update:     Mon 08 Jan 2024 04:55:12 +0000
Files and hashes:         1: 323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (hash: ZwC3/xpvwhFW9owX791hDufwh79YCQgvkbzA8LlrLz0=)
                          2: 3230332e342e3136382e302f32322d3234203d3e203337393930.roa (hash: PdfAb0GNYO/xosrK8XDyKYZ6TBY7F6FphmfvPyB9ZGg=)
                          3: 323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa (hash: jQJGI2AgAF9e4h+fcQ6+4CmZOaRMb3hwefQVsymqQEs=)
                          4: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl (hash: fnYa6IF8Gjb1CD7WJ9K0uYLR0mbfKkvNhyeK0Pp3DxQ=)
                          5: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (hash: XqWoV10SEU1HG5Sail5YUA7N1VSrlGxggqT/Bnmgvv8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:df:52:18:9e:2a:37:9e:b5:30:42:11:bc:2d:f7:15:4b:45:d7:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
        Validity
            Not Before: Jan  7 01:58:12 2024 GMT
            Not After : Jan  8 04:55:12 2024 GMT
        Subject: CN=C9219D012D84F895062B1722CECF0F2088C3829A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:30:8d:36:98:cd:70:ac:0a:b6:8e:35:8d:66:
                    26:86:81:a5:b1:79:72:16:ab:46:b9:5a:95:bd:f3:
                    67:d5:b2:2d:7b:74:7d:21:df:79:92:06:24:0b:0d:
                    53:02:79:5c:f0:f6:ec:fd:9d:1d:9e:48:6c:7e:7d:
                    ff:b3:e6:e1:22:55:a1:2f:94:5b:34:4c:1a:cf:6b:
                    02:38:0c:79:70:7b:4f:5b:cf:d2:c2:b3:e0:6d:f9:
                    18:ef:2f:fa:b3:ac:e9:43:27:86:61:6e:cd:55:8f:
                    66:e3:84:7b:0b:18:75:07:17:e7:1f:60:8d:da:9c:
                    e1:3f:ed:c3:7c:b7:65:d9:97:1f:af:4c:46:41:9e:
                    d1:b0:ea:9f:e8:e0:ab:27:79:ca:83:ac:8a:8f:10:
                    4f:04:6b:55:e6:b3:c3:20:86:90:ef:b5:15:45:57:
                    1e:39:9e:65:80:07:85:52:0f:4e:c8:4e:ed:5a:49:
                    2b:f0:e7:73:82:b0:17:10:12:aa:2c:4a:b9:59:7f:
                    91:4f:63:72:25:c6:88:2a:ec:60:37:41:93:5b:0e:
                    9a:a1:f4:98:58:4e:d6:41:61:56:3b:4a:a7:18:d1:
                    57:42:64:f6:3e:88:0b:a7:83:7b:af:90:ca:69:f5:
                    77:29:3b:fb:72:f2:00:88:b0:e0:f3:8a:3f:09:20:
                    c3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:21:9D:01:2D:84:F8:95:06:2B:17:22:CE:CF:0F:20:88:C3:82:9A
            X509v3 Authority Key Identifier:
                keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:fb:36:df:2b:13:40:c0:df:15:0e:b5:75:99:30:c3:72:21:
         20:f1:30:5e:a8:47:d0:25:a0:82:9d:c6:66:a6:95:c2:3d:bb:
         3d:60:10:09:fd:5a:3d:18:b2:fb:e6:eb:49:fb:07:c4:af:c5:
         ad:2a:e3:2d:e1:b9:1e:d0:96:ca:8a:74:7f:bd:53:4b:2c:29:
         9b:ec:ad:40:67:46:72:26:25:ce:f0:f8:83:7c:1a:da:db:d6:
         11:f5:3e:65:12:44:01:cb:17:9d:80:2e:28:e8:50:f4:2d:97:
         17:69:e8:bc:9f:bb:52:04:9e:e3:d4:17:e8:1d:20:be:12:58:
         1a:e3:26:7c:fd:45:ca:55:c3:26:78:b8:9e:e6:b4:ed:46:75:
         ff:fb:39:7f:95:7a:e6:19:d7:23:8c:7f:da:49:7a:cd:d0:2d:
         01:e0:44:12:40:09:6c:12:1c:8b:e6:cb:c2:b5:cf:a7:0f:33:
         ef:08:92:19:47:c5:4d:e5:6a:2c:a5:ac:67:ae:30:1e:fd:e8:
         ad:77:b2:92:65:9f:cd:ac:a3:3d:b9:c4:ff:0b:86:34:e3:e6:
         98:12:52:bb:86:33:a9:35:56:34:d2:f5:12:5e:35:a6:79:a3:
         b7:ea:e2:fa:54:b2:01:48:c5:d4:24:f1:61:d3:b6:14:68:76:
         2c:bb:0f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----