Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
File:                     211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft (raw, json)
Hash identifier:          PJAK9lYP4TbIU6g4XLP1xHDOuYE/6QJrp+AM4KY9vec=
Subject key identifier:   F1:04:5D:DA:DE:BA:73:5E:AD:48:F9:8A:C6:37:A3:61:79:FF:D4:04
Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
Certificate issuer:       /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Certificate serial:       032D5F642B5C74B0B61864C2354FDCEFE57C64DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
Manifest number:          0696
Signing time:             Fri 31 Jan 2025 07:33:40 +0000
Manifest this update:     Fri 31 Jan 2025 07:28:40 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:40 +0000
Files and hashes:         1: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl (hash: TBEyPwcxE0KhB8PzL2AFxQODQDNg/VE5Q2E2R9qgiw8=)
                          2: 3139332e372e3230342e302f32342d3234203d3e203432343237.roa (hash: 3ovpGOt8Z/loW4U3gJMJXsm91mVTK7y0fkPalfGS0w8=)
                          3: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (hash: T7P+TKqF1EydfF+/Was8vNpPhZ1s6n4jZQLCiw8GLVU=)
                          4: 3139332e372e3230372e302f32342d3234203d3e203630343932.roa (hash: pI40+jjdEUJPL2otpp8VOvK6iMqeW7apPFhhhkUq2lM=)
                          5: 3139332e372e3230362e302f32342d3234203d3e203630343932.roa (hash: ldJu5L3FZrq+v5EO0j3Bgz2Qf3cW0RGCFf99rYq9lJs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:2d:5f:64:2b:5c:74:b0:b6:18:64:c2:35:4f:dc:ef:e5:7c:64:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
        Validity
            Not Before: Jan 31 07:28:40 2025 GMT
            Not After : Feb  1 10:01:40 2025 GMT
        Subject: CN=F1045DDADEBA735EAD48F98AC637A36179FFD404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ff:aa:75:b9:23:eb:5c:72:6e:34:20:34:54:
                    da:ba:94:34:05:cd:ed:20:a2:6f:ab:25:56:42:9d:
                    2d:91:68:1e:5a:41:df:be:b8:a1:0f:48:4b:42:22:
                    17:60:c8:8f:78:08:92:fd:4c:93:a4:0c:30:6e:4b:
                    a0:d8:8f:4a:a9:a9:6b:95:d7:47:a8:ef:53:12:49:
                    5f:19:07:bc:e9:3f:de:6a:f7:e9:7f:cb:ad:0f:3e:
                    e4:59:0b:4a:f5:0c:64:60:e0:ba:78:16:d3:51:61:
                    c0:06:4c:9d:c8:da:df:95:8e:69:6f:aa:dc:0d:4a:
                    d4:44:ec:4c:88:5c:c4:e1:63:9f:ba:7e:d5:e7:fd:
                    26:57:f1:91:07:1d:6c:41:75:d0:d2:52:98:79:18:
                    12:26:82:60:c2:2a:65:00:4f:0c:bb:61:a0:e0:fa:
                    77:55:ae:53:8d:a0:e6:a9:c2:76:71:60:91:fb:7d:
                    cb:48:5a:0f:f8:d1:22:90:22:a4:d3:cc:d7:61:17:
                    dd:32:85:d9:0e:e0:a3:d7:92:f8:e4:da:a7:6b:d1:
                    07:aa:f3:a9:eb:fd:3d:1e:2f:e6:08:1b:04:70:b4:
                    6c:25:66:65:60:b6:1c:9b:86:67:31:d1:cd:4d:09:
                    9b:62:a8:d4:5e:b9:d7:25:10:92:32:b3:99:8c:98:
                    68:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:04:5D:DA:DE:BA:73:5E:AD:48:F9:8A:C6:37:A3:61:79:FF:D4:04
            X509v3 Authority Key Identifier:
                keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:88:dc:44:cc:8e:34:8b:8e:3b:14:25:f6:22:9f:34:26:22:
         85:70:cb:4e:32:af:e9:b8:b0:ac:ba:52:74:dd:17:e7:f4:81:
         c6:6b:9a:64:d5:e7:0e:35:da:c5:c9:fb:86:85:77:f3:d4:6a:
         4a:9d:10:b3:9a:cc:92:88:5a:d3:a6:e6:3c:96:8b:7f:40:4c:
         94:9c:6d:d0:de:0d:75:de:d5:c0:2a:a4:3a:12:2f:09:ab:c2:
         a9:74:c2:d5:1b:a2:1c:ce:ee:9f:e6:56:37:bb:74:ce:9b:40:
         10:d0:cc:17:fc:aa:f6:33:df:0c:1e:ea:47:2d:a7:75:5b:30:
         5f:d7:0d:bd:63:6b:93:4b:50:aa:e5:bc:01:5a:ae:b8:be:47:
         37:69:8a:cf:07:1d:50:73:71:28:ae:75:82:23:cb:d5:d3:86:
         f2:03:13:2f:5f:9f:f6:c0:52:83:7f:86:a4:34:43:f4:88:d5:
         33:7d:3e:2c:65:d6:34:1e:3a:cb:2e:8b:0e:fb:f4:84:f5:41:
         fe:f6:8f:ee:54:41:c7:88:18:2c:85:6e:17:d5:16:ca:8a:fe:
         73:32:48:9d:06:73:47:76:6a:6f:b1:f3:d5:87:a9:e4:b7:9e:
         b5:0a:ce:1b:e2:1e:8e:b3:d4:4e:51:81:ac:ce:a1:ff:01:f4:
         55:d1:5e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----