Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFB8/85A5D90E453D11EBB55A6225C4F9AE02/D4D0DTKGhSybn240W-HVvS-VSDI.mft
File:                     D4D0DTKGhSybn240W-HVvS-VSDI.mft (raw, json)
Hash identifier:          bd873ObLgwtmRk4NXD1mDzwvGsZm5VUfrFIk8xACDZI=
Subject key identifier:   DE:0F:E5:F9:C0:35:00:07:A3:84:EF:12:7D:DB:0B:11:08:11:15:A2
Authority key identifier: 0F:80:F4:0D:32:86:85:2C:9B:9F:6E:34:5B:E1:D5:BD:2F:95:48:32
Certificate issuer:       /CN=A911DFB8/serialNumber=0F80F40D3286852C9B9F6E345BE1D5BD2F954832
Certificate serial:       0664
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D4D0DTKGhSybn240W-HVvS-VSDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DFB8/85A5D90E453D11EBB55A6225C4F9AE02/D4D0DTKGhSybn240W-HVvS-VSDI.mft
Manifest number:          065F
Signing time:             Thu 18 Jul 2024 23:01:10 +0000
Manifest this update:     Thu 18 Jul 2024 23:01:09 +0000
Manifest next update:     Thu 25 Jul 2024 23:01:09 +0000
Files and hashes:         1: D4D0DTKGhSybn240W-HVvS-VSDI.crl (hash: wuHKhvqEzI52NT7qAFERJ7kUMUq1cIn25WPkEsiXVB4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1636 (0x664)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DFB8/serialNumber=0F80F40D3286852C9B9F6E345BE1D5BD2F954832
        Validity
            Not Before: Jul 18 23:01:09 2024 GMT
            Not After : Jul 25 23:01:09 2024 GMT
        Subject: CN=66999eb5-1cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:58:ea:5a:96:88:5f:ec:42:b6:4e:08:eb:5f:
                    d2:c6:83:a8:04:3e:41:f8:e6:79:d1:e4:54:c5:f4:
                    88:8e:f5:fc:8f:46:ba:7e:fc:53:ae:f4:da:f3:61:
                    1a:31:d3:59:02:a2:d6:5e:c0:dc:58:6b:ac:0c:18:
                    12:3d:ac:37:10:55:a0:0c:3c:a9:90:0e:42:ad:da:
                    49:e9:5e:68:65:7e:16:cc:56:8e:69:ba:e4:a1:8c:
                    9b:7a:f4:3a:99:a6:39:9f:b2:b2:3c:d4:e5:9a:44:
                    27:8c:83:16:3d:5d:2c:59:8a:b6:55:05:d2:aa:2b:
                    bd:e8:4f:7e:c3:0d:fd:6f:01:70:91:55:a3:9a:23:
                    fa:00:cc:ed:e5:a2:5f:3e:c3:46:83:5d:e0:a0:57:
                    16:96:2c:e1:37:f1:c1:12:b6:89:27:54:47:52:1a:
                    c7:70:6e:42:fa:3a:19:4f:8f:25:3f:da:9e:fb:e5:
                    7d:54:b2:dd:d1:a8:08:e0:3e:b9:9a:20:33:fa:fa:
                    f1:52:97:59:e5:78:4a:5c:09:6e:f0:44:ff:be:83:
                    3b:c2:66:99:36:2c:6f:44:91:19:57:c0:75:da:88:
                    ff:08:0f:dd:4d:33:ea:04:95:b4:bf:7c:2f:62:20:
                    4e:dc:f5:3c:1b:37:17:ee:2a:ef:c3:d5:c8:6d:a3:
                    10:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0F:E5:F9:C0:35:00:07:A3:84:EF:12:7D:DB:0B:11:08:11:15:A2
            X509v3 Authority Key Identifier:
                keyid:0F:80:F4:0D:32:86:85:2C:9B:9F:6E:34:5B:E1:D5:BD:2F:95:48:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DFB8/85A5D90E453D11EBB55A6225C4F9AE02/D4D0DTKGhSybn240W-HVvS-VSDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D4D0DTKGhSybn240W-HVvS-VSDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFB8/85A5D90E453D11EBB55A6225C4F9AE02/D4D0DTKGhSybn240W-HVvS-VSDI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:51:00:db:59:6e:60:1f:4e:c0:b5:6b:31:44:1a:0f:dd:34:
         9f:1c:1d:9c:e7:e7:fd:ce:94:4f:cd:e7:af:4d:1c:cf:15:ea:
         ed:33:bb:a1:4e:c4:91:3c:e4:e3:48:e4:f2:25:72:b1:99:9b:
         93:e9:58:7f:90:e6:34:a4:35:5a:b0:da:08:60:fd:d5:d2:9e:
         8e:82:39:16:06:cd:9d:4c:a9:4a:74:b8:92:f5:2b:aa:6f:8b:
         77:c9:2a:2d:27:c7:cf:74:94:f0:f0:bf:00:bc:a1:af:ab:12:
         73:4a:11:49:19:1f:81:ea:93:e4:a7:76:df:06:d3:76:83:0b:
         e7:5b:4e:17:03:06:7f:fc:67:ed:30:41:fd:1e:d9:69:63:d2:
         a5:02:07:85:64:e1:a3:5e:31:5e:dc:20:9e:8c:41:40:e9:f6:
         9f:f4:bc:72:2b:f7:10:db:c7:0d:9e:1a:b1:88:40:6c:d4:4c:
         c2:f0:06:fe:4b:35:3d:62:96:8e:ec:4e:f8:86:85:84:a5:75:
         2d:f4:f9:4e:95:ac:fb:e4:2e:3a:7b:1c:6b:66:89:44:c9:4b:
         ff:40:3a:69:ac:24:4d:fa:e1:0b:b4:6d:a8:28:7c:01:33:9d:
         ff:b7:3f:6b:13:a9:dd:2a:bb:4d:e7:67:88:55:67:87:29:25:
         e9:fc:12:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----