Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A918C2870000/0/1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.mft
File:                     1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.mft (raw, json)
Hash identifier:          wy5b1jWZ6QzyNHGirhLFwrVzrGYDXMAbmyzWRIO1DGc=
Subject key identifier:   0B:EC:79:C6:5C:BD:F7:2E:A7:74:5D:05:52:6B:2B:B1:15:47:D8:A1
Authority key identifier: 1F:FF:7A:9D:D6:68:F0:B8:F7:A6:C1:98:7C:42:34:BD:9D:40:46:F3
Certificate issuer:       /CN=A918C2870000/serialNumber=1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3
Certificate serial:       0772C7A91F8B24B0B934FDD3FA317755EE853746
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_96ndZo8Lj3psGYfEI0vZ1ARvM.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A918C2870000/0/1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.mft
Manifest number:          04
Signing time:             Tue 13 Jun 2023 21:22:57 +0000
Manifest this update:     Tue 13 Jun 2023 21:17:57 +0000
Manifest next update:     Thu 15 Jun 2023 00:20:57 +0000
Files and hashes:         1: 1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.crl (hash: H0FWu6wqVM5IlkxqBRhTaTiwNLeeEtXRKnIa1oF+9Xo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:72:c7:a9:1f:8b:24:b0:b9:34:fd:d3:fa:31:77:55:ee:85:37:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C2870000/serialNumber=1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3
        Validity
            Not Before: Jun 13 21:17:57 2023 GMT
            Not After : Jun 15 00:20:57 2023 GMT
        Subject: CN=0BEC79C65CBDF72EA7745D05526B2BB11547D8A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c4:01:5b:7c:dd:03:1c:1f:23:8d:1b:66:21:
                    bd:14:6c:65:f4:4c:80:43:05:1e:3c:a3:ed:64:a9:
                    79:53:1c:00:5e:d0:54:c9:29:48:60:f9:7d:c1:9d:
                    d9:54:7c:0b:04:6b:3e:d5:78:b0:d9:ab:66:dc:6a:
                    d2:76:ac:62:75:22:ef:b2:8d:32:5e:a3:f3:f5:fb:
                    63:c2:2d:7a:ec:be:4d:b7:66:5f:db:9a:64:28:1b:
                    5c:83:a1:7d:61:b2:ad:fe:b8:da:8f:c7:5c:80:01:
                    f0:f5:5c:aa:47:37:ea:05:76:58:79:85:07:7b:28:
                    5a:fe:89:6f:1a:44:cd:4a:a0:5b:86:01:ae:d4:ea:
                    0c:0a:e4:ad:78:24:ce:5a:16:cb:b2:28:e4:65:c7:
                    c6:97:62:80:c6:69:f5:a8:dc:18:29:af:2f:08:7f:
                    61:da:00:aa:bf:67:af:1b:2b:ed:bc:95:7b:31:ee:
                    ef:ab:a6:bd:b8:17:5e:e7:72:c5:33:ab:7e:9c:b4:
                    f0:73:af:d5:94:d1:ad:a5:72:13:4a:9d:42:b4:aa:
                    61:bb:eb:e6:59:06:7b:fd:75:a2:9e:1f:98:c1:4d:
                    f2:94:a7:40:c6:98:b7:7b:6d:11:f1:37:25:06:a4:
                    9b:4d:33:f3:8c:aa:35:cd:11:d9:06:3e:b2:cd:85:
                    82:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EC:79:C6:5C:BD:F7:2E:A7:74:5D:05:52:6B:2B:B1:15:47:D8:A1
            X509v3 Authority Key Identifier:
                keyid:1F:FF:7A:9D:D6:68:F0:B8:F7:A6:C1:98:7C:42:34:BD:9D:40:46:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_96ndZo8Lj3psGYfEI0vZ1ARvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:6c:52:14:f1:59:85:88:ce:35:7b:d3:0b:ff:81:fe:fa:fb:
         96:c6:f2:87:58:bb:4f:d7:a0:ec:52:62:57:97:32:fd:7c:1d:
         df:b2:61:c5:5e:87:08:26:55:41:70:ea:1d:0e:38:9f:3d:82:
         2c:d0:b2:9f:2d:b2:3c:43:9f:3f:48:c6:ad:bb:52:1e:32:c9:
         51:1f:f5:ab:69:04:1f:7c:86:3e:1b:8a:23:4e:4f:56:2e:5a:
         cb:67:3c:da:39:39:18:c2:37:c6:d5:65:35:f4:72:7d:71:3c:
         da:b4:cc:89:41:30:e0:71:a4:8d:55:9d:be:57:ff:3b:78:b5:
         73:f5:5c:38:6a:62:00:cf:69:2e:76:79:2c:88:7c:05:e7:d6:
         08:20:17:2c:e4:dd:1c:4a:c6:f0:3d:e8:f7:5b:6c:e1:86:1e:
         83:66:ab:bc:60:ea:21:89:4f:d4:95:c0:8e:ae:45:29:1c:81:
         ff:6f:61:32:fd:02:39:3f:06:39:f2:3f:bd:36:5b:90:b8:1b:
         fd:bc:29:2d:1e:89:1e:f0:b3:f0:39:8e:c7:b0:c0:15:86:23:
         ac:d6:11:a3:55:a1:be:24:4d:e0:98:8a:b0:44:7d:f4:9a:38:
         27:86:98:d7:62:0d:26:0d:d8:72:6d:fe:ca:10:22:31:9f:35:
         e0:8f:b8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----