Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
File:                     211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft (raw, json)
Hash identifier:          fv0vqPUi4cJMCFYEwQqX6rcytw9YQUJOWqqeAZPAwek=
Subject key identifier:   94:AA:B8:9A:89:6D:73:48:77:07:DC:A1:6B:C9:C4:6F:AD:12:53:04
Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
Certificate issuer:       /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Certificate serial:       4D746513CE0283C6B5AA3B9904BE8A85722BD1AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
Manifest number:          06F6
Signing time:             Sun 13 Apr 2025 12:44:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:39:51 +0000
Manifest next update:     Mon 14 Apr 2025 15:33:51 +0000
Files and hashes:         1: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl (hash: R1Wn08WyXujiPbz46SOL7f1VQf1cSKnL6on0n/HzcIE=)
                          2: 3139332e372e3230372e302f32342d3234203d3e203630343932.roa (hash: pI40+jjdEUJPL2otpp8VOvK6iMqeW7apPFhhhkUq2lM=)
                          3: 3139332e372e3230342e302f32342d3234203d3e203432343237.roa (hash: 3ovpGOt8Z/loW4U3gJMJXsm91mVTK7y0fkPalfGS0w8=)
                          4: 3139332e372e3230362e302f32342d3234203d3e203630343932.roa (hash: ldJu5L3FZrq+v5EO0j3Bgz2Qf3cW0RGCFf99rYq9lJs=)
                          5: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (hash: T7P+TKqF1EydfF+/Was8vNpPhZ1s6n4jZQLCiw8GLVU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:74:65:13:ce:02:83:c6:b5:aa:3b:99:04:be:8a:85:72:2b:d1:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
        Validity
            Not Before: Apr 13 12:39:51 2025 GMT
            Not After : Apr 14 15:33:51 2025 GMT
        Subject: CN=94AAB89A896D73487707DCA16BC9C46FAD125304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:97:ba:8e:35:75:5b:7d:cd:4c:66:c1:c2:51:
                    ba:38:8b:f2:53:d2:5d:86:55:3f:31:17:ed:94:e0:
                    be:70:09:28:9f:c1:42:f9:cb:4d:85:15:f8:55:96:
                    1b:df:38:a9:37:5c:81:76:19:c7:d8:78:9f:a8:c2:
                    69:8c:f3:29:b2:1a:69:10:c4:b1:68:3d:53:5c:ab:
                    87:eb:29:1e:a3:d0:01:00:93:de:f8:b2:1d:33:91:
                    ca:85:71:9e:41:e0:60:93:e6:19:53:42:ed:d8:21:
                    29:90:35:92:04:60:48:18:36:24:e8:78:36:da:f1:
                    cb:a3:8a:87:2c:8c:0d:2b:91:0c:7f:84:be:8b:85:
                    78:e8:27:86:f7:90:e9:b6:cf:7a:f1:8d:12:33:31:
                    9d:c1:d5:f8:19:78:0d:6f:4c:d5:09:3e:39:85:62:
                    a7:6d:0b:66:02:36:05:30:69:0a:f9:67:71:f7:4d:
                    03:09:e9:40:ba:ce:97:63:1a:97:92:0e:64:81:29:
                    9a:5d:bc:f2:ce:d9:15:4f:ba:90:1a:32:fc:9e:eb:
                    ff:e0:bc:d1:a4:35:0d:dd:af:b2:25:e9:ea:cc:70:
                    1b:6c:cd:f7:f7:23:d2:ca:b5:09:24:c8:94:da:13:
                    c2:66:b0:98:1b:12:24:ec:43:43:03:20:56:af:08:
                    88:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AA:B8:9A:89:6D:73:48:77:07:DC:A1:6B:C9:C4:6F:AD:12:53:04
            X509v3 Authority Key Identifier:
                keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a9:e5:0c:af:d8:77:43:2f:b1:fc:7d:eb:8e:3b:1c:8d:53:
         1f:14:36:d2:a8:0b:9f:23:51:24:fd:bb:1f:db:68:65:d0:b8:
         3a:ec:3c:21:2c:63:7b:71:b2:df:90:e3:3e:d3:b7:6e:dd:cc:
         81:7b:9b:04:99:a8:d7:44:00:82:88:09:9b:c5:57:52:4e:f8:
         95:22:61:19:a3:a0:26:79:23:3c:c2:9c:6c:c4:b1:b9:e3:36:
         09:93:09:18:cb:f4:1c:25:7a:d4:75:16:13:df:74:0b:ac:3a:
         f3:c1:84:61:73:fe:9d:0c:25:22:d0:c4:68:9e:11:91:7c:da:
         3b:0e:96:6b:46:5b:d7:c1:b6:54:e5:3d:b3:22:bb:6e:19:2f:
         9f:f5:15:b2:75:58:2d:3a:47:2a:d0:d2:8b:66:d5:70:80:c9:
         ca:52:03:a2:da:20:67:4d:c7:9d:7f:81:b6:9d:90:32:8d:5f:
         1d:77:99:4a:c9:cf:b0:26:ab:f7:d3:86:4a:4e:86:b5:e6:ab:
         49:21:4a:22:41:3d:ba:28:a9:f8:38:fb:91:47:10:3d:71:5a:
         83:77:f8:3a:57:93:4a:da:f3:a9:9c:52:ef:1e:98:f2:07:b5:
         0f:fd:a4:64:fe:1f:b4:c2:15:b3:45:9d:e3:cb:27:97:a3:c0:
         39:39:67:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----