Manifest

$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/1/9AAF2EFC0F899FEE1EC4D99E1C42C8D44164DA43.mft
File:                     9AAF2EFC0F899FEE1EC4D99E1C42C8D44164DA43.mft (raw, json)
Hash identifier:          taj2VxGXSlsz7kzyzWzx+NBGO7uSNxntddTjFhNKi6s=
Subject key identifier:   CA:A4:30:62:52:11:0B:5C:8F:35:EA:3F:96:D2:14:50:08:D0:89:41
Authority key identifier: 9A:AF:2E:FC:0F:89:9F:EE:1E:C4:D9:9E:1C:42:C8:D4:41:64:DA:43
Certificate issuer:       /CN=A91E5D610000/serialNumber=9AAF2EFC0F899FEE1EC4D99E1C42C8D44164DA43
Certificate serial:       7DED81BD11BAE9ED149F01FEED844C5D090178B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mq8u_A-Jn-4exNmeHELI1EFk2kM.cer
Subject info access:      rsync://rpki.cernet.edu.cn/repo/cernet/1/9AAF2EFC0F899FEE1EC4D99E1C42C8D44164DA43.mft
Manifest number:          49
Signing time:             Fri 03 May 2024 18:37:30 +0000
Manifest this update:     Fri 03 May 2024 18:32:30 +0000
Manifest next update:     Sat 04 May 2024 19:31:30 +0000
Files and hashes:         1: 9AAF2EFC0F899FEE1EC4D99E1C42C8D44164DA43.crl (hash: 8BkveaajTkqOgMEIIslrUSR3A4skx2oKqYJnId+1QLs=)
                          2: 3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa (hash: M2F/1Y52p6FBQGkdTHB9vwPndXGrm+gqYsHCsixyZNA=)
                          3: 3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa (hash: wcc6m6zeJgfv/RRIt2m8bFjCvnP1Tnjr0Wty5noIhLk=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ed:81:bd:11:ba:e9:ed:14:9f:01:fe:ed:84:4c:5d:09:01:78:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610000/serialNumber=9AAF2EFC0F899FEE1EC4D99E1C42C8D44164DA43
        Validity
            Not Before: May  3 18:32:30 2024 GMT
            Not After : May  4 19:31:30 2024 GMT
        Subject: CN=CAA4306252110B5C8F35EA3F96D2145008D08941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4e:87:56:d1:c6:9a:fa:95:58:2a:c4:90:be:
                    04:b6:73:cf:40:d1:29:e5:d1:d4:6e:93:10:9d:c1:
                    d4:99:3c:7b:e1:9b:ef:fc:52:9f:bc:4d:80:09:5f:
                    96:7f:c0:68:fb:60:1f:45:dc:2d:27:5c:a2:53:46:
                    58:71:fc:72:cc:a9:cd:26:63:2b:d5:5d:51:ae:2a:
                    a4:04:51:09:99:c7:f6:be:9a:fb:81:87:4a:1e:86:
                    bc:9b:c1:2c:5a:e9:8f:a9:5f:f9:c9:b8:12:da:73:
                    4c:79:35:58:73:06:a7:3d:30:c0:77:8c:5c:27:e8:
                    60:4d:d3:c0:d9:1e:0d:09:52:78:6a:f7:19:ef:59:
                    fc:6a:97:87:5c:b1:c9:f7:4f:b0:e8:44:c2:14:0a:
                    54:99:39:c2:de:48:12:09:83:3f:e8:b0:1b:cb:ff:
                    e5:71:a1:25:3f:a0:1b:b8:e2:a4:1e:77:68:2c:7a:
                    dc:fa:b5:b8:f1:b3:ea:10:29:30:6a:bb:31:b8:14:
                    a5:0a:6e:5f:ec:cb:cd:e8:b5:fe:f4:47:98:b4:2a:
                    f1:72:f4:8a:25:8a:f3:9e:64:31:12:21:cf:7e:ac:
                    bd:94:d6:7f:b7:10:56:e4:ad:ab:6e:6c:2b:ed:38:
                    57:97:17:6b:4b:54:55:f5:ea:d5:e8:8c:16:87:7a:
                    47:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A4:30:62:52:11:0B:5C:8F:35:EA:3F:96:D2:14:50:08:D0:89:41
            X509v3 Authority Key Identifier:
                keyid:9A:AF:2E:FC:0F:89:9F:EE:1E:C4:D9:9E:1C:42:C8:D4:41:64:DA:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/9AAF2EFC0F899FEE1EC4D99E1C42C8D44164DA43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mq8u_A-Jn-4exNmeHELI1EFk2kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/9AAF2EFC0F899FEE1EC4D99E1C42C8D44164DA43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:4d:4f:0d:d8:fe:45:1c:26:d1:c8:56:59:53:ed:66:25:61:
         ba:d5:f4:a6:be:b7:15:7f:e3:82:ca:8a:9e:d4:17:79:94:dd:
         26:c3:ba:90:fd:f2:8e:17:26:57:dd:7f:9c:c2:27:26:2a:19:
         0d:a5:b3:02:bf:d9:77:19:dc:58:ae:ab:9f:5e:3a:b6:4f:29:
         f8:04:b5:46:a7:f7:82:e2:f7:09:66:7a:fe:05:0a:d5:4c:b5:
         af:23:68:87:5c:ba:27:cb:23:39:bf:19:8d:91:37:3e:41:57:
         0f:f3:d3:18:44:a5:65:c2:be:e3:ba:90:b2:41:0b:da:89:05:
         b4:41:7b:f7:95:e8:bb:1f:9e:ba:a2:50:66:06:28:67:5b:59:
         42:aa:df:52:fb:f4:a2:81:1f:91:96:bc:79:c2:46:fc:eb:ce:
         6f:be:80:53:85:74:f3:e5:92:48:4c:01:9c:79:f5:d2:96:cd:
         60:ce:0d:2e:6d:f5:52:6b:3b:61:d1:4e:d4:27:33:4b:99:0c:
         80:64:33:e9:c8:f6:9d:ac:6d:ca:1e:33:20:39:42:77:6c:e0:
         11:ca:e9:5f:1e:7d:ca:9f:5f:3d:d3:03:1e:98:6e:44:86:5b:
         70:d4:de:45:d5:af:b8:97:7b:e0:1c:79:9f:02:2b:88:5a:30:
         45:b9:aa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----