Manifest

$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft
File:                     D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft (raw, json)
Hash identifier:          5KmIJ4aOlC3IFVXgFyJEEdN/ywOs6yyUom1wp+kzFQk=
Subject key identifier:   D7:55:EF:11:56:11:4F:AB:6F:72:C9:83:16:41:D4:31:AF:CD:C9:8D
Authority key identifier: D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39
Certificate issuer:       /CN=A91E5D610000/serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139
Certificate serial:       3C958DF52211358B7BF0D5CB315EE0DF3A0EDAB5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer
Subject info access:      rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft
Manifest number:          2A
Signing time:             Wed 26 Jun 2024 06:16:55 +0000
Manifest this update:     Wed 26 Jun 2024 06:11:55 +0000
Manifest next update:     Thu 27 Jun 2024 07:48:55 +0000
Files and hashes:         1: 3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa (hash: PNHsRydJIcZcSuQ0M2TmRWfZvicOhf+CKjeYcEuSD58=)
                          2: A828E0147CD8DE9E7A474DCDF06AD96FB37738EE.cer (hash: f7exy09Qe6ik4aLqqKmpADRHOOTa550ov7CNAjQ9pWo=)
                          3: D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.crl (hash: R8XuX+CmY6naEUoiBLgYOomFDXoRd1tKKoV18F4Dt+I=)
                          4: 3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa (hash: JFCS9e0aLryMYeNDBnDNiNrsCRSXbd1lFhCNwVkVDrU=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:95:8d:f5:22:11:35:8b:7b:f0:d5:cb:31:5e:e0:df:3a:0e:da:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610000/serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139
        Validity
            Not Before: Jun 26 06:11:55 2024 GMT
            Not After : Jun 27 07:48:55 2024 GMT
        Subject: CN=D755EF1156114FAB6F72C9831641D431AFCDC98D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b5:f1:da:62:98:97:a5:dc:55:54:15:89:56:
                    ec:84:57:b5:19:aa:ec:41:3d:01:97:19:3d:31:46:
                    f9:be:29:28:64:51:e8:9f:85:c1:89:d1:29:b7:a2:
                    aa:c6:7f:dc:d3:f4:12:92:80:86:5b:bc:4e:d1:57:
                    e6:39:11:c9:50:f1:be:77:c7:46:a5:e4:b0:ec:09:
                    89:c9:d7:29:25:27:c5:8a:99:d5:26:f7:f0:01:9d:
                    cd:23:bc:21:3a:db:b6:ef:ec:26:d1:33:40:7b:f9:
                    9a:6a:bd:8f:dc:6a:00:ec:d6:d2:70:d7:8b:21:be:
                    82:7d:97:65:91:01:30:87:af:37:c1:5d:e4:20:1c:
                    69:9c:44:f4:15:52:ed:cf:6e:79:9b:8b:0a:1a:4b:
                    a1:27:3b:c1:d5:e5:5f:be:58:88:6a:d5:6d:90:35:
                    ad:72:54:dd:94:14:6d:de:18:81:95:20:3a:86:b3:
                    b4:13:b8:18:46:29:54:d1:ea:ed:dc:ae:9b:b8:00:
                    3b:be:85:a3:7a:5e:26:f8:7f:9b:7a:c7:a6:ff:28:
                    0e:07:38:5b:d9:ca:1f:de:32:1f:aa:21:b7:bc:d3:
                    a1:84:62:83:67:b0:a4:cb:da:d9:d2:ae:f3:75:b3:
                    96:8b:ff:1d:a4:d9:b1:36:68:ba:2f:d6:1d:fd:09:
                    e8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:55:EF:11:56:11:4F:AB:6F:72:C9:83:16:41:D4:31:AF:CD:C9:8D
            X509v3 Authority Key Identifier:
                keyid:D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:bb:94:44:11:17:82:c9:98:d0:25:ec:57:d7:d3:fa:f7:43:
         7c:90:aa:b7:21:b3:89:32:28:c2:b6:48:e2:34:ca:bd:02:27:
         78:e3:27:e5:b8:45:f0:d0:10:51:6f:96:6d:70:18:65:ee:63:
         c9:3e:e9:e9:cb:ed:84:d8:86:69:77:62:3c:b6:9c:53:57:1e:
         ed:9c:74:72:07:ea:37:6c:2d:58:80:ff:c2:27:85:3b:e2:df:
         a6:19:a6:0f:dd:d6:df:01:42:1e:af:6c:53:66:24:64:8d:8c:
         9b:d3:5a:bc:ad:97:84:8d:d6:ab:78:15:2b:6f:b8:99:58:7c:
         a1:17:5f:41:83:07:e5:e6:01:09:e4:5b:ac:be:af:62:7e:5c:
         18:6d:e2:48:c9:ba:83:7f:d2:62:05:11:e9:1e:e3:99:fc:cd:
         fa:66:0e:2b:b2:ef:31:57:7e:01:9a:8d:be:9e:92:71:98:cd:
         6a:da:2e:10:b6:12:fb:27:81:f3:42:0f:09:af:33:9d:05:5b:
         b8:48:ca:66:ef:43:c5:c9:05:2d:e7:4b:95:e1:dc:ee:0c:27:
         ca:37:5b:f7:9d:26:10:9c:0b:0c:dd:73:06:6a:57:ca:5f:fc:
         9c:9e:23:2e:13:64:3b:60:8b:db:fe:ea:41:8d:75:ec:66:5a:
         b4:61:ce:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----