Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1014/3oOwJdiFvhcSdK-DeB_Zab0JXD8.mft
File:                     3oOwJdiFvhcSdK-DeB_Zab0JXD8.mft (raw, json)
Hash identifier:          Y3qfj4o+CHxFNQcQgP18KfRVR3+llbwqMQyZ2hb2mlo=
Subject key identifier:   ED:99:39:6F:07:F0:C1:51:77:69:E2:D4:13:B4:BB:13:3F:EA:EA:46
Authority key identifier: DE:83:B0:25:D8:85:BE:17:12:74:AF:83:78:1F:D9:69:BD:09:5C:3F
Certificate issuer:       /CN=DE83B025D885BE171274AF83781FD969BD095C3F
Certificate serial:       0674
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3oOwJdiFvhcSdK-DeB_Zab0JXD8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1014/3oOwJdiFvhcSdK-DeB_Zab0JXD8.mft
Manifest number:          0674
Signing time:             Sun 17 Apr 2022 12:50:54 +0000
Manifest this update:     Sun 17 Apr 2022 12:50:54 +0000
Manifest next update:     Sun 17 Apr 2022 18:50:54 +0000
Files and hashes:         1: 3oOwJdiFvhcSdK-DeB_Zab0JXD8.crl (hash: CtE9ab+R/T9WwLyuFIF1dnGVjx2Z95PxSXxyy0Jqn+w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1652 (0x674)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE83B025D885BE171274AF83781FD969BD095C3F
        Validity
            Not Before: Apr 17 12:50:54 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=ED99396F07F0C1517769E2D413B4BB133FEAEA46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:90:1d:9e:94:2a:bb:93:1d:04:29:e0:70:00:
                    05:31:d2:c3:df:4b:30:cf:6b:7c:a8:15:a1:a9:62:
                    30:dc:98:31:17:9e:39:8c:96:c9:9f:2f:43:9a:6c:
                    3d:cc:1c:18:c1:19:26:90:1c:4c:7f:64:94:90:48:
                    eb:87:f3:9d:eb:16:7f:25:04:47:c4:6a:5b:46:eb:
                    8a:65:d7:ef:03:07:07:e2:fa:18:61:1d:aa:36:9f:
                    b8:77:9b:cb:cf:27:ac:67:ee:ee:1c:dc:cb:e4:85:
                    71:60:33:63:9f:6c:07:e3:6b:63:e1:cf:be:4b:7a:
                    b4:0d:70:f3:50:6e:b4:cf:3c:93:ad:3d:68:1b:41:
                    75:08:af:a9:c7:87:67:41:d2:a3:cf:5b:d7:33:5e:
                    3a:b5:93:13:c1:12:33:82:a8:b2:10:b1:77:c4:24:
                    93:1c:1a:28:e6:c9:ff:d4:1c:d9:ea:18:62:20:47:
                    ff:3c:23:41:46:88:2c:d8:55:16:73:82:00:65:47:
                    06:65:f0:1f:b7:ba:b1:d3:71:c5:a0:e3:6b:ca:eb:
                    38:04:fb:9e:da:8d:57:a8:d6:1e:06:55:98:72:dc:
                    55:47:e0:af:25:de:8b:93:e5:6b:b9:af:90:ed:11:
                    47:6b:5c:da:cf:1a:be:9e:f4:75:a3:54:31:e9:bf:
                    81:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:99:39:6F:07:F0:C1:51:77:69:E2:D4:13:B4:BB:13:3F:EA:EA:46
            X509v3 Authority Key Identifier:
                keyid:DE:83:B0:25:D8:85:BE:17:12:74:AF:83:78:1F:D9:69:BD:09:5C:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1014/3oOwJdiFvhcSdK-DeB_Zab0JXD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3oOwJdiFvhcSdK-DeB_Zab0JXD8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1014/3oOwJdiFvhcSdK-DeB_Zab0JXD8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1c:ff:2b:30:b6:78:11:fb:b2:5e:97:20:ef:b6:37:b7:8f:
         bf:e7:1a:a0:42:24:7e:bf:ad:7a:d5:b9:43:0c:55:b3:61:6c:
         02:70:95:d4:4d:e2:47:c2:d8:c1:95:28:5e:87:93:f6:a2:82:
         07:40:88:98:86:92:62:a1:32:51:d1:f4:4b:f6:1b:85:fb:f4:
         fc:62:0f:38:97:cb:dc:3a:3e:68:e4:c2:1b:ff:62:ac:92:2a:
         55:51:c7:4a:e8:b3:1e:6c:c8:17:da:9c:55:da:25:62:de:d1:
         fb:be:6a:fe:71:b3:8d:31:cc:3b:15:09:30:72:42:87:30:d0:
         e5:e0:55:33:1d:21:50:30:2e:b6:10:3a:27:33:62:62:f8:45:
         20:ac:f2:95:26:96:4a:37:03:de:15:43:55:6a:48:aa:af:16:
         75:32:56:36:5f:36:49:1a:c1:b9:0f:73:ce:11:e6:cf:a1:2a:
         c6:f4:51:16:38:19:97:10:72:82:d5:4f:f4:a0:d1:13:5a:2a:
         e4:63:a9:d0:c8:52:8a:9e:5c:79:da:9a:ec:83:56:42:34:30:
         da:e9:0f:d5:cc:06:bb:f5:27:ca:9f:2d:6a:91:bb:7e:1c:14:
         9b:eb:0c:db:37:cd:48:cb:e5:1d:5f:50:5c:fa:64:8d:6d:69:
         a5:97:ff:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:06 2024 by rpki-client on console-ams.rpki-client.org