Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1029/20laOnIjJBxz9Pg6pUQ6wX7gt4I.mft
File:                     20laOnIjJBxz9Pg6pUQ6wX7gt4I.mft (raw, json)
Hash identifier:          Tj6juXdnrlHEgXyv2rNM+PMWcMAmsBX44y8+LoPDqP8=
Subject key identifier:   3A:61:3B:9F:D5:14:8E:AE:B7:A6:BF:08:14:F9:C7:75:D7:0A:57:B0
Authority key identifier: DB:49:5A:3A:72:23:24:1C:73:F4:F8:3A:A5:44:3A:C1:7E:E0:B7:82
Certificate issuer:       /CN=DB495A3A7223241C73F4F83AA5443AC17EE0B782
Certificate serial:       0757
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/20laOnIjJBxz9Pg6pUQ6wX7gt4I.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1029/20laOnIjJBxz9Pg6pUQ6wX7gt4I.mft
Manifest number:          0757
Signing time:             Thu 26 May 2022 19:26:48 +0000
Manifest this update:     Thu 26 May 2022 19:26:48 +0000
Manifest next update:     Fri 27 May 2022 01:26:48 +0000
Files and hashes:         1: 20laOnIjJBxz9Pg6pUQ6wX7gt4I.crl (hash: x/r6d+/nTTvwETpznrpA54u1abRhBtevkNQtPv4goWs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1879 (0x757)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB495A3A7223241C73F4F83AA5443AC17EE0B782
        Validity
            Not Before: May 26 19:26:48 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=3A613B9FD5148EAEB7A6BF0814F9C775D70A57B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:34:29:92:51:ce:c6:c2:82:01:41:08:bd:52:
                    f1:df:2d:c4:e4:bf:43:01:74:7f:07:28:26:d2:cc:
                    91:92:e5:83:d1:8b:94:43:eb:a7:a9:b8:b9:d3:5d:
                    3f:7e:fa:7a:70:4d:68:16:29:20:85:25:8f:bc:57:
                    8c:a3:f4:95:fa:3a:ac:5a:d8:7b:6c:bb:75:e3:41:
                    9a:b0:41:60:94:0a:23:ea:64:e2:3c:d2:33:c3:f9:
                    5c:22:1f:bb:da:d7:96:33:f1:d3:e0:74:8f:06:9e:
                    87:61:4e:2a:47:67:76:f6:96:cd:c5:d6:ac:8f:26:
                    80:c0:da:83:41:d9:fc:b8:65:35:10:8d:65:17:60:
                    b8:4c:1f:84:a5:17:57:8c:c4:23:bd:7b:02:28:d8:
                    ab:7b:ac:2a:ef:6a:91:97:10:23:dd:86:41:4c:47:
                    0d:a7:7d:89:b3:3f:4c:58:57:0e:64:38:18:d1:79:
                    9b:ea:3c:3f:34:fd:3b:95:1a:a4:49:a0:a5:01:12:
                    9b:fd:a3:21:0e:c8:41:fa:aa:e8:a3:51:ca:63:01:
                    06:2e:99:25:b9:ba:be:ff:57:53:0f:21:68:14:7d:
                    6d:2c:24:d7:65:a4:5c:b3:0a:64:44:d8:1b:00:f3:
                    f3:e7:da:5c:78:e0:8f:9d:17:bf:25:e9:4e:2d:26:
                    a9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:61:3B:9F:D5:14:8E:AE:B7:A6:BF:08:14:F9:C7:75:D7:0A:57:B0
            X509v3 Authority Key Identifier:
                keyid:DB:49:5A:3A:72:23:24:1C:73:F4:F8:3A:A5:44:3A:C1:7E:E0:B7:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1029/20laOnIjJBxz9Pg6pUQ6wX7gt4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/20laOnIjJBxz9Pg6pUQ6wX7gt4I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1029/20laOnIjJBxz9Pg6pUQ6wX7gt4I.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:90:9e:71:e6:08:34:55:e6:3b:fe:fc:21:b2:c9:62:b8:ff:
         68:89:82:02:bd:6f:65:ab:61:98:bd:f5:a3:5e:8a:83:8d:11:
         6a:7f:12:9a:07:7c:82:ff:16:d9:56:fe:00:1b:59:2c:fc:49:
         2f:a9:ab:2c:bf:90:4b:f4:98:23:6a:1c:51:0b:5d:8f:ec:ac:
         5d:93:5f:84:3f:ba:7a:a4:f6:60:cb:89:e2:aa:fc:a2:84:b7:
         21:4c:8e:91:6b:af:e1:53:27:9f:d1:ed:94:9a:66:64:45:a4:
         8c:31:cf:d7:a2:1f:60:e9:1d:9e:12:e7:9b:b5:a1:95:a6:7d:
         88:bd:06:c5:5c:81:8f:d8:26:96:03:a1:b0:23:42:d2:4e:83:
         68:5c:da:b8:1a:5c:dc:c1:b5:72:ae:3c:8e:f5:04:0b:03:d2:
         60:3d:43:be:d3:97:81:5c:16:b9:78:e2:43:d1:d4:23:92:54:
         81:5c:1e:26:5c:83:90:5c:ee:f8:b4:bd:63:fc:4a:06:5d:7d:
         0e:75:81:82:e3:c7:7d:60:bd:54:d6:22:3e:e4:5c:23:ce:a5:
         22:c3:a4:d7:75:bc:21:39:f6:d2:5a:ef:75:33:8a:4f:c7:0c:
         72:d5:d8:e0:a4:0a:55:5a:ca:6c:75:2e:55:1e:f3:aa:7c:42:
         57:7b:a1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:00 2024 by rpki-client on console-fra.rpki-client.org