Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/11/3UcEmiopXdNgktLwxIj8tsiYEIQ.mft
File:                     3UcEmiopXdNgktLwxIj8tsiYEIQ.mft (raw, json)
Hash identifier:          b8zERB1yiAn/tOCM9hqGKww/tjum63ktZFzYYdStW3w=
Subject key identifier:   06:55:E9:24:0E:4E:2B:6D:29:F9:CB:A0:4C:80:01:03:98:FC:05:33
Authority key identifier: DD:47:04:9A:2A:29:5D:D3:60:92:D2:F0:C4:88:FC:B6:C8:98:10:84
Certificate issuer:       /CN=DD47049A2A295DD36092D2F0C488FCB6C8981084
Certificate serial:       30A9
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3UcEmiopXdNgktLwxIj8tsiYEIQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/11/3UcEmiopXdNgktLwxIj8tsiYEIQ.mft
Manifest number:          30A9
Signing time:             Thu 26 May 2022 20:25:22 +0000
Manifest this update:     Thu 26 May 2022 20:25:22 +0000
Manifest next update:     Fri 27 May 2022 02:25:22 +0000
Files and hashes:         1: 3UcEmiopXdNgktLwxIj8tsiYEIQ.crl (hash: WmwGdXhAqhEzvOsw4L4znW0LZOaV8Mzsz871DUewFUk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12457 (0x30a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD47049A2A295DD36092D2F0C488FCB6C8981084
        Validity
            Not Before: May 26 20:25:22 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=0655E9240E4E2B6D29F9CBA04C80010398FC0533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:03:1f:80:36:e6:e5:2e:c1:be:85:68:c2:d1:
                    6f:98:99:2c:92:f4:8e:da:2a:2c:f8:5b:c2:75:ed:
                    d0:06:34:6a:89:e1:1f:db:41:a7:74:27:9f:d5:da:
                    1d:f1:93:da:6e:69:fd:a4:65:de:a8:47:fa:4b:3a:
                    3d:ed:89:ff:ab:8a:8d:a1:11:17:52:7a:14:44:fb:
                    57:f5:02:8b:11:a9:fb:11:81:7e:60:e1:01:ac:73:
                    35:e7:dc:a1:ba:1a:56:81:40:a3:cc:ad:2d:6f:86:
                    01:c3:19:08:b1:81:46:67:7a:bc:9a:11:5a:3c:a0:
                    27:13:e5:25:33:26:30:99:6d:12:44:2c:10:20:2c:
                    55:e1:28:79:45:e1:0d:05:1f:87:49:75:a6:9f:9d:
                    77:70:16:ba:5e:b7:2e:64:c5:66:54:00:d7:b2:0b:
                    c5:54:ad:0b:8f:6b:28:8f:d7:a6:64:20:d6:49:25:
                    a9:6a:03:6f:0a:c5:2a:81:bc:56:48:a4:6b:72:4b:
                    32:b1:b2:43:cb:ff:b1:5c:df:4e:07:d4:d1:b5:1d:
                    f0:23:78:02:6b:b1:0e:01:13:dd:05:6b:50:de:05:
                    fe:9c:6b:96:f2:55:5c:59:dd:68:65:91:ba:38:83:
                    8c:30:4f:0d:07:24:9a:49:64:ac:7f:a6:0f:ef:4c:
                    4f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:55:E9:24:0E:4E:2B:6D:29:F9:CB:A0:4C:80:01:03:98:FC:05:33
            X509v3 Authority Key Identifier:
                keyid:DD:47:04:9A:2A:29:5D:D3:60:92:D2:F0:C4:88:FC:B6:C8:98:10:84

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/11/3UcEmiopXdNgktLwxIj8tsiYEIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3UcEmiopXdNgktLwxIj8tsiYEIQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/11/3UcEmiopXdNgktLwxIj8tsiYEIQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:88:a4:77:a7:c6:63:dd:12:db:f8:a4:cf:80:ca:fd:0c:8d:
         1a:5d:5b:c5:71:c8:d2:68:72:d5:f7:dd:e8:4f:16:3a:8f:44:
         ad:c6:64:e8:2c:8b:3b:6d:46:79:8e:82:b8:18:22:32:fd:40:
         cd:53:4f:9e:02:0f:38:f1:74:c6:43:bd:46:b3:7a:b5:e4:6a:
         84:fc:9b:ab:d2:6f:dd:76:df:9f:2d:d4:b3:c9:f6:3b:a2:08:
         ac:dc:04:5a:0d:c6:f1:42:b3:0d:e9:d9:ad:38:54:89:fe:0c:
         c5:b5:3f:3d:a4:eb:12:82:de:91:15:3b:f4:6c:69:61:c7:31:
         0f:ac:91:78:4e:19:4b:24:6d:e4:a8:49:a2:95:0f:06:c4:3b:
         66:98:9f:83:97:37:05:4d:d1:ae:d0:bb:8f:c5:ba:32:42:43:
         c8:d6:fe:27:a4:8b:0d:2a:4a:f1:f8:0d:9c:8b:e7:bd:d8:19:
         4c:76:1b:4c:64:b8:a6:d8:b5:7b:bb:fc:0b:04:11:72:f9:fe:
         7b:a6:39:0a:bc:f6:f5:0b:9b:0a:5d:68:16:83:6f:61:02:d4:
         ba:5a:25:42:54:84:cc:22:e5:26:e5:06:c2:f5:b7:37:fe:05:
         b7:07:00:2e:89:00:89:29:b8:8c:27:9d:d0:02:92:4f:8f:5a:
         7e:ba:ee:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:05 2023 by rpki-client on console-ams.rpki-client.org