Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1187/U8zVFQTmfNv7Pu_YTCt1YovgiR4.mft
File:                     U8zVFQTmfNv7Pu_YTCt1YovgiR4.mft (raw, json)
Hash identifier:          INrrL8y9xS/ZzjHjO0ZvblgBRy30B0exFSovKK8zYFM=
Subject key identifier:   9F:BF:26:8C:61:FB:44:C4:6D:AE:74:03:C2:45:C8:B8:FF:8E:E7:30
Authority key identifier: 53:CC:D5:15:04:E6:7C:DB:FB:3E:EF:D8:4C:2B:75:62:8B:E0:89:1E
Certificate issuer:       /CN=53CCD51504E67CDBFB3EEFD84C2B75628BE0891E
Certificate serial:       0145
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U8zVFQTmfNv7Pu_YTCt1YovgiR4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1187/U8zVFQTmfNv7Pu_YTCt1YovgiR4.mft
Manifest number:          0145
Signing time:             Tue 02 Aug 2022 20:34:31 +0000
Manifest this update:     Tue 02 Aug 2022 20:34:31 +0000
Manifest next update:     Wed 03 Aug 2022 02:34:31 +0000
Files and hashes:         1: U8zVFQTmfNv7Pu_YTCt1YovgiR4.crl (hash: gfc+4QPIiz6HSzH6eIv0hKvQzXwstm8TAoMih5voGVQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53CCD51504E67CDBFB3EEFD84C2B75628BE0891E
        Validity
            Not Before: Aug  2 20:34:31 2022 GMT
            Not After : Jul 19 01:20:03 2023 GMT
        Subject: CN=9FBF268C61FB44C46DAE7403C245C8B8FF8EE730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2c:3d:6c:14:63:66:e7:e3:09:23:c6:c2:a7:
                    52:45:c4:4e:da:77:84:70:ee:e1:3a:fd:ff:09:c7:
                    09:e5:2d:96:70:58:d2:6d:0b:2d:fb:cb:2b:d2:c5:
                    73:c5:fd:1f:2f:09:3d:76:41:72:37:7b:ed:6d:e5:
                    f6:08:70:39:ea:e8:3c:e0:e1:1f:ab:36:fc:e3:f1:
                    91:ef:9b:d3:37:9c:11:70:64:b2:28:0d:c0:44:27:
                    24:02:36:88:98:90:67:c3:17:dc:05:e0:d9:99:03:
                    38:52:ba:15:b2:b5:42:17:45:ca:d2:ad:d8:42:3e:
                    4e:50:c8:84:17:01:e3:e9:53:f4:1e:f1:ef:97:cc:
                    e3:13:44:0b:e0:a3:6c:fb:81:a1:44:cc:1b:5c:9c:
                    7f:78:14:5f:92:a2:e7:aa:c5:e0:7a:42:ac:3e:98:
                    97:be:29:a1:91:f2:1f:26:b9:4a:e1:da:5e:b6:80:
                    11:84:af:be:58:51:d8:6a:ea:36:bc:72:10:92:8f:
                    dd:f3:81:0b:68:b2:bd:be:d1:98:00:a3:b1:2f:ef:
                    c6:e4:49:31:07:49:3a:aa:62:39:0e:fb:f9:2a:23:
                    a2:90:cc:39:21:92:44:4c:48:f1:7b:66:71:db:49:
                    d0:36:cc:a4:be:c1:71:77:2f:2c:ad:8d:3a:02:76:
                    df:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BF:26:8C:61:FB:44:C4:6D:AE:74:03:C2:45:C8:B8:FF:8E:E7:30
            X509v3 Authority Key Identifier:
                keyid:53:CC:D5:15:04:E6:7C:DB:FB:3E:EF:D8:4C:2B:75:62:8B:E0:89:1E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1187/U8zVFQTmfNv7Pu_YTCt1YovgiR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U8zVFQTmfNv7Pu_YTCt1YovgiR4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1187/U8zVFQTmfNv7Pu_YTCt1YovgiR4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:10:18:95:a8:19:1b:c3:75:40:be:2d:c0:9e:74:a7:dc:59:
         17:26:36:47:70:14:83:67:0f:39:da:56:c4:c5:12:bc:5d:5d:
         fe:16:6c:17:ba:57:c1:b3:ac:f4:cc:86:87:5a:17:bd:bc:83:
         6f:c8:44:2e:1a:70:9c:67:e6:51:ca:60:4e:e9:14:94:3e:64:
         60:59:f3:a3:6d:31:30:e0:5e:d0:3c:d6:92:62:89:d3:9b:7e:
         e4:e5:3a:52:5b:f6:d9:37:e3:bc:96:31:a9:80:70:e7:fe:59:
         02:46:a0:17:78:3b:29:bb:f0:94:2a:fc:3a:f3:8f:47:25:74:
         61:4b:8b:f0:6c:a7:46:9b:fc:20:52:a9:dd:63:d2:cf:1d:61:
         11:93:aa:99:97:6d:25:2b:a6:19:b2:be:28:26:01:60:79:ea:
         46:4d:c6:fb:d3:02:d4:ca:79:94:6a:22:f4:d8:a1:39:ea:da:
         bf:0c:5c:6f:ec:44:10:5b:36:1c:e2:96:e6:58:1b:ba:60:ba:
         f8:0d:49:55:39:60:5c:b2:db:6e:6f:32:4c:d4:d9:72:7e:fc:
         e5:89:73:30:55:b6:e0:2f:22:7c:75:d4:7c:c9:00:68:e3:dc:
         29:55:3b:ee:78:ce:e2:7b:e6:7d:84:6a:15:1d:1c:5c:f0:54:
         2a:0d:70:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:01 2024 by rpki-client on console-fra.rpki-client.org