Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/121/JI2tZ5AhMFkk8Q-D5Z4aPFoeOIQ.mft
File:                     JI2tZ5AhMFkk8Q-D5Z4aPFoeOIQ.mft (raw, json)
Hash identifier:          Ie/PLOrJ9H6XrQuXzUPEtKTXxfF9+iAswDjubpuAXSw=
Subject key identifier:   A8:81:2D:E5:79:9E:55:0F:84:E4:8D:9F:79:2F:83:64:D4:7D:40:02
Authority key identifier: 24:8D:AD:67:90:21:30:59:24:F1:0F:83:E5:9E:1A:3C:5A:1E:38:84
Certificate issuer:       /CN=248DAD679021305924F10F83E59E1A3C5A1E3884
Certificate serial:       0745
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JI2tZ5AhMFkk8Q-D5Z4aPFoeOIQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/JI2tZ5AhMFkk8Q-D5Z4aPFoeOIQ.mft
Manifest number:          0745
Signing time:             Thu 26 May 2022 19:25:46 +0000
Manifest this update:     Thu 26 May 2022 19:25:46 +0000
Manifest next update:     Fri 27 May 2022 01:25:46 +0000
Files and hashes:         1: JI2tZ5AhMFkk8Q-D5Z4aPFoeOIQ.crl (hash: mQa7f/frWodFt8mU/Zfj3NSoHz6C1nTCPxXcdkBO5Jc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1861 (0x745)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=248DAD679021305924F10F83E59E1A3C5A1E3884
        Validity
            Not Before: May 26 19:25:46 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=A8812DE5799E550F84E48D9F792F8364D47D4002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4a:db:34:10:e3:e1:d2:5d:2c:4b:e8:2e:d3:
                    56:fb:9e:15:e2:89:39:43:80:36:5e:84:ec:b0:46:
                    42:84:f3:4b:2f:57:4e:40:ee:ed:72:51:c5:f7:f2:
                    d8:02:5b:c7:a8:bc:79:1c:df:46:b5:8d:00:df:85:
                    8b:03:7e:95:35:ea:03:04:d1:aa:56:b2:5c:26:20:
                    d1:c3:c7:da:0a:77:ae:29:76:da:c9:dd:12:9f:59:
                    5e:c6:b4:7c:64:cb:ed:a2:50:f0:a7:71:89:d5:69:
                    62:7a:67:3f:1f:99:51:88:4d:08:9b:b7:a4:ef:f3:
                    2c:86:b2:bf:cf:cc:b2:e0:e2:32:99:3a:d2:fd:ff:
                    e4:6a:e1:da:04:34:89:d9:ae:90:f8:ca:a5:1f:04:
                    f2:28:8c:a7:71:99:bd:13:e4:6f:4d:7a:e1:ed:e9:
                    f2:87:1a:66:ba:04:c5:2a:47:9c:7f:4e:74:90:42:
                    9e:a1:53:ae:e6:74:bd:49:76:55:ad:b9:9a:b2:09:
                    f3:ca:b4:7d:85:83:7f:27:c4:0b:9f:7d:0f:b3:17:
                    f8:64:85:36:ba:f8:eb:b1:a1:82:c3:e3:c8:5d:b9:
                    cb:10:a4:a8:da:ad:d0:b2:dc:95:2a:50:cc:7f:59:
                    d4:6f:98:66:ba:3a:dd:55:fc:b3:45:4c:05:de:ac:
                    31:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:81:2D:E5:79:9E:55:0F:84:E4:8D:9F:79:2F:83:64:D4:7D:40:02
            X509v3 Authority Key Identifier:
                keyid:24:8D:AD:67:90:21:30:59:24:F1:0F:83:E5:9E:1A:3C:5A:1E:38:84

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/JI2tZ5AhMFkk8Q-D5Z4aPFoeOIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JI2tZ5AhMFkk8Q-D5Z4aPFoeOIQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/JI2tZ5AhMFkk8Q-D5Z4aPFoeOIQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:1f:ef:d0:c8:dd:08:4f:49:9a:08:8d:b7:b7:a5:42:6c:62:
         a2:2f:11:b1:64:99:65:9f:aa:89:32:4d:57:c7:e7:9f:38:19:
         6e:58:dd:4b:94:09:16:2a:2d:e0:1d:8d:5f:1b:54:74:fb:42:
         6a:ec:d8:f2:bd:a6:2c:ea:2b:1b:de:69:21:6f:19:9b:53:73:
         0f:15:7b:cb:e2:a6:21:11:bc:14:f7:37:10:bd:df:89:46:da:
         d2:f2:ca:79:bf:9e:66:e4:18:ec:bb:c2:fc:24:e6:65:ea:b8:
         35:02:3e:ec:76:b0:ac:96:90:29:a8:dc:9c:46:56:a5:06:4d:
         53:d6:36:65:5e:d3:cd:86:5b:7b:85:6d:45:77:3e:aa:ed:1e:
         63:76:56:aa:ef:80:c6:18:22:7d:3a:54:8a:48:6c:52:d7:fd:
         10:e6:53:72:28:07:05:60:c6:41:6b:03:ea:f7:b9:76:2e:b2:
         6c:15:71:e6:67:17:18:f9:ed:ae:7b:6e:66:e4:77:e8:bb:30:
         75:c8:6c:7f:04:18:e2:a6:01:1f:f8:d1:aa:5f:d1:04:79:0e:
         0b:3e:6f:35:9b:ca:c9:45:3b:8b:78:f2:0a:47:dd:f5:0a:5e:
         30:6a:58:76:ea:c9:13:55:85:2d:73:4b:f5:d6:f7:05:4d:05:
         d0:a2:75:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:01 2024 by rpki-client on console-fra.rpki-client.org