Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1377/kcYSZfVhPXbfBBk7-onPLVTfiVE.mft
File:                     kcYSZfVhPXbfBBk7-onPLVTfiVE.mft (raw, json)
Hash identifier:          Vo8WYcoINMV8yMUnfEAEWYNWvSH6WMlkGK36i+oggU0=
Subject key identifier:   06:DA:D7:47:B6:C9:43:4A:7A:0F:8A:BE:A2:2D:78:BF:E2:B4:45:3B
Authority key identifier: 91:C6:12:65:F5:61:3D:76:DF:04:19:3B:FA:89:CF:2D:54:DF:89:51
Certificate issuer:       /CN=91C61265F5613D76DF04193BFA89CF2D54DF8951
Certificate serial:       1078
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kcYSZfVhPXbfBBk7-onPLVTfiVE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1377/kcYSZfVhPXbfBBk7-onPLVTfiVE.mft
Manifest number:          1078
Signing time:             Tue 17 Sep 2024 02:17:17 +0000
Manifest this update:     Tue 17 Sep 2024 02:17:17 +0000
Manifest next update:     Tue 17 Sep 2024 08:17:17 +0000
Files and hashes:         1: kcYSZfVhPXbfBBk7-onPLVTfiVE.crl (hash: +QEmsgofse8rObgtRlGz1FczWcnK38DBjHD9uCUIDYU=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4216 (0x1078)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C61265F5613D76DF04193BFA89CF2D54DF8951
        Validity
            Not Before: Sep 17 02:17:17 2024 GMT
            Not After : Sep 17 08:06:57 2024 GMT
        Subject: CN=06DAD747B6C9434A7A0F8ABEA22D78BFE2B4453B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d7:54:87:fa:14:9c:90:1e:21:dd:22:ed:12:
                    6e:f2:4b:90:b8:36:b2:57:ea:c3:04:a5:1c:9e:5c:
                    98:e3:d8:63:f8:9d:a7:71:7d:cf:f7:3a:43:32:2f:
                    b8:fc:22:74:11:be:a0:db:e4:54:b9:9f:3d:db:26:
                    d6:e6:1c:3a:e2:b8:77:86:23:c1:f4:98:bb:18:82:
                    d8:9f:41:f0:e8:2c:95:dc:81:89:be:44:41:af:52:
                    52:f9:06:95:62:8c:b1:be:4f:b0:da:dc:f9:37:20:
                    71:e9:8d:30:98:40:2d:b2:40:86:09:d2:ed:d8:76:
                    d4:7c:a2:00:e3:c4:0f:fb:4a:56:6c:a4:9e:33:2d:
                    3c:65:8e:42:a0:33:d5:e8:6b:a9:52:19:5e:b6:0e:
                    43:ae:f1:d2:a8:f9:92:41:90:4d:57:10:7e:0b:5b:
                    27:83:ff:41:58:7d:4a:df:79:f4:44:a1:5b:1d:33:
                    a0:0e:3f:78:17:96:11:9c:a5:f2:3d:b8:19:6d:97:
                    ed:0c:76:0d:7c:52:be:4f:be:83:6a:25:28:cb:11:
                    85:b2:ea:2d:b8:59:34:23:49:40:d7:33:90:8c:f5:
                    ce:bb:ed:41:e8:1e:bd:d9:51:87:28:ec:ff:e2:09:
                    53:a1:5b:a3:0d:44:a2:9c:8f:64:65:c4:7f:38:ff:
                    42:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DA:D7:47:B6:C9:43:4A:7A:0F:8A:BE:A2:2D:78:BF:E2:B4:45:3B
            X509v3 Authority Key Identifier:
                keyid:91:C6:12:65:F5:61:3D:76:DF:04:19:3B:FA:89:CF:2D:54:DF:89:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1377/kcYSZfVhPXbfBBk7-onPLVTfiVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kcYSZfVhPXbfBBk7-onPLVTfiVE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1377/kcYSZfVhPXbfBBk7-onPLVTfiVE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:fa:85:05:b6:27:b4:92:fc:51:8f:d3:c9:00:97:24:96:3d:
         67:c5:36:a3:dd:fc:31:be:5b:fc:93:28:e0:77:33:d7:d6:05:
         6e:db:e9:9e:d5:81:a7:dc:c5:4d:ed:b5:10:53:35:15:e8:23:
         ea:7c:f1:32:22:08:b5:d4:22:af:53:53:1e:91:bb:4a:25:43:
         9e:a4:1f:c8:37:86:08:f5:ab:c6:83:e9:42:47:53:96:fb:37:
         93:47:76:50:5d:53:58:fd:e4:7b:24:b6:c1:d4:07:4d:42:55:
         05:dd:80:4c:8e:c6:b0:e0:d7:ec:15:31:4e:49:1d:f1:94:1d:
         2d:9f:87:37:4b:64:b6:af:e3:02:7b:2e:90:5d:78:9c:4d:ff:
         2f:e1:01:23:05:90:dd:74:70:40:04:da:be:c4:f4:96:65:78:
         22:7c:bc:5b:b2:27:38:08:2f:70:74:79:48:a0:d3:f4:ba:af:
         a2:b7:59:6f:4b:1c:49:e6:1d:fc:85:ac:3c:d4:a7:1e:71:fa:
         1d:0b:26:eb:5e:16:4a:a5:2e:1b:8d:0a:51:b2:a3:f8:a2:33:
         63:1f:28:6b:51:78:a4:69:2f:f8:ba:ad:a8:d2:aa:89:56:f8:
         0c:f7:c1:de:e9:27:bc:57:ce:91:60:4d:0b:43:cf:1d:9b:05:
         c1:27:99:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----