Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1584/286gFxfM2LDQDP29ojpWyOlLtUY.mft
File:                     286gFxfM2LDQDP29ojpWyOlLtUY.mft (raw, json)
Hash identifier:          KQS6bWZDLMlVw3IYGdXlCnwaz1AS9gmbH/pPzuUkmcQ=
Subject key identifier:   BE:AE:E9:1E:D6:7B:6C:B6:74:E2:6B:ED:D3:69:1F:CA:30:97:30:80
Authority key identifier: DB:CE:A0:17:17:CC:D8:B0:D0:0C:FD:BD:A2:3A:56:C8:E9:4B:B5:46
Certificate issuer:       /CN=DBCEA01717CCD8B0D00CFDBDA23A56C8E94BB546
Certificate serial:       0B4F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/286gFxfM2LDQDP29ojpWyOlLtUY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/286gFxfM2LDQDP29ojpWyOlLtUY.mft
Manifest number:          0B4C
Signing time:             Thu 26 May 2022 19:00:35 +0000
Manifest this update:     Thu 26 May 2022 19:00:35 +0000
Manifest next update:     Fri 27 May 2022 01:00:35 +0000
Files and hashes:         1: 286gFxfM2LDQDP29ojpWyOlLtUY.crl (hash: 8Jl+/rzF/iDPITLoSr2ojp+ARJCTTd/CTxqPfSdbbK4=)
                          2: 762Tkq8nSOXAR_OPz9s_RqNcXgY.roa (hash: SuwmTTrpBN9bVDWRRh0/gPJ14xAghX2UYi9Yuc2TlyU=)
                          3: BZNipAPhpKf9fMAkWueHCjH_mGc.roa (hash: rMhgK9Q+vEc/4+g8kGQfuddY+uskJ8+eLpVHAtNDHTs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2895 (0xb4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBCEA01717CCD8B0D00CFDBDA23A56C8E94BB546
        Validity
            Not Before: May 26 19:00:35 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=BEAEE91ED67B6CB674E26BEDD3691FCA30973080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0a:07:8a:75:29:43:fd:5c:01:92:d4:38:69:
                    27:9d:6d:07:38:8c:24:10:5c:0b:04:f6:ca:ca:a7:
                    6c:63:f4:91:60:c6:59:99:75:7a:3d:2c:6c:7a:fd:
                    b1:ee:f9:d8:da:34:03:65:48:f1:42:fb:94:d9:ee:
                    1a:9b:ef:9c:48:8d:ce:db:8d:e2:d2:59:4a:99:01:
                    68:0d:40:62:88:bc:65:fe:5b:57:e5:43:12:30:a6:
                    88:47:e6:ad:cd:59:94:a4:ed:22:77:f6:39:34:25:
                    8f:c0:ab:b4:4f:cb:6b:84:cb:0a:78:9f:3d:68:1c:
                    fa:1a:66:da:ea:69:77:a6:e5:b4:96:e5:20:ed:83:
                    db:ac:44:ad:d3:8f:50:3d:48:7d:d3:7e:a2:d9:99:
                    5e:cb:12:c0:c5:83:4c:e4:46:1d:9a:6b:76:a9:a8:
                    9c:9b:5f:9b:de:fd:bb:41:b3:8d:1f:f4:d9:67:92:
                    a1:85:e0:8f:9d:05:bd:6b:ac:78:b4:d3:6f:2d:7c:
                    37:8e:8c:65:d1:57:2c:4a:d9:5d:24:67:02:28:8e:
                    0a:78:a3:d7:9a:93:87:9e:b5:25:7c:69:8f:fb:5d:
                    06:5c:03:98:37:d4:c8:13:be:a7:b2:54:4f:06:3d:
                    0b:87:70:39:56:38:26:76:9f:d4:f5:1d:22:ae:da:
                    88:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AE:E9:1E:D6:7B:6C:B6:74:E2:6B:ED:D3:69:1F:CA:30:97:30:80
            X509v3 Authority Key Identifier:
                keyid:DB:CE:A0:17:17:CC:D8:B0:D0:0C:FD:BD:A2:3A:56:C8:E9:4B:B5:46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/286gFxfM2LDQDP29ojpWyOlLtUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/286gFxfM2LDQDP29ojpWyOlLtUY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/286gFxfM2LDQDP29ojpWyOlLtUY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c8:b8:41:59:cc:47:e2:6a:71:c7:8f:12:8d:aa:09:65:f0:
         fc:4b:2e:39:c4:4b:74:1c:29:5d:58:01:24:79:89:a5:41:7a:
         b9:cf:0b:a5:d3:ad:7a:5d:0e:bb:a7:fd:dd:f2:1c:67:f7:dc:
         8a:01:ca:ec:4e:ba:e6:7f:67:ea:93:a6:44:43:01:12:5f:23:
         b3:7a:b9:59:ec:03:d1:c1:b9:8c:9a:38:f4:14:a4:d0:55:93:
         15:9d:ec:10:47:28:5a:4e:14:f0:e0:43:94:69:c5:82:f2:91:
         8e:3c:20:63:9b:c3:79:5f:cc:ff:b9:9a:5f:7a:46:e5:ad:9c:
         0c:09:2c:1c:55:48:cb:be:84:d0:28:a6:1e:63:89:d5:39:ed:
         b6:99:cd:65:13:94:aa:b3:63:05:e2:7c:8b:82:00:e9:d7:0a:
         6d:5a:37:6f:70:07:ba:02:13:6a:98:be:57:b9:ac:02:f5:fc:
         e6:37:ef:ce:e6:f5:01:5c:f1:9c:95:a2:43:ca:86:4a:2c:e7:
         03:90:00:88:8a:a9:1b:c0:f3:5d:96:26:ed:25:59:66:a7:9c:
         a4:38:c0:ca:72:81:54:7d:1d:a2:58:74:7c:db:07:ae:85:ac:
         4d:58:c8:26:1f:c7:4b:a2:90:61:62:f3:85:84:8a:3c:3e:f0:
         d5:ad:26:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:23 2024 by rpki-client on console-ams.rpki-client.org