Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1628/mXwN1JSBnpwfO_06qYAx_vjrfaM.mft
File:                     mXwN1JSBnpwfO_06qYAx_vjrfaM.mft (raw, json)
Hash identifier:          DVrjcnBKj7iWlqjvRbodELEbHXvmSQuHx296Hep9pRk=
Subject key identifier:   C5:FA:8B:ED:7B:BF:A0:EC:97:95:23:CC:FF:61:70:4D:A5:6C:3B:69
Authority key identifier: 99:7C:0D:D4:94:81:9E:9C:1F:3B:FD:3A:A9:80:31:FE:F8:EB:7D:A3
Certificate issuer:       /CN=997C0DD494819E9C1F3BFD3AA98031FEF8EB7DA3
Certificate serial:       0E95
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mXwN1JSBnpwfO_06qYAx_vjrfaM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1628/mXwN1JSBnpwfO_06qYAx_vjrfaM.mft
Manifest number:          0E93
Signing time:             Wed 01 Mar 2023 14:45:44 +0000
Manifest this update:     Wed 01 Mar 2023 14:45:43 +0000
Manifest next update:     Wed 01 Mar 2023 20:45:43 +0000
Files and hashes:         1: mXwN1JSBnpwfO_06qYAx_vjrfaM.crl (hash: FRa4Uov5JW1VKxsbXVzAQA4L47J3bidlzBd9ctUJftQ=)
                          2: zyqKrSsEQTh-uxoqaeQhTj2xlAc.roa (hash: 0tGTwFblaUxh+2jH1Kjjs89C9ovJ2U0VII/EASpm4cc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3733 (0xe95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997C0DD494819E9C1F3BFD3AA98031FEF8EB7DA3
        Validity
            Not Before: Mar  1 14:45:43 2023 GMT
            Not After : Feb 17 02:46:59 2024 GMT
        Subject: CN=C5FA8BED7BBFA0EC979523CCFF61704DA56C3B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:13:f2:a7:be:3b:a0:dd:e7:d6:4a:47:51:6e:
                    5a:30:ae:84:d6:de:90:ba:11:b1:50:a7:d1:f4:03:
                    8e:81:c2:0f:1f:23:03:7b:a1:e6:60:97:af:b0:e3:
                    1a:7d:f7:c8:3f:a3:3d:00:11:88:0b:64:9e:c9:82:
                    46:23:ec:54:4d:66:b0:41:cb:b6:03:a2:70:23:02:
                    02:c2:f9:e3:82:93:aa:7c:ee:66:3f:ea:6b:b3:5a:
                    f4:41:df:fe:6b:9b:99:63:6d:cc:7b:c7:78:7d:32:
                    f5:9d:da:46:4e:82:f0:69:f6:66:c9:00:50:23:72:
                    91:02:95:52:11:d9:58:d6:12:07:b8:64:65:d4:32:
                    84:c0:6d:5e:43:6f:70:ae:33:ed:bb:3a:fa:4f:e5:
                    7f:f8:68:0c:f7:ba:de:bc:9f:c4:8d:b5:85:82:81:
                    2c:2a:44:35:94:bf:0c:9b:4f:d2:29:aa:60:b5:65:
                    fe:c6:a0:03:b2:fd:0d:7f:dd:c0:3c:5d:e4:8d:f1:
                    46:69:69:9b:7a:2e:63:ca:67:6d:ce:ce:4b:e8:78:
                    5b:7e:e8:63:04:8f:cc:59:5b:39:9c:fd:35:4f:32:
                    96:65:21:ad:9e:0e:17:1f:ac:d2:7d:0f:f4:40:b7:
                    d8:47:f8:f5:1b:1f:48:c3:ac:ee:f6:22:1b:79:81:
                    e2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FA:8B:ED:7B:BF:A0:EC:97:95:23:CC:FF:61:70:4D:A5:6C:3B:69
            X509v3 Authority Key Identifier:
                keyid:99:7C:0D:D4:94:81:9E:9C:1F:3B:FD:3A:A9:80:31:FE:F8:EB:7D:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1628/mXwN1JSBnpwfO_06qYAx_vjrfaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mXwN1JSBnpwfO_06qYAx_vjrfaM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1628/mXwN1JSBnpwfO_06qYAx_vjrfaM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:88:25:9a:39:70:68:2d:a6:dd:88:1b:53:cc:65:78:f0:10:
         ad:b8:f3:6c:67:d3:58:a9:fe:94:07:ee:cc:25:a1:59:46:58:
         8d:61:c1:ed:2b:b7:bb:c4:b9:f2:f1:9a:e6:fb:d1:69:e7:44:
         8f:ff:ea:30:1e:d4:3a:04:12:ed:9d:40:dd:5a:d7:3f:0f:91:
         1b:49:54:9f:45:f2:70:b9:8c:b6:7e:e4:35:59:a0:4f:4e:c0:
         88:ed:75:61:51:8f:b8:33:30:9c:6c:28:1c:27:e3:2d:84:c1:
         68:ca:70:0e:da:3c:1d:61:17:4c:de:94:14:46:d7:d8:1e:66:
         67:99:85:97:fd:4c:d8:9e:19:84:95:2a:ac:38:bd:50:ea:d5:
         82:5d:72:dc:1c:4a:66:f3:74:63:0f:c5:90:97:06:fb:f1:eb:
         56:76:b2:0e:5b:1d:9a:56:b6:45:89:98:13:78:c7:38:ea:d4:
         7b:8a:3e:ea:ae:41:68:69:2a:d8:68:47:e9:79:0e:5b:80:82:
         a6:af:bc:8e:24:0b:05:7f:ad:7d:7d:c8:da:fc:1d:ea:ed:76:
         3e:12:fb:40:b5:b0:1b:a4:a6:04:c0:3a:cb:8b:a6:20:36:49:
         11:bb:4d:8b:9c:7c:31:d4:cd:74:08:3f:73:0c:eb:5f:17:aa:
         57:b0:6e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org