Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1662/P8sUcex0sgltFCWIo8nBzOcyfEo.mft
File:                     P8sUcex0sgltFCWIo8nBzOcyfEo.mft (raw, json)
Hash identifier:          zl804vvWpthTbz7l7lP6CU6V5Q6K+wIE3hVzNEAw8oI=
Subject key identifier:   29:29:94:EB:B7:95:DB:B7:A6:57:06:FA:CF:08:35:5D:E7:4D:78:2E
Authority key identifier: 3F:CB:14:71:EC:74:B2:09:6D:14:25:88:A3:C9:C1:CC:E7:32:7C:4A
Certificate issuer:       /CN=3FCB1471EC74B2096D142588A3C9C1CCE7327C4A
Certificate serial:       0756
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/P8sUcex0sgltFCWIo8nBzOcyfEo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1662/P8sUcex0sgltFCWIo8nBzOcyfEo.mft
Manifest number:          0756
Signing time:             Thu 26 May 2022 19:25:12 +0000
Manifest this update:     Thu 26 May 2022 19:25:11 +0000
Manifest next update:     Fri 27 May 2022 01:25:11 +0000
Files and hashes:         1: P8sUcex0sgltFCWIo8nBzOcyfEo.crl (hash: /j6yohFuxMWCnXAFQ8Gfap44TJLgdIgvt/VEQLPVBLk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1878 (0x756)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FCB1471EC74B2096D142588A3C9C1CCE7327C4A
        Validity
            Not Before: May 26 19:25:11 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=292994EBB795DBB7A65706FACF08355DE74D782E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5b:dd:25:ec:39:18:55:c0:bd:db:75:c4:cf:
                    5f:22:37:f2:ce:40:0d:eb:1b:0c:3b:d9:25:43:11:
                    c3:41:e9:09:32:f0:53:1e:bb:09:97:12:cf:d3:5e:
                    99:72:72:5f:52:ea:93:46:7f:ad:fb:0a:90:6d:ac:
                    e1:f2:20:64:3e:a0:b3:20:15:38:68:e6:c9:c4:04:
                    4c:93:9b:97:4b:5d:f6:be:e1:1d:57:bb:d9:e5:e5:
                    18:09:75:ad:07:e2:5a:cf:cd:de:d2:2e:36:d4:24:
                    49:96:58:44:fb:9a:44:6e:18:7a:72:14:fb:84:17:
                    f7:ee:fb:15:bf:bd:4a:48:50:46:f7:a9:1b:18:de:
                    43:4d:56:7f:79:42:79:1c:fa:2b:5f:ca:aa:70:f7:
                    cd:bb:80:96:34:a3:46:a8:fe:fe:d6:6e:f8:d8:60:
                    9c:f1:14:0f:f1:31:cd:85:8e:1c:7b:31:60:98:d5:
                    ee:d0:05:cd:dd:36:2a:0c:88:27:94:8a:c6:9a:72:
                    de:0c:e5:a5:5a:3e:b2:fe:0b:2f:bc:94:cd:40:73:
                    81:18:38:27:86:f5:e9:e0:80:99:67:f3:b1:70:48:
                    9e:0b:f1:59:de:f1:7e:6d:28:1f:05:18:ff:84:ce:
                    fd:6f:f7:5f:ef:01:19:53:9f:8f:0e:01:a0:0e:cc:
                    ed:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:29:94:EB:B7:95:DB:B7:A6:57:06:FA:CF:08:35:5D:E7:4D:78:2E
            X509v3 Authority Key Identifier:
                keyid:3F:CB:14:71:EC:74:B2:09:6D:14:25:88:A3:C9:C1:CC:E7:32:7C:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1662/P8sUcex0sgltFCWIo8nBzOcyfEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/P8sUcex0sgltFCWIo8nBzOcyfEo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1662/P8sUcex0sgltFCWIo8nBzOcyfEo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:4f:29:13:68:63:26:26:31:82:c2:7f:ad:ea:cc:cd:c8:03:
         87:34:99:e3:f3:bf:96:af:e9:92:cf:b6:6a:b3:4c:51:9d:47:
         62:ff:b6:1b:b2:40:30:f6:33:a9:fa:ef:7f:ee:73:67:2a:c7:
         b8:23:f8:c9:3e:f2:f9:ab:f0:98:fa:ec:31:59:3c:b8:40:4d:
         e2:71:2c:22:d9:48:21:76:54:74:c2:73:2c:ab:82:b7:7b:ce:
         3c:6e:1f:f5:cc:c3:aa:b2:80:a8:9a:5d:a0:51:cd:9b:9f:02:
         8a:81:f2:58:73:ef:03:53:55:f9:3e:08:28:cf:c0:e9:c4:c9:
         a5:48:ce:dc:24:6c:43:51:80:7e:b0:78:05:3f:38:ae:1e:7e:
         e9:0e:8a:cb:b5:93:06:3d:78:d0:dc:98:50:4e:db:aa:d2:fc:
         ff:e4:48:a5:16:88:56:bb:9a:df:9f:d5:d2:d5:35:2e:c5:c8:
         3f:8f:27:3c:cd:ac:01:0a:c1:9e:80:2a:f2:cb:11:d5:59:2e:
         e4:54:7d:73:4b:c4:f2:c9:2d:4b:11:f8:4d:ac:9b:13:e1:a4:
         21:bc:1a:2e:7c:ee:28:76:c2:c3:bb:a5:4b:c5:1b:6c:53:53:
         2e:2a:14:77:26:05:8c:eb:76:56:ff:a8:19:98:87:9b:fd:86:
         1f:4f:cb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org