Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2330/q8RQoS9I_U5eD8b3qbXTBVJ-gEM.mft
File:                     q8RQoS9I_U5eD8b3qbXTBVJ-gEM.mft (raw, json)
Hash identifier:          LORdvKVKEvTGvMbt+HD1x5zlW/r/su8QoN6MpJulrb4=
Subject key identifier:   16:03:A7:00:A1:04:0A:79:A2:C2:33:8A:3F:C5:7A:A8:D2:F2:8B:5C
Authority key identifier: AB:C4:50:A1:2F:48:FD:4E:5E:0F:C6:F7:A9:B5:D3:05:52:7E:80:43
Certificate issuer:       /CN=ABC450A12F48FD4E5E0FC6F7A9B5D305527E8043
Certificate serial:       0F61
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8RQoS9I_U5eD8b3qbXTBVJ-gEM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2330/q8RQoS9I_U5eD8b3qbXTBVJ-gEM.mft
Manifest number:          0F61
Signing time:             Sat 10 Aug 2024 03:17:52 +0000
Manifest this update:     Sat 10 Aug 2024 03:17:52 +0000
Manifest next update:     Sat 10 Aug 2024 09:17:52 +0000
Files and hashes:         1: q8RQoS9I_U5eD8b3qbXTBVJ-gEM.crl (hash: jULHxdExofkHSBeN8yZP4Hh/NX5UWUrbHXEbJcHnsD4=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3937 (0xf61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABC450A12F48FD4E5E0FC6F7A9B5D305527E8043
        Validity
            Not Before: Aug 10 03:17:52 2024 GMT
            Not After : Aug 10 07:41:13 2024 GMT
        Subject: CN=1603A700A1040A79A2C2338A3FC57AA8D2F28B5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9b:c8:34:a9:9e:69:90:1c:fe:1f:cf:35:08:
                    88:c4:d8:32:26:13:bc:b8:b4:9f:4b:cf:3e:a3:b3:
                    58:81:2d:e4:36:fc:96:f7:36:52:b4:d9:78:46:8e:
                    89:19:17:3d:51:55:37:db:39:03:10:8a:f8:cd:c6:
                    c4:bd:07:d0:8c:fb:02:28:67:c0:57:d4:44:bd:b5:
                    23:37:ad:32:2e:d5:e0:c4:c4:e6:fb:b2:b7:bb:44:
                    b6:1e:e6:d1:81:26:21:84:d8:bf:70:88:dd:1d:05:
                    66:f1:1d:82:1d:9b:d1:f6:84:03:f1:cc:1d:ca:08:
                    7c:bb:1b:b8:e3:2f:5d:90:9e:1c:e3:bf:26:24:93:
                    49:dc:7d:0b:1c:c6:a5:31:05:58:65:ed:11:21:c3:
                    e1:39:1d:91:b3:0f:ff:7f:19:d7:5a:db:93:e6:0f:
                    25:85:95:3b:fd:e8:18:71:ad:a6:8d:c2:10:5e:a6:
                    c5:40:30:ff:64:c4:8e:89:9d:b0:2e:56:15:52:9b:
                    05:d6:df:cb:96:ce:52:d6:f9:4f:69:cb:44:ed:b6:
                    2d:55:06:ec:ed:b8:21:b3:80:fe:d4:fb:5d:10:c8:
                    61:2f:dd:7a:4b:41:dc:4c:5d:f1:b1:ed:42:51:2e:
                    07:a4:dd:f9:06:47:05:4b:cc:75:f1:d6:91:da:6b:
                    a4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:03:A7:00:A1:04:0A:79:A2:C2:33:8A:3F:C5:7A:A8:D2:F2:8B:5C
            X509v3 Authority Key Identifier:
                keyid:AB:C4:50:A1:2F:48:FD:4E:5E:0F:C6:F7:A9:B5:D3:05:52:7E:80:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2330/q8RQoS9I_U5eD8b3qbXTBVJ-gEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8RQoS9I_U5eD8b3qbXTBVJ-gEM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2330/q8RQoS9I_U5eD8b3qbXTBVJ-gEM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b3:eb:9a:6f:39:74:6a:ec:82:4d:da:c0:a3:f0:d5:5f:1a:
         07:cb:42:74:31:ef:7b:84:bb:25:84:82:9d:df:a4:5e:ba:93:
         a1:c0:21:86:6b:f9:3a:d2:20:a1:14:81:30:c9:6c:ab:d0:cb:
         4f:ad:a1:e5:6d:bd:3a:02:a6:2d:88:e9:1c:89:7f:40:fd:99:
         0a:ce:34:96:dc:6c:6d:9f:f8:94:f3:71:96:be:cf:74:54:94:
         64:d9:cf:22:1e:a2:10:35:dc:43:b7:90:54:0f:b5:a0:55:c7:
         6e:65:9c:76:dd:d0:a2:01:07:f3:e0:aa:c8:61:ec:d6:1b:7c:
         cd:e7:5e:46:f7:c8:af:90:92:a7:81:c5:fc:c1:3d:93:40:89:
         47:30:c6:1d:53:d8:37:12:9c:82:99:f2:dc:94:7a:24:9a:68:
         49:2c:58:c4:b7:3c:88:93:55:29:04:7d:8c:1d:19:34:8a:ad:
         26:b4:1c:72:47:e2:54:c4:cb:7a:89:dc:82:62:69:d7:aa:93:
         4b:f0:29:f4:8b:05:10:ab:1e:f1:ed:90:ab:c7:31:a2:d4:aa:
         a0:fa:bd:b1:c2:9d:f9:92:3b:6d:45:a6:35:01:45:6d:4e:a7:
         68:c8:7b:5b:3b:fa:b5:e6:f3:cf:f9:a0:7b:87:44:c5:8d:65:
         f8:ef:6a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 10:21:00 2024 by rpki-client on console-fra.rpki-client.org