Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft
File:                     UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft (raw, json)
Hash identifier:          L8JUPUw7OOjkV1FyUk21nNx3bbwd8HTNTgHAE7zlDvY=
Subject key identifier:   08:D4:14:59:3F:3D:C6:9E:2F:07:0F:CA:2F:84:00:7D:00:76:19:11
Authority key identifier: 51:EA:B2:8F:23:8F:D7:40:7C:2F:66:39:60:48:9D:D6:D9:51:DA:74
Certificate issuer:       /CN=51EAB28F238FD7407C2F663960489DD6D951DA74
Certificate serial:       0B36
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UeqyjyOP10B8L2Y5YEid1tlR2nQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft
Manifest number:          0B36
Signing time:             Sat 06 Jan 2024 07:20:17 +0000
Manifest this update:     Sat 06 Jan 2024 07:20:17 +0000
Manifest next update:     Sat 06 Jan 2024 13:20:17 +0000
Files and hashes:         1: UeqyjyOP10B8L2Y5YEid1tlR2nQ.crl (hash: OOGitrHLOZ/h0XW54bvNSA1TwOG0kz0fxLR9CLhA27o=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2870 (0xb36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51EAB28F238FD7407C2F663960489DD6D951DA74
        Validity
            Not Before: Jan  6 07:20:17 2024 GMT
            Not After : Jan  6 08:35:17 2024 GMT
        Subject: CN=08D414593F3DC69E2F070FCA2F84007D00761911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:17:2a:8f:06:e1:ae:0c:1c:3b:78:88:4e:d3:
                    ca:38:21:47:26:7c:7d:0f:c0:b3:c3:90:a9:d0:63:
                    c8:23:3c:2b:af:71:3f:50:04:09:b0:ae:cb:2b:5b:
                    ae:d9:aa:b3:2a:a3:fc:82:51:0e:c0:09:a9:a9:24:
                    c2:3c:b7:e2:78:40:dc:6e:46:ce:b2:bc:ec:e2:66:
                    4a:d1:22:9e:1d:1a:03:6f:0d:7b:a8:e2:3f:5e:ee:
                    97:86:12:6e:bc:49:b9:2e:48:82:71:cd:1c:f9:9f:
                    5e:c7:9e:0f:fd:7e:b2:35:d2:0d:16:3a:4f:a5:c2:
                    17:fb:fd:37:ad:00:45:88:a9:86:d8:85:00:00:c2:
                    cc:aa:83:2f:cf:75:5c:d4:02:43:8e:f3:a9:53:b2:
                    9c:0d:81:b4:63:24:6a:0a:6d:ae:bb:ae:5d:be:3e:
                    23:21:ce:52:9c:be:1e:b0:72:94:a6:b5:90:25:c2:
                    71:ee:44:98:22:64:26:c8:1a:e6:3c:81:fb:63:25:
                    f3:88:17:e0:b4:f1:7b:88:ed:eb:66:bc:8d:a2:d2:
                    1c:99:7a:3e:db:ed:48:98:00:a8:4e:8d:64:08:31:
                    3d:6d:f8:9b:7a:03:f2:dd:86:9a:97:93:c6:f3:86:
                    c6:a7:32:59:5f:bb:5c:9b:2d:52:75:ab:1b:23:02:
                    07:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D4:14:59:3F:3D:C6:9E:2F:07:0F:CA:2F:84:00:7D:00:76:19:11
            X509v3 Authority Key Identifier:
                keyid:51:EA:B2:8F:23:8F:D7:40:7C:2F:66:39:60:48:9D:D6:D9:51:DA:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UeqyjyOP10B8L2Y5YEid1tlR2nQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:3e:6f:67:7c:69:82:28:c9:ed:19:89:2f:fb:d9:13:d1:e7:
         89:64:bb:5d:c3:8d:69:2a:65:e5:7a:91:1c:ce:ee:c5:93:e7:
         ef:9b:86:33:09:65:77:89:6d:5a:c4:92:df:eb:34:84:0d:33:
         d3:47:29:c2:d0:54:b4:d5:56:60:b0:2a:a9:32:e4:1e:f8:d1:
         2b:6d:c1:60:7e:c8:e2:e3:95:4a:9d:7e:d5:ed:da:5c:c1:13:
         f9:68:37:a9:1d:8c:28:24:ac:71:21:1e:64:59:b7:52:cf:b0:
         a9:1e:e3:00:e9:89:b2:f3:19:1f:fd:da:3a:0a:3a:8b:90:04:
         69:f1:9e:f9:2f:08:52:f0:ab:1a:6a:7b:0c:c1:0d:2b:c7:d3:
         a1:62:aa:a4:15:49:ba:b6:52:b4:4e:d7:7a:e5:3b:74:d8:0d:
         ed:52:9d:52:de:17:7a:4b:d7:7a:b9:4d:3d:98:1b:18:e6:c9:
         fb:80:55:26:f9:ac:c8:36:e0:29:fd:5a:a9:9d:03:3b:62:39:
         6e:88:17:32:d0:fa:09:7f:25:4d:16:69:38:9a:fb:a1:a5:be:
         da:73:77:cf:8d:78:d2:b4:4a:da:52:da:32:41:25:90:db:1f:
         71:90:8a:15:14:91:68:ab:d1:7a:11:f0:b0:b5:74:dd:f2:b8:
         f1:82:21:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 12:18:54 2024 by rpki-client on console-fra.rpki-client.org