Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2417/_kCLChfM0YvSz40HuUVC3dTs1J0.mft
File:                     _kCLChfM0YvSz40HuUVC3dTs1J0.mft (raw, json)
Hash identifier:          okpOXD/d3ae03qY45cU04mPaybozgE6GpBvondxjU24=
Subject key identifier:   AD:AE:A2:C0:10:FC:75:E8:BC:AF:ED:65:D0:7C:99:60:2D:92:58:D3
Authority key identifier: FE:40:8B:0A:17:CC:D1:8B:D2:CF:8D:07:B9:45:42:DD:D4:EC:D4:9D
Certificate issuer:       /CN=FE408B0A17CCD18BD2CF8D07B94542DDD4ECD49D
Certificate serial:       0F62
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_kCLChfM0YvSz40HuUVC3dTs1J0.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2417/_kCLChfM0YvSz40HuUVC3dTs1J0.mft
Manifest number:          0F62
Signing time:             Fri 14 Apr 2023 06:56:21 +0000
Manifest this update:     Fri 14 Apr 2023 06:56:20 +0000
Manifest next update:     Fri 14 Apr 2023 12:56:20 +0000
Files and hashes:         1: _kCLChfM0YvSz40HuUVC3dTs1J0.crl (hash: WlAw+/pJNmNOrKstMU/oZ4RCR7tDfXrW8OrtLU1koBA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3938 (0xf62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE408B0A17CCD18BD2CF8D07B94542DDD4ECD49D
        Validity
            Not Before: Apr 14 06:56:20 2023 GMT
            Not After : Mar 27 01:13:10 2024 GMT
        Subject: CN=ADAEA2C010FC75E8BCAFED65D07C99602D9258D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8d:61:f2:82:cc:bc:2e:72:12:68:6d:c7:2f:
                    c4:0f:fb:4c:58:85:f0:5c:68:93:22:cd:52:86:0f:
                    ba:ec:84:7b:c0:a0:2a:89:fd:f6:48:b5:f2:8c:3d:
                    48:c1:fd:08:14:76:be:6c:67:33:f9:47:23:6d:b8:
                    a2:e2:d2:f9:ce:97:cd:95:88:03:bc:41:2a:eb:d9:
                    2e:62:3a:2e:cb:a0:46:54:79:03:17:46:19:82:3d:
                    6a:30:f5:12:8b:05:25:1e:65:68:61:c0:54:c0:30:
                    53:cb:a0:84:02:da:fd:73:23:c6:d5:97:42:ff:6f:
                    07:78:a0:35:2b:db:0e:2e:81:6e:5d:7a:8d:ba:ca:
                    5e:d2:d5:00:13:38:b6:e8:fe:d4:2e:b8:fe:11:19:
                    5e:b8:48:b8:b9:33:eb:b7:90:da:a0:18:42:51:71:
                    a6:7e:4f:2e:77:a9:1f:c2:7a:59:01:da:8b:b8:85:
                    d4:9e:3d:9e:cc:9f:17:d1:ec:a8:65:2f:43:8b:62:
                    8e:35:42:93:25:bb:3d:37:27:54:9d:4c:f3:e1:b6:
                    ef:b6:1f:91:3d:e1:ee:66:a3:92:b4:ae:1c:0c:ee:
                    25:45:08:66:d3:3c:88:e1:c7:27:9f:4d:23:df:00:
                    f0:81:ba:07:a2:b7:b6:40:1c:00:93:03:8e:2f:2b:
                    6b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AE:A2:C0:10:FC:75:E8:BC:AF:ED:65:D0:7C:99:60:2D:92:58:D3
            X509v3 Authority Key Identifier:
                keyid:FE:40:8B:0A:17:CC:D1:8B:D2:CF:8D:07:B9:45:42:DD:D4:EC:D4:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2417/_kCLChfM0YvSz40HuUVC3dTs1J0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_kCLChfM0YvSz40HuUVC3dTs1J0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2417/_kCLChfM0YvSz40HuUVC3dTs1J0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:eb:4a:08:2b:a6:90:2e:68:9c:b7:c2:64:08:ed:a5:1c:60:
         8c:22:39:91:44:62:e5:34:c3:ff:db:a0:11:d2:3f:e4:9b:4b:
         33:ac:8f:f5:9d:4e:b3:49:88:11:f6:92:73:c8:59:b0:fc:ce:
         c9:d8:bc:77:e1:15:20:e5:c2:25:67:5e:68:fa:d7:dd:d6:84:
         81:63:54:38:1d:e8:28:e2:b7:7a:98:93:2f:2a:b9:3f:b6:32:
         6a:b7:3b:c2:f2:d0:6d:29:fd:0c:8d:63:40:08:26:6d:24:c6:
         a7:eb:59:84:ff:55:c4:25:2d:cf:da:67:c7:7f:eb:33:f3:15:
         ad:cf:13:ac:51:bc:eb:f7:cf:76:61:72:6c:74:b1:0e:62:fb:
         b8:7e:c2:0a:de:af:1b:8b:8c:79:c4:d1:6e:72:62:40:83:15:
         81:71:45:ec:25:ba:cb:01:ef:4e:de:7b:e2:a7:54:04:e9:e6:
         2d:a3:b5:c5:30:0d:a5:5a:e9:3a:ae:a4:dc:84:36:72:eb:b1:
         58:dd:e0:56:4a:9c:12:f6:4d:6b:d6:9b:49:57:7a:35:f5:49:
         e3:0c:d5:7a:d3:42:bd:42:76:e6:ca:e9:9c:eb:12:49:71:61:
         d5:56:a9:22:39:2b:6f:10:62:b0:d3:7b:d8:76:11:67:9e:0d:
         48:ca:ff:a5
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICD2IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkU0
MDhCMEExN0NDRDE4QkQyQ0Y4RDA3Qjk0NTQyRERENEVDRDQ5RDAeFw0yMzA0MTQw
NjU2MjBaFw0yNDAzMjcwMTEzMTBaMDMxMTAvBgNVBAMTKEFEQUVBMkMwMTBGQzc1
RThCQ0FGRUQ2NUQwN0M5OTYwMkQ5MjU4RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6jWHygsy8LnISaG3HL8QP+0xYhfBcaJMizVKGD7rshHvAoCqJ
/fZItfKMPUjB/QgUdr5sZzP5RyNtuKLi0vnOl82ViAO8QSrr2S5iOi7LoEZUeQMX
RhmCPWow9RKLBSUeZWhhwFTAMFPLoIQC2v1zI8bVl0L/bwd4oDUr2w4ugW5deo26
yl7S1QATOLbo/tQuuP4RGV64SLi5M+u3kNqgGEJRcaZ+Ty53qR/CelkB2ou4hdSe
PZ7MnxfR7KhlL0OLYo41QpMluz03J1SdTPPhtu+2H5E94e5mo5K0rhwM7iVFCGbT
PIjhxyefTSPfAPCBugeit7ZAHACTA44vK2tTAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUra6iwBD8dei8r+1l0HyZYC2SWNMwHwYDVR0jBBgwFoAU/kCLChfM0YvSz40H
uUVC3dTs1J0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQx
Ny9fa0NMQ2hmTTBZdlN6NDBIdVVWQzNkVHMxSjAuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL19rQ0xDaGZNMFl2U3o0MEh1VVZDM2RUczFKMC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI0MTcvX2tDTENoZk0wWXZT
ejQwSHVVVkMzZFRzMUowLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAAvrSggrppAuaJy3wmQI7aUcYIwiOZFEYuU0w//boBHSP+SbSzOsj/WdTrNJ
iBH2knPIWbD8zsnYvHfhFSDlwiVnXmj6193WhIFjVDgd6Cjit3qYky8quT+2Mmq3
O8Ly0G0p/QyNY0AIJm0kxqfrWYT/VcQlLc/aZ8d/6zPzFa3PE6xRvOv3z3Zhcmx0
sQ5i+7h+wgrerxuLjHnE0W5yYkCDFYFxRewlussB707ee+KnVATp5i2jtcUwDaVa
6TqupNyENnLrsVjd4FZKnBL2TWvWm0lXejX1SeMM1XrTQr1CdubK6ZzrEklxYdVW
qSI5K28QYrDTe9h2EWeeDUjK/6U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org