Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2440/b7gWWRuMQtxBeBIIfH5EL7ILEOk.mft
File:                     b7gWWRuMQtxBeBIIfH5EL7ILEOk.mft (raw, json)
Hash identifier:          dsjXv1js8s1gWDQ/ocr7t7tS+ywBk4RfZarOtDq/GJs=
Subject key identifier:   DE:23:F3:9A:AF:64:BE:5B:E6:18:3F:22:A1:D8:1D:AB:F7:2C:52:39
Authority key identifier: 6F:B8:16:59:1B:8C:42:DC:41:78:12:08:7C:7E:44:2F:B2:0B:10:E9
Certificate issuer:       /CN=6FB816591B8C42DC417812087C7E442FB20B10E9
Certificate serial:       0F9F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b7gWWRuMQtxBeBIIfH5EL7ILEOk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2440/b7gWWRuMQtxBeBIIfH5EL7ILEOk.mft
Manifest number:          0F9F
Signing time:             Sun 20 Nov 2022 16:03:53 +0000
Manifest this update:     Sun 20 Nov 2022 16:03:53 +0000
Manifest next update:     Sun 20 Nov 2022 22:03:53 +0000
Files and hashes:         1: b7gWWRuMQtxBeBIIfH5EL7ILEOk.crl (hash: 3QaTo48kYex6pv/TAcFrGiQjux6h5NjtHj6lOhGGvGY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3999 (0xf9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FB816591B8C42DC417812087C7E442FB20B10E9
        Validity
            Not Before: Nov 20 16:03:53 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=DE23F39AAF64BE5BE6183F22A1D81DABF72C5239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:52:a0:a7:35:3c:ce:dc:54:6c:57:f2:82:90:
                    ea:cb:0d:95:63:ed:e9:19:8d:d0:3c:79:22:35:5e:
                    b0:ea:d4:a2:47:c6:38:7b:b4:94:d3:58:f1:e0:c7:
                    27:0f:8c:a6:e9:7a:31:06:d0:af:44:e0:67:93:73:
                    1d:0a:73:fc:19:ef:e4:f0:e9:b8:1d:ee:f2:6e:5a:
                    57:0c:bd:5e:aa:dc:c5:90:76:5d:ec:fd:f1:08:73:
                    7b:8c:77:52:c3:b1:8f:ae:ac:02:c2:91:65:0b:09:
                    31:0d:ad:ff:72:0c:5e:1e:ca:c6:30:61:47:60:87:
                    07:37:3e:c9:96:51:82:47:d4:49:d4:c7:dd:71:e5:
                    f8:9e:eb:a7:84:26:58:83:44:fd:86:39:c1:13:6d:
                    bd:c3:17:eb:1e:bd:23:2a:dc:9e:95:51:ca:42:f4:
                    8c:a7:9b:c3:51:a6:c3:f1:ba:f7:94:f9:ff:68:d8:
                    4a:f1:bd:24:9a:ff:e3:8b:23:f9:77:8c:60:4e:a7:
                    51:19:b8:cd:e6:08:8f:77:06:d5:23:8c:fb:19:3e:
                    e5:d7:d6:bc:e1:c8:2f:be:12:8b:f3:5b:31:dd:ee:
                    bd:ae:10:33:65:9c:28:68:ca:b2:25:88:a5:b1:68:
                    56:4e:b9:24:c5:7a:b4:47:22:28:14:e1:16:13:b4:
                    f3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:23:F3:9A:AF:64:BE:5B:E6:18:3F:22:A1:D8:1D:AB:F7:2C:52:39
            X509v3 Authority Key Identifier:
                keyid:6F:B8:16:59:1B:8C:42:DC:41:78:12:08:7C:7E:44:2F:B2:0B:10:E9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2440/b7gWWRuMQtxBeBIIfH5EL7ILEOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b7gWWRuMQtxBeBIIfH5EL7ILEOk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2440/b7gWWRuMQtxBeBIIfH5EL7ILEOk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:8d:ec:60:9a:fc:b9:a1:d1:eb:a1:3e:2e:a7:db:aa:0b:6a:
         14:e8:29:8a:ba:1c:6a:75:16:74:21:d2:53:17:39:55:69:d3:
         57:ed:bf:e4:92:04:9f:96:96:ff:a5:f8:a6:c4:de:8f:02:ef:
         6f:a0:a6:ca:e6:10:a0:f2:6e:77:8f:a0:e5:12:18:32:ea:53:
         d0:e3:6c:2f:2e:d4:cf:a0:9f:09:38:ff:1e:e5:b8:b4:51:82:
         7f:c5:be:48:6f:85:0c:62:1e:9d:3e:b9:24:51:94:a9:77:00:
         e8:c1:9c:82:0f:01:da:34:68:2e:ef:cf:b1:11:69:2a:65:7b:
         7b:c9:5e:ff:71:3c:be:0a:e8:f1:8b:1d:36:c9:99:e9:1a:98:
         78:5b:04:2d:ee:e4:a2:b6:a0:5f:81:74:51:b8:55:bf:9f:48:
         81:f5:e0:b4:97:c6:8b:ee:e4:dc:8b:de:36:60:89:a8:a8:48:
         de:b9:69:3c:9b:73:d5:be:6a:86:03:a6:6b:55:58:3a:cc:b2:
         0b:43:c9:fa:86:7d:f9:57:ea:e7:34:d6:33:c9:86:bc:0d:bb:
         29:2f:da:d8:5d:c9:89:cc:bf:b3:65:1d:7d:7a:f0:65:3b:87:
         1f:04:e3:aa:f1:b9:eb:fd:4a:97:f6:5d:82:3f:3d:e6:c2:1c:
         7f:23:fd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org