Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2440/m0nRKqAvjZP3_7p9i6uRE1Qnqco.mft
File:                     m0nRKqAvjZP3_7p9i6uRE1Qnqco.mft (raw, json)
Hash identifier:          mJweB8K4IY8OOpxYif1PQIoJZCPqlF0ii4TMEYhPyNg=
Subject key identifier:   D1:A6:2A:64:B9:55:E1:00:3B:F6:55:2F:27:0A:C2:0A:EB:47:04:C3
Authority key identifier: 9B:49:D1:2A:A0:2F:8D:93:F7:FF:BA:7D:8B:AB:91:13:54:27:A9:CA
Certificate issuer:       /CN=9B49D12AA02F8D93F7FFBA7D8BAB91135427A9CA
Certificate serial:       0AF4
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/m0nRKqAvjZP3_7p9i6uRE1Qnqco.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2440/m0nRKqAvjZP3_7p9i6uRE1Qnqco.mft
Manifest number:          0AF4
Signing time:             Thu 26 May 2022 19:57:11 +0000
Manifest this update:     Thu 26 May 2022 19:57:10 +0000
Manifest next update:     Fri 27 May 2022 01:57:10 +0000
Files and hashes:         1: m0nRKqAvjZP3_7p9i6uRE1Qnqco.crl (hash: K/5PvMdF186DAx9nec3MVbqNtoujan9irkDWNmyoKcM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2804 (0xaf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B49D12AA02F8D93F7FFBA7D8BAB91135427A9CA
        Validity
            Not Before: May 26 19:57:10 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=D1A62A64B955E1003BF6552F270AC20AEB4704C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:71:92:dc:4f:3f:e9:d2:ec:92:5a:30:ad:71:
                    63:98:f4:75:4e:0b:92:98:b7:9a:d3:26:93:a5:ca:
                    e6:29:37:d9:ad:14:42:cc:2b:e2:8f:ce:73:bb:17:
                    b9:e4:24:6c:53:e0:48:8b:81:37:42:3d:d4:1a:9e:
                    e1:6c:56:4f:ba:c2:1d:b1:88:d6:ed:94:f0:58:6a:
                    9d:a2:83:b6:18:bf:98:ca:84:95:84:b7:ac:70:26:
                    58:c9:1e:ce:4a:ed:d2:ac:fb:71:27:ed:74:01:c6:
                    1d:52:b3:1a:ac:ec:20:40:c9:64:80:0c:81:e9:64:
                    1f:af:93:38:c2:52:e5:69:b5:df:99:47:83:d8:29:
                    3a:f1:2b:a7:3d:b5:be:29:ff:6b:d7:78:87:76:21:
                    29:20:97:de:20:85:7d:c6:89:27:bb:ce:29:a2:2e:
                    1e:87:af:28:40:16:05:68:2f:f7:5b:aa:d5:6a:19:
                    e1:db:24:39:e6:5a:a4:b9:8a:8a:61:41:a4:e4:79:
                    f9:f8:be:54:87:87:5a:99:30:a1:17:03:93:fa:f8:
                    cd:36:07:e5:74:af:e8:ce:7f:39:b5:be:ae:26:55:
                    5f:ec:ad:7d:ef:66:02:44:ce:0e:e3:68:8b:2e:0d:
                    94:a7:d8:84:8a:f6:02:b6:34:39:23:23:34:fa:8d:
                    b8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A6:2A:64:B9:55:E1:00:3B:F6:55:2F:27:0A:C2:0A:EB:47:04:C3
            X509v3 Authority Key Identifier:
                keyid:9B:49:D1:2A:A0:2F:8D:93:F7:FF:BA:7D:8B:AB:91:13:54:27:A9:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2440/m0nRKqAvjZP3_7p9i6uRE1Qnqco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/m0nRKqAvjZP3_7p9i6uRE1Qnqco.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2440/m0nRKqAvjZP3_7p9i6uRE1Qnqco.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:40:c2:d0:72:3f:4f:50:2b:7d:30:44:e2:81:18:9d:14:13:
         d5:73:1b:5b:b8:02:77:96:a8:c5:03:69:4c:74:fd:0c:2d:67:
         c8:58:ca:c2:8e:c4:42:2f:ee:e7:0b:fa:0f:8d:e9:b9:af:ef:
         5b:6c:85:d9:47:37:09:e8:ad:54:69:6f:c1:c2:09:72:d9:00:
         23:86:f1:81:6b:b8:60:df:eb:06:db:05:a8:19:80:62:ac:e4:
         0a:5e:c9:c1:4b:bf:4d:e9:f0:a9:75:40:1e:34:0c:07:1a:5e:
         cf:4c:30:6f:38:1b:73:d3:36:31:c7:e8:65:da:ba:e6:69:54:
         9a:39:c5:c9:fd:a6:42:5c:3b:79:1a:6e:77:07:d8:f8:4e:69:
         6c:72:1c:bf:c1:c4:61:74:2c:ca:5d:19:b6:f7:f8:24:b5:58:
         c0:a1:2d:09:6a:3f:fb:fd:ca:f3:75:e6:ff:5f:80:f9:b2:a6:
         58:46:ff:63:02:8d:ce:eb:53:3e:d7:95:d4:3c:a1:29:2c:fc:
         46:c7:be:f8:af:fe:e5:90:87:ff:42:6f:15:88:f7:78:89:97:
         c8:1d:ac:80:a1:ed:dd:17:17:ec:52:b4:5c:c2:cd:44:f3:ac:
         b2:fc:96:9c:b1:0a:2b:ba:2f:e6:53:aa:46:86:f9:c9:3f:bd:
         d2:9b:73:df
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCvQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUI0
OUQxMkFBMDJGOEQ5M0Y3RkZCQTdEOEJBQjkxMTM1NDI3QTlDQTAeFw0yMjA1MjYx
OTU3MTBaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKEQxQTYyQTY0Qjk1NUUx
MDAzQkY2NTUyRjI3MEFDMjBBRUI0NzA0QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrcZLcTz/p0uySWjCtcWOY9HVOC5KYt5rTJpOlyuYpN9mtFELM
K+KPznO7F7nkJGxT4EiLgTdCPdQanuFsVk+6wh2xiNbtlPBYap2ig7YYv5jKhJWE
t6xwJljJHs5K7dKs+3En7XQBxh1Ssxqs7CBAyWSADIHpZB+vkzjCUuVptd+ZR4PY
KTrxK6c9tb4p/2vXeId2ISkgl94ghX3GiSe7zimiLh6HryhAFgVoL/dbqtVqGeHb
JDnmWqS5iophQaTkefn4vlSHh1qZMKEXA5P6+M02B+V0r+jOfzm1vq4mVV/srX3v
ZgJEzg7jaIsuDZSn2ISK9gK2NDkjIzT6jbgrAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU0aYqZLlV4QA79lUvJwrCCutHBMMwHwYDVR0jBBgwFoAUm0nRKqAvjZP3/7p9
i6uRE1QnqcowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQ0
MC9tMG5SS3FBdmpaUDNfN3A5aTZ1UkUxUW5xY28uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL20wblJLcUF2alpQM183cDlpNnVSRTFRbnFjby5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI0NDAvbTBuUktxQXZqWlAz
XzdwOWk2dVJFMVFucWNvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAIZAwtByP09QK30wROKBGJ0UE9VzG1u4AneWqMUDaUx0/QwtZ8hYysKOxEIv
7ucL+g+N6bmv71tshdlHNwnorVRpb8HCCXLZACOG8YFruGDf6wbbBagZgGKs5Ape
ycFLv03p8Kl1QB40DAcaXs9MMG84G3PTNjHH6GXauuZpVJo5xcn9pkJcO3kabncH
2PhOaWxyHL/BxGF0LMpdGbb3+CS1WMChLQlqP/v9yvN15v9fgPmyplhG/2MCjc7r
Uz7XldQ8oSks/EbHvviv/uWQh/9CbxWI93iJl8gdrICh7d0XF+xStFzCzUTzrLL8
lpyxCiu6L+ZTqkaG+ck/vdKbc98=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org