Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2451/7N1zMsZabqPGQCPazgMgB9Tx1DQ.mft
File:                     7N1zMsZabqPGQCPazgMgB9Tx1DQ.mft (raw, json)
Hash identifier:          ttu603Moig4aSoWJk0bw5wehj8Ajl/wIfWSaAfw+5yE=
Subject key identifier:   EF:FE:78:F8:DA:8B:C7:F7:9F:E6:D9:5F:45:68:97:E0:B7:15:86:B8
Authority key identifier: EC:DD:73:32:C6:5A:6E:A3:C6:40:23:DA:CE:03:20:07:D4:F1:D4:34
Certificate issuer:       /CN=ECDD7332C65A6EA3C64023DACE032007D4F1D434
Certificate serial:       198D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7N1zMsZabqPGQCPazgMgB9Tx1DQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2451/7N1zMsZabqPGQCPazgMgB9Tx1DQ.mft
Manifest number:          198D
Signing time:             Sun 22 Sep 2024 22:48:39 +0000
Manifest this update:     Sun 22 Sep 2024 22:48:39 +0000
Manifest next update:     Mon 23 Sep 2024 04:48:39 +0000
Files and hashes:         1: 7N1zMsZabqPGQCPazgMgB9Tx1DQ.crl (hash: hNOxW0Fwe0EoX1uADRjCuvmMgRyYzD9PYhgdKEA4J74=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6541 (0x198d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECDD7332C65A6EA3C64023DACE032007D4F1D434
        Validity
            Not Before: Sep 22 22:48:39 2024 GMT
            Not After : Sep 20 07:41:26 2025 GMT
        Subject: CN=EFFE78F8DA8BC7F79FE6D95F456897E0B71586B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:0a:7b:1f:52:5d:61:d5:9f:a9:82:5f:98:
                    56:34:14:40:02:09:89:96:45:c9:59:e7:59:41:9f:
                    08:6b:07:fe:0c:4b:e1:ab:60:27:b7:6b:30:29:e3:
                    4f:3e:dc:f2:20:d3:7e:7d:5f:15:16:98:65:3c:26:
                    4b:c7:2a:bd:d0:bb:e3:0d:b4:47:64:a1:da:ad:4c:
                    df:96:62:ba:7e:f2:55:47:99:63:1e:38:66:51:27:
                    55:ac:02:18:25:7c:3c:59:e2:f5:94:a3:85:d9:7c:
                    14:99:72:d3:f3:71:06:b0:9c:24:97:cf:97:3e:ef:
                    d6:bd:c8:23:d5:48:aa:8c:5b:56:90:67:79:bf:65:
                    97:56:49:01:2f:31:dd:da:5f:9d:ab:61:d7:02:3c:
                    3c:a9:03:6c:97:7c:4c:65:8b:c9:3a:4b:4c:ca:4c:
                    db:0c:7a:0e:42:2b:8a:cf:54:7f:7c:73:f8:69:f7:
                    c9:5e:21:3e:f4:04:d9:4a:ff:8d:ee:0f:0b:3e:c2:
                    82:dd:aa:f5:82:dc:97:4d:f3:bb:ec:b2:48:b6:c5:
                    13:51:b4:b6:c3:b1:79:04:f6:84:bc:35:9d:76:d5:
                    4b:76:d5:5c:35:ec:14:eb:d7:d4:70:b7:28:7b:8a:
                    95:11:28:c5:11:7f:6b:83:f6:c8:4c:b7:f5:a9:7e:
                    79:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FE:78:F8:DA:8B:C7:F7:9F:E6:D9:5F:45:68:97:E0:B7:15:86:B8
            X509v3 Authority Key Identifier:
                keyid:EC:DD:73:32:C6:5A:6E:A3:C6:40:23:DA:CE:03:20:07:D4:F1:D4:34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2451/7N1zMsZabqPGQCPazgMgB9Tx1DQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7N1zMsZabqPGQCPazgMgB9Tx1DQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2451/7N1zMsZabqPGQCPazgMgB9Tx1DQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:2e:fa:00:f2:58:82:c3:ba:15:81:2c:73:b9:09:89:83:79:
         26:1f:bb:7d:af:39:07:c0:26:ed:38:7d:b9:bb:04:f9:9f:1b:
         36:37:9e:37:8e:7b:c8:bb:b2:43:19:9d:c9:c4:b4:b8:f9:b2:
         76:de:5f:f0:75:3c:b6:66:1d:70:ac:d0:73:f0:70:1a:77:0f:
         93:3b:ce:73:53:bd:75:5d:2f:4e:93:18:ec:e6:aa:2c:f5:24:
         77:9d:88:8a:94:b5:2c:c6:9c:ee:85:e2:1f:c4:e1:4b:84:c0:
         1b:dc:7a:61:78:7c:c6:70:c0:2c:7e:68:e0:b0:43:ea:cf:76:
         bf:e8:5b:a8:01:8b:e3:d5:d1:67:01:a3:00:b6:8b:e9:56:e2:
         b0:b3:c9:27:17:43:ff:78:02:a8:b1:01:84:07:8d:a2:8c:14:
         83:50:26:74:62:0e:d2:b3:00:a8:e3:80:cc:da:bb:b5:b0:47:
         96:ab:64:4e:50:62:ef:5b:e3:dc:78:6d:d5:52:69:d7:d8:6b:
         ba:42:d7:29:7d:5f:28:7f:46:07:75:09:5d:56:ef:7b:7c:80:
         f4:8a:94:f5:20:f8:d3:5c:ba:14:c3:06:bd:de:ad:ac:86:f8:
         dc:de:66:79:46:41:98:62:e6:c3:8e:31:e3:ed:33:18:18:6f:
         4a:dd:68:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----