Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2453/rZ7Oo5f8QX6Xvd6sYYO2W2BSZTA.mft
File:                     rZ7Oo5f8QX6Xvd6sYYO2W2BSZTA.mft (raw, json)
Hash identifier:          lVGmxraEn/7W+v6i/dSIcOkHb6nLhZIV9rB46Tdcmzo=
Subject key identifier:   4B:0C:53:53:2B:5F:6B:B0:E0:E3:1C:34:60:2F:37:9A:A5:C9:8A:4E
Authority key identifier: AD:9E:CE:A3:97:FC:41:7E:97:BD:DE:AC:61:83:B6:5B:60:52:65:30
Certificate issuer:       /CN=AD9ECEA397FC417E97BDDEAC6183B65B60526530
Certificate serial:       3A06
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rZ7Oo5f8QX6Xvd6sYYO2W2BSZTA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2453/rZ7Oo5f8QX6Xvd6sYYO2W2BSZTA.mft
Manifest number:          3A06
Signing time:             Thu 26 May 2022 18:56:39 +0000
Manifest this update:     Thu 26 May 2022 18:56:39 +0000
Manifest next update:     Fri 27 May 2022 00:56:39 +0000
Files and hashes:         1: rZ7Oo5f8QX6Xvd6sYYO2W2BSZTA.crl (hash: hLylQhzYM8xjpxt6bhZW48Alg3wSLyYQMr5uGWeq/cU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14854 (0x3a06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD9ECEA397FC417E97BDDEAC6183B65B60526530
        Validity
            Not Before: May 26 18:56:39 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=4B0C53532B5F6BB0E0E31C34602F379AA5C98A4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ee:e7:95:0d:0c:67:5d:4b:27:4b:69:a3:72:
                    6d:7e:e6:0a:bb:eb:08:72:3e:7c:8e:84:55:10:d0:
                    6f:e4:55:26:99:14:23:d3:9e:d4:9e:a9:6f:dd:36:
                    43:1c:2d:81:b9:90:76:03:cb:89:5b:45:88:17:e6:
                    73:2c:af:8a:cc:8e:bf:cc:f7:f8:49:15:2b:08:76:
                    31:d2:fb:9f:45:76:84:ae:32:c2:1e:97:45:d6:05:
                    dd:a4:e1:c3:8d:98:7c:4e:d6:5d:bc:43:aa:cc:ed:
                    ee:5c:4c:2e:40:23:d7:34:ee:35:93:26:39:ca:d2:
                    70:36:3e:5c:12:7a:8e:2e:3b:ce:5b:19:11:eb:22:
                    9b:86:a1:59:91:25:2c:cb:9c:15:f0:87:e6:dc:54:
                    c6:b4:c0:d0:66:3b:34:56:81:4f:86:42:de:6d:cf:
                    76:85:d9:2e:38:02:e5:a5:12:6a:18:f8:9f:97:62:
                    aa:28:8e:c9:7f:f4:d5:69:b7:19:47:00:ef:7a:c4:
                    11:cf:bd:26:9e:51:ef:59:e1:81:6c:12:fd:b1:f9:
                    2b:20:a1:f8:92:26:9e:6b:c8:0d:c8:a6:58:c9:f1:
                    10:0d:a9:b6:f7:22:28:c6:44:ea:12:4f:d4:29:33:
                    ad:3b:fa:e2:92:a9:2d:7c:c1:7f:1d:7e:09:87:e1:
                    1d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0C:53:53:2B:5F:6B:B0:E0:E3:1C:34:60:2F:37:9A:A5:C9:8A:4E
            X509v3 Authority Key Identifier:
                keyid:AD:9E:CE:A3:97:FC:41:7E:97:BD:DE:AC:61:83:B6:5B:60:52:65:30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2453/rZ7Oo5f8QX6Xvd6sYYO2W2BSZTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rZ7Oo5f8QX6Xvd6sYYO2W2BSZTA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2453/rZ7Oo5f8QX6Xvd6sYYO2W2BSZTA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:18:6d:3b:3d:0c:15:35:f4:5a:5f:4c:c5:99:a7:1a:5b:e3:
         a0:92:35:7d:15:da:5e:4e:d5:17:6b:28:a1:68:36:4a:af:63:
         a1:73:ca:c9:4f:44:2e:3d:6d:bd:57:32:05:a5:29:f6:09:2b:
         59:07:46:05:29:9a:f5:49:12:df:96:39:66:d0:10:ad:69:80:
         91:41:03:5b:79:ad:d5:6c:35:f0:ad:be:58:5a:92:37:32:42:
         74:57:24:dc:c5:e1:ba:3f:16:2f:c7:81:44:33:33:f0:e4:59:
         7f:60:7d:f8:37:4a:7c:84:b8:bc:b3:59:2f:56:26:4c:05:32:
         8f:69:97:03:96:13:33:fd:78:b4:36:b2:44:88:63:1b:d3:5e:
         0c:50:22:bb:91:ec:98:93:08:e5:3e:d2:b2:de:1c:ae:ee:82:
         69:27:e8:b2:df:a9:84:3f:1c:03:20:09:5b:fe:34:27:9a:4c:
         6e:64:4f:1c:c7:71:32:94:c3:d2:b5:84:b8:cd:5b:0f:20:21:
         87:58:be:2f:10:7d:40:2f:74:6d:b3:90:32:13:fe:df:50:47:
         d0:65:d2:8d:8f:50:3c:e3:14:34:4e:06:30:8c:2c:f1:c1:fe:
         7c:55:ce:72:68:2d:c3:00:ac:88:5c:57:ed:6c:3e:69:66:0a:
         c7:20:ef:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org