Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/247/N-5b7zMzFzIVa-CyMcfQ0psA5Tc.mft
File:                     N-5b7zMzFzIVa-CyMcfQ0psA5Tc.mft (raw, json)
Hash identifier:          C+ASVcLOOP8YdppJBA8Lrx8/WAglgLre8XcgEf03Fjg=
Subject key identifier:   C6:1E:28:49:30:A6:05:2E:12:19:D6:40:B7:39:44:31:1E:72:52:B6
Authority key identifier: 37:EE:5B:EF:33:33:17:32:15:6B:E0:B2:31:C7:D0:D2:9B:00:E5:37
Certificate issuer:       /CN=37EE5BEF33331732156BE0B231C7D0D29B00E537
Certificate serial:       0A49
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/N-5b7zMzFzIVa-CyMcfQ0psA5Tc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/N-5b7zMzFzIVa-CyMcfQ0psA5Tc.mft
Manifest number:          0A3B
Signing time:             Thu 26 May 2022 19:57:07 +0000
Manifest this update:     Thu 26 May 2022 19:57:07 +0000
Manifest next update:     Fri 27 May 2022 01:57:07 +0000
Files and hashes:         1: N-5b7zMzFzIVa-CyMcfQ0psA5Tc.crl (hash: 6/dM2tY6hExD7Ep3htxkq01/6JS5UBYswwZDGqUJFUA=)
                          2: SCmUT6Wjjj5e5TYTEv0DjkNq2yU.roa (hash: DB63RaS+YTArmOJ9kHwyWqCXitWTd8d7Wiup8MOjpJs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2633 (0xa49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37EE5BEF33331732156BE0B231C7D0D29B00E537
        Validity
            Not Before: May 26 19:57:07 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=C61E284930A6052E1219D640B73944311E7252B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dc:3d:1a:62:b4:4f:82:34:66:a3:66:5f:59:
                    94:81:ff:57:74:02:e5:19:ab:95:7f:9c:11:ac:b0:
                    37:16:5a:2e:a2:2f:9e:6c:7c:44:dc:94:a1:21:31:
                    9d:23:41:99:39:ce:c9:6e:e6:5f:d0:36:b7:79:64:
                    fb:0c:1d:a4:8d:51:33:7c:f4:70:e0:b8:d1:23:17:
                    e0:8e:e7:6e:65:9a:c2:22:46:e6:93:84:bc:63:81:
                    43:ab:76:39:02:5b:b9:87:d7:72:31:8e:2e:4a:48:
                    01:62:68:48:71:1a:9a:06:04:44:a0:b9:32:0b:b7:
                    af:11:3c:0e:fc:0e:99:de:bc:ad:43:fb:dc:6f:fc:
                    b2:68:c9:f4:13:e5:0b:0f:90:59:c1:1f:99:3e:7e:
                    99:7a:83:22:2c:30:78:e5:b2:c9:35:97:0b:b8:bb:
                    01:b8:54:2d:34:a4:43:ff:10:3a:c0:bf:7c:06:4f:
                    3c:bc:cd:65:c8:95:28:55:9f:75:27:ac:4c:d5:0c:
                    98:71:74:a5:38:2b:55:0d:3b:db:b7:eb:d3:6d:ff:
                    e5:14:b6:19:13:3a:00:c4:ec:eb:d6:1d:9a:47:15:
                    cf:87:80:3d:91:2c:f4:f3:3a:fb:39:f4:9e:1b:cf:
                    33:b9:90:14:f1:6f:b5:8a:e9:94:1b:4d:f0:85:8c:
                    81:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1E:28:49:30:A6:05:2E:12:19:D6:40:B7:39:44:31:1E:72:52:B6
            X509v3 Authority Key Identifier:
                keyid:37:EE:5B:EF:33:33:17:32:15:6B:E0:B2:31:C7:D0:D2:9B:00:E5:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/N-5b7zMzFzIVa-CyMcfQ0psA5Tc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/N-5b7zMzFzIVa-CyMcfQ0psA5Tc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/N-5b7zMzFzIVa-CyMcfQ0psA5Tc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e3:40:a1:be:92:43:26:9e:2a:de:93:0c:4a:cc:ad:ce:1c:
         8c:6f:b0:14:6b:f9:62:b5:75:f3:a6:87:ae:26:fa:97:e3:20:
         6b:db:e1:01:44:9d:01:f9:7c:f1:86:9a:ee:c3:04:e2:71:30:
         bd:9c:38:1a:cf:25:f6:ad:46:b3:ff:56:ad:69:9c:f3:ff:a0:
         c4:52:01:3a:24:a0:95:e3:31:9c:fc:1f:82:15:9e:67:1d:9b:
         4e:cc:b5:29:ad:ee:2a:95:da:82:b8:dc:bc:99:7f:5f:1c:73:
         39:28:bf:bb:4b:40:1e:74:cb:1b:04:b4:ca:81:1b:7c:f7:01:
         d9:e4:4a:cc:45:46:55:be:48:31:42:4d:0b:09:e5:e6:3d:a7:
         d0:51:bb:e4:ae:e3:4f:aa:13:b1:d1:a7:9b:28:d7:6b:83:a2:
         50:3a:bf:c6:72:03:bb:c7:43:40:4c:01:e9:00:fc:5a:03:3e:
         6d:1e:9e:db:f0:8d:0c:af:d4:23:74:cf:5b:40:56:4a:5d:63:
         78:6b:a6:02:9f:ec:f2:c5:97:8f:e5:a2:f5:72:33:f8:b3:7c:
         f4:1e:8d:03:d6:f9:70:24:96:49:42:8c:3f:a4:12:26:5f:9b:
         a8:f2:d4:35:fb:6f:ae:2d:bd:c7:9b:e6:16:38:7e:a2:bd:80:
         c4:d1:7d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org