Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/X8Yn72E05KBOcygAO7Ky9qcZZXk.mft
File:                     X8Yn72E05KBOcygAO7Ky9qcZZXk.mft (raw, json)
Hash identifier:          SEMJ11Q3UDXtW5VpUm+6sWNGnqhy+fq2eauANT5bNdc=
Subject key identifier:   C6:F5:23:7B:4F:90:2E:D8:4C:E4:D9:4C:4E:AA:EC:FB:33:F0:67:94
Authority key identifier: 5F:C6:27:EF:61:34:E4:A0:4E:73:28:00:3B:B2:B2:F6:A7:19:65:79
Certificate issuer:       /CN=5FC627EF6134E4A04E7328003BB2B2F6A7196579
Certificate serial:       0E21
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/X8Yn72E05KBOcygAO7Ky9qcZZXk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/X8Yn72E05KBOcygAO7Ky9qcZZXk.mft
Manifest number:          0DC9
Signing time:             Thu 26 May 2022 19:26:52 +0000
Manifest this update:     Thu 26 May 2022 19:26:52 +0000
Manifest next update:     Fri 27 May 2022 01:26:52 +0000
Files and hashes:         1: Sy6lQrfFxkbnJyYinQo8qqZHLNw.roa (hash: raCy9IPGl3PYapmLefyWYKI3drvhsxZD1JZHsiiYoJs=)
                          2: X8Yn72E05KBOcygAO7Ky9qcZZXk.crl (hash: roQAj+QVPuUp1Ut+ScXmNR0BcoNwwWr9i8YOl5+nCg0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3617 (0xe21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC627EF6134E4A04E7328003BB2B2F6A7196579
        Validity
            Not Before: May 26 19:26:52 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=C6F5237B4F902ED84CE4D94C4EAAECFB33F06794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:13:1d:ab:a0:e1:7f:ce:f6:e6:6d:4e:6e:
                    44:70:d1:06:f6:3f:b8:d3:03:73:b4:b8:ac:22:40:
                    59:1e:57:1d:1d:2d:be:bf:68:ea:82:6c:20:29:fe:
                    c2:fa:c7:48:21:2c:19:26:ce:32:3f:d0:18:68:cd:
                    90:6c:c3:c4:c1:65:1d:47:cf:3f:81:69:ea:7b:64:
                    b4:ff:78:a1:ed:7f:bb:7e:de:24:f7:41:5c:b7:de:
                    ce:bf:3e:ac:56:86:84:7a:fa:cb:2f:ec:6e:50:05:
                    a3:7f:60:b9:98:17:fe:95:8f:16:12:9e:3f:8b:18:
                    78:35:5d:16:8b:72:f9:18:00:d6:df:8f:25:1f:0d:
                    03:3e:e1:d7:7b:0e:2f:ca:62:84:62:41:a2:d4:66:
                    cb:97:c6:64:a6:0e:7f:de:bd:24:b7:8a:aa:19:e6:
                    95:d2:d1:37:ea:19:7b:38:76:ef:c7:d5:ac:83:0e:
                    ee:46:93:84:a4:f7:c6:9a:9f:9f:37:18:8f:28:81:
                    d7:4d:88:cf:a1:5b:cf:75:4c:49:36:a8:f9:11:bb:
                    9a:27:ff:ab:da:1f:91:43:fc:25:7f:16:68:8a:64:
                    f8:47:5e:ec:19:b5:45:a4:59:23:b0:74:b4:06:ce:
                    f7:99:4c:f1:d4:ea:7b:56:f0:a2:eb:0c:a1:e0:13:
                    26:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F5:23:7B:4F:90:2E:D8:4C:E4:D9:4C:4E:AA:EC:FB:33:F0:67:94
            X509v3 Authority Key Identifier:
                keyid:5F:C6:27:EF:61:34:E4:A0:4E:73:28:00:3B:B2:B2:F6:A7:19:65:79

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/X8Yn72E05KBOcygAO7Ky9qcZZXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/X8Yn72E05KBOcygAO7Ky9qcZZXk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/X8Yn72E05KBOcygAO7Ky9qcZZXk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:6a:b6:b0:1b:4e:b8:6a:27:7a:3a:c9:b9:5f:28:4d:0c:7b:
         71:a7:9f:9f:29:38:0f:61:98:09:1b:14:ac:d5:ad:95:a7:98:
         01:cd:bf:43:a5:02:8b:f3:d7:6f:0c:10:39:2b:dc:d1:d4:97:
         1f:0e:46:57:a4:52:ea:65:88:a4:e8:be:7c:37:85:11:26:23:
         74:be:46:8a:e9:f5:54:4c:5d:9a:4d:e6:18:41:ef:55:63:26:
         7f:a9:22:fc:94:c7:66:02:cd:f9:27:0d:eb:fb:9c:c9:fe:ac:
         4c:62:95:e9:e3:ff:f0:c0:31:37:32:31:cb:2a:e5:32:d8:02:
         60:99:6a:02:d8:e9:4f:e6:05:aa:6d:3b:c1:70:a4:49:a1:86:
         7b:50:3b:c6:f0:aa:ae:95:46:03:dc:ac:8e:b7:4b:06:77:5c:
         bf:a5:a8:8d:10:2b:ae:4e:17:ad:ec:14:be:48:ff:ad:74:50:
         ba:0e:a9:57:d5:96:55:f1:a6:f5:f4:09:9a:f3:66:57:3b:10:
         f6:04:18:bf:2a:63:7d:8b:e1:33:43:f2:0a:81:b0:68:da:3b:
         60:ea:91:f4:87:3a:e1:51:26:20:fd:3a:b1:8c:ae:38:35:fe:
         26:06:18:c2:91:b4:e3:f0:6a:30:23:73:09:46:4a:a8:95:45:
         db:90:0a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org