Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2628/zRCwfxMXs3n2IGylsUEuLkByOpE.mft
File:                     zRCwfxMXs3n2IGylsUEuLkByOpE.mft (raw, json)
Hash identifier:          1Q0aPPcs3gDcUkqkZAf+0J1eI++bX4IXYcx5tTEc3Us=
Subject key identifier:   33:22:5E:62:89:32:DA:A4:DD:29:99:E9:B1:DF:01:06:53:A1:18:63
Authority key identifier: CD:10:B0:7F:13:17:B3:79:F6:20:6C:A5:B1:41:2E:2E:40:72:3A:91
Certificate issuer:       /CN=CD10B07F1317B379F6206CA5B1412E2E40723A91
Certificate serial:       155C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zRCwfxMXs3n2IGylsUEuLkByOpE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2628/zRCwfxMXs3n2IGylsUEuLkByOpE.mft
Manifest number:          155C
Signing time:             Mon 01 Apr 2024 02:23:39 +0000
Manifest this update:     Mon 01 Apr 2024 02:23:39 +0000
Manifest next update:     Mon 01 Apr 2024 08:23:39 +0000
Files and hashes:         1: zRCwfxMXs3n2IGylsUEuLkByOpE.crl (hash: 1E9NFWDFAlsB12nTGCI1u7WWhzJI0uzjFmHqg0Udw54=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5468 (0x155c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD10B07F1317B379F6206CA5B1412E2E40723A91
        Validity
            Not Before: Apr  1 02:23:39 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=33225E628932DAA4DD2999E9B1DF010653A11863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:60:1d:a1:d6:d0:5b:f1:ae:6d:08:1e:3e:dc:
                    6e:8e:24:48:a2:52:bd:c5:6b:4e:3f:ce:ca:3d:bf:
                    72:9b:bb:41:1f:a1:9d:e4:a4:12:38:c1:ab:0e:da:
                    0d:cb:ea:3a:f9:eb:32:02:0a:b5:8b:44:43:aa:d5:
                    d1:e4:6b:4c:ae:d4:e0:b6:f3:5f:2a:aa:f9:a3:4b:
                    f9:51:c0:49:64:c6:9e:7c:27:01:8a:5e:b3:63:e4:
                    00:76:c6:09:50:35:b7:14:00:20:b4:69:ec:0e:ef:
                    37:6f:82:4e:00:39:e9:a7:41:28:38:33:1c:68:f9:
                    67:be:59:91:28:68:aa:9b:5d:c0:06:fa:0e:19:7b:
                    e8:ca:3b:eb:b9:d8:d3:98:cd:ab:76:80:48:64:1e:
                    de:66:bc:92:f8:8f:d9:7a:8e:a6:c5:ab:9a:b7:93:
                    d4:99:4f:eb:88:50:1c:43:43:33:b6:c0:a6:02:f7:
                    cc:68:19:29:dc:ac:45:de:70:f0:7b:26:01:13:2e:
                    5f:e9:10:b6:9b:fa:0c:c8:0f:98:dd:90:c8:59:d4:
                    41:6d:80:4c:f1:18:09:1a:0d:3d:65:81:88:6a:a0:
                    5d:0f:5a:37:42:72:a1:23:d0:1a:19:20:0f:43:5b:
                    4a:52:70:05:86:59:80:60:15:df:e1:ab:76:2a:3f:
                    45:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:22:5E:62:89:32:DA:A4:DD:29:99:E9:B1:DF:01:06:53:A1:18:63
            X509v3 Authority Key Identifier:
                keyid:CD:10:B0:7F:13:17:B3:79:F6:20:6C:A5:B1:41:2E:2E:40:72:3A:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2628/zRCwfxMXs3n2IGylsUEuLkByOpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zRCwfxMXs3n2IGylsUEuLkByOpE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2628/zRCwfxMXs3n2IGylsUEuLkByOpE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:5b:28:3a:69:84:50:c4:57:22:6e:41:0f:44:5f:23:ab:86:
         45:75:3a:3f:84:05:c0:eb:01:9b:aa:20:c8:0e:39:93:98:6e:
         01:0e:48:cf:73:14:ad:14:97:00:ad:c7:1a:f8:1c:eb:90:3c:
         65:32:0e:71:3a:6b:67:7a:78:d0:1f:34:f2:b2:30:d4:07:89:
         11:dd:83:03:47:03:5e:f5:0d:0f:78:12:fd:49:3b:19:52:6a:
         75:1a:26:e1:2f:19:cc:ce:15:a3:e3:81:8b:2a:48:45:24:80:
         f1:3b:a9:ba:eb:c5:40:28:57:4f:83:58:f2:46:bd:56:42:14:
         d6:4c:90:94:ef:bf:62:00:02:94:97:81:d1:fc:67:46:9d:db:
         15:2c:21:cc:eb:d4:3c:38:f6:6a:13:5a:de:f1:66:41:cf:e0:
         66:91:d8:34:99:d5:09:a7:59:c4:50:1c:96:a5:46:7a:e0:df:
         8c:6c:33:ea:5a:6b:48:36:66:21:a0:56:7a:51:11:70:ae:05:
         56:2a:73:49:ac:23:8e:3c:41:0c:db:0d:22:46:c0:b7:9f:61:
         f0:f8:6b:dc:1d:dd:5f:ab:87:18:27:d6:15:8a:97:95:36:dd:
         1a:97:ac:5e:ba:4f:63:c6:b4:4f:50:d6:0f:cc:ad:90:85:5c:
         5b:80:b3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 08:19:45 2024 by rpki-client on console-ams.rpki-client.org