Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2637/TUmhdlzmh5ONu1ZWPf2c_atzx6k.mft
File:                     TUmhdlzmh5ONu1ZWPf2c_atzx6k.mft (raw, json)
Hash identifier:          gBhCfxk0ysQJWiLP7kxC6CS/dMKajLh4BO8eobOZbAE=
Subject key identifier:   05:3B:78:B4:FC:63:CF:4F:CE:3F:D9:31:88:5D:1B:55:A7:A3:A9:7A
Authority key identifier: 4D:49:A1:76:5C:E6:87:93:8D:BB:56:56:3D:FD:9C:FD:AB:73:C7:A9
Certificate issuer:       /CN=4D49A1765CE687938DBB56563DFD9CFDAB73C7A9
Certificate serial:       12A4
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TUmhdlzmh5ONu1ZWPf2c_atzx6k.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2637/TUmhdlzmh5ONu1ZWPf2c_atzx6k.mft
Manifest number:          12A4
Signing time:             Mon 13 Nov 2023 04:17:06 +0000
Manifest this update:     Mon 13 Nov 2023 04:17:06 +0000
Manifest next update:     Mon 13 Nov 2023 10:17:06 +0000
Files and hashes:         1: TUmhdlzmh5ONu1ZWPf2c_atzx6k.crl (hash: BI4W8PmB/6wg5ZCFHIdmx6cxuJ9U2blCMggzwp4sdYw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4772 (0x12a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D49A1765CE687938DBB56563DFD9CFDAB73C7A9
        Validity
            Not Before: Nov 13 04:17:06 2023 GMT
            Not After : Oct  8 00:16:33 2024 GMT
        Subject: CN=053B78B4FC63CF4FCE3FD931885D1B55A7A3A97A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:63:fb:52:cf:b9:12:a5:aa:ee:ce:08:75:d1:
                    da:45:3a:33:4b:e8:ae:78:3c:ba:65:e7:7c:f8:c5:
                    85:b7:4c:16:80:74:f3:84:e2:f3:f7:f9:e9:51:7e:
                    79:98:8a:3d:44:07:02:39:c9:3a:b9:04:bc:59:d2:
                    4a:e9:4c:fc:27:bf:40:0e:cc:3d:ef:47:2f:ce:35:
                    cc:7b:f4:46:84:41:ed:ac:f2:29:39:af:6a:3a:c8:
                    23:3b:6b:ed:07:fa:a6:22:94:07:a4:54:8d:df:71:
                    33:bb:27:57:ed:71:2b:24:ca:d4:be:3a:98:af:75:
                    fd:72:66:10:a9:5b:d2:1f:40:6d:b2:61:a3:0f:a5:
                    19:47:88:3b:01:29:d4:43:e4:b9:9e:0c:e7:55:c0:
                    6f:d9:3d:b2:95:b9:32:cb:d6:3c:3b:16:c2:7c:51:
                    c5:ba:ab:a7:9e:76:16:e0:45:5e:ce:e2:e8:4c:cc:
                    b0:15:03:0c:1e:ea:70:70:21:d6:3c:21:e8:f0:5c:
                    73:a1:a4:0f:13:5c:9b:5e:d5:80:31:12:82:ed:df:
                    90:80:a1:24:a0:aa:50:b7:d8:9c:20:fd:f7:0e:c7:
                    b6:16:ff:52:17:a3:93:9e:40:d3:98:2a:36:ef:b3:
                    eb:55:5a:6b:35:4d:26:d8:a8:d1:88:6c:00:d4:b5:
                    e7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3B:78:B4:FC:63:CF:4F:CE:3F:D9:31:88:5D:1B:55:A7:A3:A9:7A
            X509v3 Authority Key Identifier:
                keyid:4D:49:A1:76:5C:E6:87:93:8D:BB:56:56:3D:FD:9C:FD:AB:73:C7:A9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2637/TUmhdlzmh5ONu1ZWPf2c_atzx6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TUmhdlzmh5ONu1ZWPf2c_atzx6k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2637/TUmhdlzmh5ONu1ZWPf2c_atzx6k.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a9:c1:85:75:41:25:64:fe:22:2a:a3:87:b8:1c:dc:c3:05:
         5f:69:a4:22:da:d0:5c:a3:62:06:22:c3:1d:c4:7c:68:13:f3:
         43:83:f4:0c:a3:3f:c5:46:26:1d:a8:f9:d1:32:46:c3:b8:e4:
         92:35:55:bc:0f:36:e0:af:80:98:9a:e4:c8:c2:77:78:58:af:
         eb:0d:7f:69:fb:7d:3a:41:4e:ea:45:4d:56:56:8d:cb:bf:fe:
         00:7c:a4:a7:04:98:35:dd:34:55:6b:55:f1:cf:be:de:7b:61:
         18:c3:c7:90:c1:02:a0:14:7b:51:a8:13:1a:c9:3a:95:d9:41:
         71:cd:82:72:3d:cb:2e:b3:98:f4:e6:4d:66:02:4d:0d:90:dd:
         d2:98:69:b0:ce:08:55:ef:2d:69:9b:b0:c1:40:94:be:da:42:
         77:26:83:69:c1:bf:87:3d:89:18:d6:f3:12:60:fd:a0:69:1f:
         fd:8c:f5:37:97:b0:d3:39:45:82:99:41:37:94:86:96:f1:d1:
         5f:2c:75:3d:ba:d3:13:bb:38:ac:9e:b6:2e:f9:68:93:93:e8:
         ba:90:c1:8a:73:f2:3f:e3:64:43:46:2e:bf:1a:c3:c1:4d:90:
         28:b7:eb:1e:96:a0:3b:d7:54:59:47:bc:48:39:d3:23:41:d6:
         72:c1:c3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 13 06:53:15 2023 by rpki-client on console-ams.rpki-client.org