Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2646/RJpQT3nXJOzx6WVmF_zt18KosAk.mft
File:                     RJpQT3nXJOzx6WVmF_zt18KosAk.mft (raw, json)
Hash identifier:          9yg+aLKWdcGzoOclWUulnCyMjb5+h0Gl0BrDXITF2hs=
Subject key identifier:   4E:56:EA:C8:D3:3B:41:46:90:3F:34:AB:54:91:55:98:13:20:A0:1C
Authority key identifier: 44:9A:50:4F:79:D7:24:EC:F1:E9:65:66:17:FC:ED:D7:C2:A8:B0:09
Certificate issuer:       /CN=449A504F79D724ECF1E9656617FCEDD7C2A8B009
Certificate serial:       095E
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RJpQT3nXJOzx6WVmF_zt18KosAk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2646/RJpQT3nXJOzx6WVmF_zt18KosAk.mft
Manifest number:          095E
Signing time:             Mon 08 Jan 2024 23:19:52 +0000
Manifest this update:     Mon 08 Jan 2024 23:19:52 +0000
Manifest next update:     Tue 09 Jan 2024 05:19:52 +0000
Files and hashes:         1: RJpQT3nXJOzx6WVmF_zt18KosAk.crl (hash: ZqHcPWalhpVvi21NNPLfxj/aeKXt1fluMXALelfv1I8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2398 (0x95e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=449A504F79D724ECF1E9656617FCEDD7C2A8B009
        Validity
            Not Before: Jan  8 23:19:52 2024 GMT
            Not After : Oct  8 00:16:33 2024 GMT
        Subject: CN=4E56EAC8D33B4146903F34AB549155981320A01C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c1:d8:83:0f:f4:df:7b:ad:88:44:0b:40:f9:
                    bf:5e:09:87:b5:28:5a:0c:34:3a:b8:06:a6:41:af:
                    70:da:c5:81:12:93:1f:c6:d6:23:0f:cc:d0:b1:30:
                    aa:da:69:e7:fb:37:86:33:ff:9e:5e:05:db:b8:70:
                    61:d4:07:43:53:45:8f:27:ee:f9:65:87:a7:09:23:
                    41:2d:90:2c:90:2b:8d:71:a0:5b:b5:fb:ad:d7:0d:
                    73:fc:9d:d7:1a:a0:6e:2c:a0:65:06:9c:f8:26:9d:
                    77:91:07:06:25:f3:5e:01:60:d2:48:cf:53:a5:df:
                    1f:55:b6:8d:dc:d6:6f:fc:5e:95:a9:8e:f9:ba:35:
                    07:8f:e4:f4:cb:a6:49:f3:78:02:bc:b1:32:97:f2:
                    52:96:60:f2:a9:e8:8a:1a:01:04:87:9e:7d:a4:bf:
                    9f:ca:3a:66:80:87:51:62:cc:48:52:a8:48:c7:5a:
                    86:e9:5b:3a:88:56:bd:00:e3:cf:4a:c6:3e:70:d2:
                    dd:b5:16:dc:ec:bc:c9:66:79:a3:1d:59:b7:f4:9a:
                    c4:5a:92:70:dc:57:a6:9c:96:09:6c:88:c2:84:4f:
                    cf:3a:1b:6b:f5:f3:9f:da:44:c1:9f:13:91:8d:ea:
                    b5:bf:66:cf:6b:c9:42:75:3f:f5:b9:f6:51:73:90:
                    96:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:56:EA:C8:D3:3B:41:46:90:3F:34:AB:54:91:55:98:13:20:A0:1C
            X509v3 Authority Key Identifier:
                keyid:44:9A:50:4F:79:D7:24:EC:F1:E9:65:66:17:FC:ED:D7:C2:A8:B0:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2646/RJpQT3nXJOzx6WVmF_zt18KosAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RJpQT3nXJOzx6WVmF_zt18KosAk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2646/RJpQT3nXJOzx6WVmF_zt18KosAk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:b4:08:70:45:96:67:6c:83:44:70:28:4b:04:b6:45:c2:fd:
         c2:2c:88:6b:ee:61:f9:dc:3d:2a:67:39:1a:52:32:6b:d3:cd:
         5d:b1:fe:26:03:d1:24:62:6a:a7:37:96:9c:c9:9e:ff:3c:98:
         ca:8d:e2:6b:b1:2c:6b:f9:da:fd:fb:c0:6b:1c:c9:a4:40:8b:
         7f:14:c9:fd:cc:52:48:69:ee:b7:5c:5e:9e:16:46:cd:e3:0f:
         4e:56:c8:b6:c9:ed:03:7f:93:4a:1f:a9:b3:1e:34:28:d4:c3:
         22:76:5e:b8:a7:de:c5:85:92:b1:21:6e:cd:f7:b9:74:14:7f:
         78:05:81:3e:d9:3a:2a:bc:2b:73:c2:5e:bb:4d:4d:6c:f5:12:
         47:cf:ad:33:c9:a5:d3:ea:75:83:57:d0:a4:a2:5d:06:b5:4c:
         70:c8:77:52:e0:c5:dc:e1:56:30:79:9a:81:12:49:5f:e9:c6:
         f7:ee:b9:01:b5:1e:a4:d0:d0:52:0a:d2:e1:2b:1e:0a:de:86:
         06:ca:ad:c7:61:05:3a:0d:a4:08:b7:17:84:a2:7f:c5:85:c8:
         0c:a9:ad:cd:7a:46:25:1a:ff:70:5b:d9:77:3b:d1:53:c8:66:
         78:4e:86:51:17:85:c9:67:6d:21:3d:de:72:1c:6c:5e:5b:71:
         aa:57:5a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 06:03:18 2024 by rpki-client on console-fra.rpki-client.org