Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2673/-aja-D62Sb7KwTY-7r2dHk6dd0Y.mft
File:                     -aja-D62Sb7KwTY-7r2dHk6dd0Y.mft (raw, json)
Hash identifier:          LGgA96G5oWA8lOW6eiqS920aBXnEnpW3pCO0M1MJvH4=
Subject key identifier:   BC:C3:D7:B7:28:6A:4B:1E:82:13:E8:D6:2C:DA:2D:64:0B:57:D6:89
Authority key identifier: F9:A8:DA:F8:3E:B6:49:BE:CA:C1:36:3E:EE:BD:9D:1E:4E:9D:77:46
Certificate issuer:       /CN=F9A8DAF83EB649BECAC1363EEEBD9D1E4E9D7746
Certificate serial:       2373
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-aja-D62Sb7KwTY-7r2dHk6dd0Y.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2673/-aja-D62Sb7KwTY-7r2dHk6dd0Y.mft
Manifest number:          2372
Signing time:             Tue 05 Mar 2024 20:23:27 +0000
Manifest this update:     Tue 05 Mar 2024 20:23:27 +0000
Manifest next update:     Wed 06 Mar 2024 02:23:27 +0000
Files and hashes:         1: -aja-D62Sb7KwTY-7r2dHk6dd0Y.crl (hash: 4RaqgOQ5fyzCczBtJR11TyU29214SzAdF/mA2VE+kcA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9075 (0x2373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9A8DAF83EB649BECAC1363EEEBD9D1E4E9D7746
        Validity
            Not Before: Mar  5 20:23:27 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=BCC3D7B7286A4B1E8213E8D62CDA2D640B57D689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d0:b6:b3:1d:e0:ce:8c:6b:7f:a9:a6:78:c2:
                    77:19:39:a3:b2:f2:d6:92:5c:51:4e:44:44:26:27:
                    a9:a5:ec:b2:cd:68:aa:56:08:7d:ff:d3:69:9a:c9:
                    ae:26:ea:ac:5f:33:93:02:25:74:23:a9:5a:dd:c3:
                    a4:63:81:a5:33:c4:36:75:18:eb:52:6c:54:5e:95:
                    c3:c8:f2:34:c5:79:e2:af:cb:66:48:08:e8:55:12:
                    02:b5:d1:cd:32:b8:7a:4a:96:fa:d5:a2:4c:12:04:
                    85:f7:fa:df:66:ae:53:73:c5:f1:ce:f8:cc:5d:79:
                    2a:d6:66:57:59:bd:d4:4e:0e:99:d5:71:98:e1:1d:
                    94:66:70:15:f9:50:a5:4b:a8:c5:e1:bf:3f:fc:af:
                    c5:a2:ff:78:05:27:45:84:1d:5f:e4:31:f8:3e:f3:
                    d9:e2:c1:3f:58:36:e8:40:3e:aa:f1:f1:73:3b:71:
                    36:dc:a0:9a:76:ed:b3:35:55:a1:45:91:31:5a:47:
                    36:6a:9b:59:6d:9e:cc:25:65:7d:a3:ea:b2:e7:23:
                    ec:4f:c3:c6:6a:59:54:6e:cb:ee:c3:e5:58:e0:b6:
                    89:f8:f9:b7:ea:99:cb:aa:0b:04:a9:d5:a8:03:ac:
                    6e:47:98:ce:6c:f5:9a:13:61:fc:e3:7b:77:ed:5c:
                    b6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C3:D7:B7:28:6A:4B:1E:82:13:E8:D6:2C:DA:2D:64:0B:57:D6:89
            X509v3 Authority Key Identifier:
                keyid:F9:A8:DA:F8:3E:B6:49:BE:CA:C1:36:3E:EE:BD:9D:1E:4E:9D:77:46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2673/-aja-D62Sb7KwTY-7r2dHk6dd0Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-aja-D62Sb7KwTY-7r2dHk6dd0Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2673/-aja-D62Sb7KwTY-7r2dHk6dd0Y.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:aa:74:b2:39:fb:c3:85:5d:8c:f2:73:d7:44:25:c0:95:5d:
         a5:c1:36:15:21:3f:ff:8d:e5:56:a2:4b:4d:be:8d:bd:d4:65:
         69:cc:76:18:ce:42:ab:e2:3e:97:cd:a0:01:b8:22:a4:87:c5:
         5e:26:ac:bb:e6:6e:93:32:5e:ab:26:ac:71:da:d7:21:b6:60:
         bd:59:97:29:61:02:cd:99:2e:8d:c0:8d:94:8f:ed:12:f7:55:
         6a:80:01:b1:d1:74:3e:33:29:5d:d3:54:4f:2b:cb:c6:57:67:
         2e:94:93:40:6f:18:a3:2c:fa:72:a7:2f:f0:5d:ec:b6:09:db:
         fb:32:16:f8:31:c8:8d:21:22:5e:5d:13:d0:f0:34:b7:9c:d1:
         7c:86:83:68:70:c4:e4:4c:3e:2e:09:ee:79:61:df:d9:0f:d8:
         a4:b2:0c:29:64:ba:24:6f:bc:1d:2f:00:ec:21:0b:16:be:e2:
         40:ca:2a:99:79:30:b7:a5:17:5b:a2:d5:76:24:f0:cf:0d:17:
         e3:44:10:0d:09:92:1c:48:10:a6:39:3c:dc:d1:ab:f6:0d:62:
         a0:82:c2:14:87:80:0c:67:7c:de:24:e9:35:6e:77:d9:21:a9:
         79:8a:36:8c:c0:b0:2f:86:5f:35:2d:d8:8e:67:96:b1:fb:41:
         7c:0b:72:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 03:02:10 2024 by rpki-client on console-fra.rpki-client.org