Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2742/q1UWELsUY6YsOYQAlUiEj3T5mPY.mft
File:                     q1UWELsUY6YsOYQAlUiEj3T5mPY.mft (raw, json)
Hash identifier:          Nkji/ZHRRlPoSIfkoqjMQcurLK4ldpjcXBqFhy5fZAE=
Subject key identifier:   01:25:09:A4:6B:D2:89:24:41:D2:4B:B3:AC:18:DC:6F:6C:D0:61:A9
Authority key identifier: AB:55:16:10:BB:14:63:A6:2C:39:84:00:95:48:84:8F:74:F9:98:F6
Certificate issuer:       /CN=AB551610BB1463A62C3984009548848F74F998F6
Certificate serial:       06DF
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q1UWELsUY6YsOYQAlUiEj3T5mPY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/q1UWELsUY6YsOYQAlUiEj3T5mPY.mft
Manifest number:          06DE
Signing time:             Thu 26 May 2022 18:59:23 +0000
Manifest this update:     Thu 26 May 2022 18:59:23 +0000
Manifest next update:     Fri 27 May 2022 00:59:23 +0000
Files and hashes:         1: R1CadH3oUhTAHhQGE6ChMHmTYpM.roa (hash: YySdw6U/p+WKyVV9WuQALnm6cAMqktXbRWbP2jdBUQ4=)
                          2: q1UWELsUY6YsOYQAlUiEj3T5mPY.crl (hash: axuckVgEiZ0yTZKxQfq4u+7cac3I+esW5Jk7qjphC+s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1759 (0x6df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB551610BB1463A62C3984009548848F74F998F6
        Validity
            Not Before: May 26 18:59:23 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=012509A46BD2892441D24BB3AC18DC6F6CD061A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:19:5b:85:4d:53:e9:9b:aa:a7:eb:e2:cf:
                    ae:f9:b3:23:ba:76:0b:53:c5:6d:41:84:43:05:85:
                    97:02:ed:9b:ea:18:e3:e0:80:9d:db:fb:75:64:32:
                    18:2a:9a:af:ec:86:8c:3e:36:73:ce:2e:ad:68:87:
                    e2:8f:80:7b:dd:e8:e7:d3:2f:75:b9:7f:1e:a4:1f:
                    0f:fd:bb:6d:4f:09:e1:b7:92:6d:40:2d:da:4c:3f:
                    11:8f:aa:39:cc:c2:8d:48:5d:b5:2e:cb:3b:a4:06:
                    92:6b:2f:1a:48:75:94:a3:86:5e:63:35:d3:ac:9e:
                    85:10:eb:12:23:9a:e2:46:e1:4c:a0:29:01:70:ea:
                    e1:cd:8c:66:e4:5a:4f:ed:2c:3e:1f:d3:72:ad:9d:
                    46:d1:6a:91:05:c6:5f:19:c6:3e:30:0e:61:77:a3:
                    ae:9f:9a:59:cb:9f:d0:b5:e5:84:fc:f7:4e:cf:56:
                    9e:38:69:9d:e1:66:ed:4d:b6:80:fa:e9:4e:ef:dd:
                    30:26:7c:fa:7b:7a:a6:68:9b:1e:8b:2b:8a:55:4b:
                    2d:5e:0b:cd:be:71:6b:17:f5:e9:3a:0b:39:d5:f4:
                    95:31:c6:c1:08:73:ad:83:24:cf:30:de:bc:ad:2c:
                    ff:6d:7d:17:a8:2d:5f:da:5e:fa:65:3f:7b:d3:3b:
                    03:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:25:09:A4:6B:D2:89:24:41:D2:4B:B3:AC:18:DC:6F:6C:D0:61:A9
            X509v3 Authority Key Identifier:
                keyid:AB:55:16:10:BB:14:63:A6:2C:39:84:00:95:48:84:8F:74:F9:98:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/q1UWELsUY6YsOYQAlUiEj3T5mPY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q1UWELsUY6YsOYQAlUiEj3T5mPY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/q1UWELsUY6YsOYQAlUiEj3T5mPY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:33:2b:08:eb:c2:08:b4:f3:c4:3d:8a:b9:47:af:fd:c0:c3:
         e7:00:86:9e:2c:dc:ad:7e:b9:fe:40:c4:92:c2:5c:8e:d7:18:
         50:48:33:f7:7f:83:b8:02:44:66:fc:0f:0f:dc:ff:ef:7b:21:
         ed:65:56:bf:2b:34:a6:83:71:7b:b7:93:5a:e8:0c:66:a6:97:
         04:1d:d0:38:05:a5:28:bb:41:24:33:7e:4e:76:3a:2b:02:76:
         26:c1:4b:31:32:95:01:d7:33:8a:61:1a:5c:61:29:e2:6a:de:
         42:90:c4:6b:be:b5:fa:a4:e5:54:54:26:de:74:f0:87:67:ac:
         55:49:b4:5e:3a:d8:02:4b:9f:6b:cd:73:5f:a5:eb:2f:19:c7:
         2f:c2:cb:4a:4f:48:76:8c:c3:91:01:86:e7:32:e4:d2:9f:f2:
         99:38:84:a6:99:45:9c:fd:72:ad:fe:49:13:91:99:36:47:63:
         9e:25:4a:00:6c:21:bb:c5:fe:0d:65:cd:c5:46:88:6e:ad:39:
         5b:c1:9a:8b:27:fc:c0:6e:44:23:ba:64:79:bf:c7:9d:26:d6:
         cf:80:f3:66:26:27:c5:7b:28:74:5c:de:34:3b:2b:23:8f:10:
         db:45:1e:ad:9d:5e:18:e2:92:54:db:92:ec:c2:da:45:ca:9f:
         14:0a:3a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:15 2023 by rpki-client on console-ams.rpki-client.org