Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2764/fGB6Q9NZ27uFmakg2TJLq7x-NAE.mft
File:                     fGB6Q9NZ27uFmakg2TJLq7x-NAE.mft (raw, json)
Hash identifier:          rUUX6K7jfefD2xj3Qrn+NypT0GRIbXpLuyKs4sPAo1U=
Subject key identifier:   87:BF:59:07:71:35:0A:14:75:D9:75:C4:B7:D0:97:E9:82:44:C5:D4
Authority key identifier: 7C:60:7A:43:D3:59:DB:BB:85:99:A9:20:D9:32:4B:AB:BC:7E:34:01
Certificate issuer:       /CN=7C607A43D359DBBB8599A920D9324BABBC7E3401
Certificate serial:       13D3
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fGB6Q9NZ27uFmakg2TJLq7x-NAE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2764/fGB6Q9NZ27uFmakg2TJLq7x-NAE.mft
Manifest number:          13D3
Signing time:             Sun 14 Jan 2024 21:50:28 +0000
Manifest this update:     Sun 14 Jan 2024 21:50:28 +0000
Manifest next update:     Mon 15 Jan 2024 03:50:28 +0000
Files and hashes:         1: fGB6Q9NZ27uFmakg2TJLq7x-NAE.crl (hash: jjJnRDwzo0lCuTkhHSBFjBp8P971IvJpdF+RBHDtmZM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5075 (0x13d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C607A43D359DBBB8599A920D9324BABBC7E3401
        Validity
            Not Before: Jan 14 21:50:28 2024 GMT
            Not After : Oct  8 00:16:33 2024 GMT
        Subject: CN=87BF590771350A1475D975C4B7D097E98244C5D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:36:44:a8:00:07:5e:76:ae:2d:22:7b:61:90:
                    be:b9:0c:b0:bf:29:5e:a6:b4:5d:42:61:05:ab:9f:
                    68:21:40:a8:a3:b7:8b:b6:c2:0b:64:fb:fc:fa:3c:
                    18:ef:a2:6a:c6:41:f1:41:41:f8:ff:3b:8f:ac:d0:
                    b0:06:41:7f:63:28:05:9f:d3:79:d5:34:0e:2e:8f:
                    d6:8b:2f:92:18:75:c1:87:af:ca:c1:c4:9a:8d:c0:
                    83:00:72:78:9d:e4:b8:eb:f5:5a:fd:ca:21:e2:b6:
                    b4:54:f3:fd:46:c0:64:7d:0c:b2:ea:69:02:56:3f:
                    66:f4:1d:19:20:39:9a:75:b7:60:ff:e1:0b:8a:8b:
                    7e:f1:75:26:b2:30:b4:5a:39:34:12:4c:9b:50:b2:
                    63:c6:e6:c6:99:f6:67:f7:aa:04:43:70:c4:cb:e7:
                    01:a6:97:da:df:99:94:46:57:45:07:37:22:35:d7:
                    69:fd:d2:cb:13:eb:be:c4:c0:4d:5c:46:4d:b3:55:
                    be:f1:25:6a:1b:a9:05:ab:a1:31:d0:02:b4:32:3e:
                    68:1f:4d:9b:c5:04:f9:60:b1:0c:57:9c:0c:90:6d:
                    f6:c2:b9:07:75:9e:8b:67:ca:6f:20:9f:dc:3e:a4:
                    fa:1c:e2:81:04:52:b4:70:9e:d5:f7:53:3b:7c:b2:
                    82:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BF:59:07:71:35:0A:14:75:D9:75:C4:B7:D0:97:E9:82:44:C5:D4
            X509v3 Authority Key Identifier:
                keyid:7C:60:7A:43:D3:59:DB:BB:85:99:A9:20:D9:32:4B:AB:BC:7E:34:01

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2764/fGB6Q9NZ27uFmakg2TJLq7x-NAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fGB6Q9NZ27uFmakg2TJLq7x-NAE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2764/fGB6Q9NZ27uFmakg2TJLq7x-NAE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ac:67:35:a2:20:b1:04:0a:79:44:de:a9:a7:a2:c1:90:ab:
         26:38:d5:fd:8e:3b:67:6b:95:54:5f:38:a9:06:db:a5:a2:40:
         88:f8:b9:55:2c:35:e4:18:06:5b:ae:c5:db:f6:48:1d:05:c7:
         72:27:a6:a1:60:ef:d0:c6:a9:7e:b3:16:01:13:16:d6:92:2f:
         08:32:54:3c:32:c8:ca:51:06:7f:96:a9:fc:bc:82:c7:eb:11:
         d1:88:79:db:13:a8:6a:4b:d9:66:d2:e9:42:67:4d:62:55:8a:
         f1:c1:1c:4c:ad:86:23:f1:1e:3f:b1:55:21:e5:f8:80:50:7e:
         e2:5a:7e:6e:55:49:37:ee:b8:fa:dc:53:f0:1c:77:ea:f7:88:
         d1:05:0e:62:49:2a:86:4c:2a:d9:cd:b3:c6:15:2d:28:fa:10:
         43:c9:54:a6:d0:50:9d:15:13:12:98:c9:a1:22:d9:be:2c:e2:
         d5:7d:d8:6a:d3:3b:ae:f0:f6:f0:8e:49:25:1b:11:21:6b:90:
         ae:06:92:ea:c0:e8:08:49:d5:07:ef:bf:3c:67:ca:65:22:13:
         91:4a:77:78:83:5f:11:53:91:e1:53:5b:f0:51:a9:78:90:af:
         74:cc:c9:4b:45:4a:d9:33:14:30:4b:27:08:d5:cb:5b:5a:cf:
         b3:6b:17:21
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICE9MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0M2
MDdBNDNEMzU5REJCQjg1OTlBOTIwRDkzMjRCQUJCQzdFMzQwMTAeFw0yNDAxMTQy
MTUwMjhaFw0yNDEwMDgwMDE2MzNaMDMxMTAvBgNVBAMTKDg3QkY1OTA3NzEzNTBB
MTQ3NUQ5NzVDNEI3RDA5N0U5ODI0NEM1RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKNkSoAAdedq4tInthkL65DLC/KV6mtF1CYQWrn2ghQKijt4u2
wgtk+/z6PBjvomrGQfFBQfj/O4+s0LAGQX9jKAWf03nVNA4uj9aLL5IYdcGHr8rB
xJqNwIMAcnid5Ljr9Vr9yiHitrRU8/1GwGR9DLLqaQJWP2b0HRkgOZp1t2D/4QuK
i37xdSayMLRaOTQSTJtQsmPG5saZ9mf3qgRDcMTL5wGml9rfmZRGV0UHNyI112n9
0ssT677EwE1cRk2zVb7xJWobqQWroTHQArQyPmgfTZvFBPlgsQxXnAyQbfbCuQd1
notnym8gn9w+pPoc4oEEUrRwntX3Uzt8soKvAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUh79ZB3E1ChR12XXEt9CX6YJExdQwHwYDVR0jBBgwFoAUfGB6Q9NZ27uFmakg
2TJLq7x+NAEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc2
NC9mR0I2UTlOWjI3dUZtYWtnMlRKTHE3eC1OQUUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2ZHQjZROU5aMjd1Rm1ha2cyVEpMcTd4LU5BRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3NjQvZkdCNlE5TloyN3VG
bWFrZzJUSkxxN3gtTkFFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAISsZzWiILEECnlE3qmnosGQqyY41f2OO2drlVRfOKkG26WiQIj4uVUsNeQY
Bluuxdv2SB0Fx3InpqFg79DGqX6zFgETFtaSLwgyVDwyyMpRBn+Wqfy8gsfrEdGI
edsTqGpL2WbS6UJnTWJVivHBHEythiPxHj+xVSHl+IBQfuJafm5VSTfuuPrcU/Ac
d+r3iNEFDmJJKoZMKtnNs8YVLSj6EEPJVKbQUJ0VExKYyaEi2b4s4tV92GrTO67w
9vCOSSUbESFrkK4GkurA6AhJ1QfvvzxnymUiE5FKd3iDXxFTkeFTW/BRqXiQr3TM
yUtFStkzFDBLJwjVy1taz7NrFyE=
-----END CERTIFICATE-----
Generated at Mon Jan 15 00:13:47 2024 by rpki-client on console-fra.rpki-client.org