Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2769/VoKIT85VvbmANvm0NTn3xMwIg9M.mft
File:                     VoKIT85VvbmANvm0NTn3xMwIg9M.mft (raw, json)
Hash identifier:          RmBBJ74fNeBhqWJKEv9g7P/AIV4wwB3Wy1lL+z25H0Y=
Subject key identifier:   02:A8:C5:79:06:37:C6:B4:A0:94:E5:54:B2:BC:24:51:28:AE:1F:F0
Authority key identifier: 56:82:88:4F:CE:55:BD:B9:80:36:F9:B4:35:39:F7:C4:CC:08:83:D3
Certificate issuer:       /CN=5682884FCE55BDB98036F9B43539F7C4CC0883D3
Certificate serial:       0B5F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VoKIT85VvbmANvm0NTn3xMwIg9M.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2769/VoKIT85VvbmANvm0NTn3xMwIg9M.mft
Manifest number:          0B5F
Signing time:             Sun 14 Jan 2024 19:19:30 +0000
Manifest this update:     Sun 14 Jan 2024 19:19:30 +0000
Manifest next update:     Mon 15 Jan 2024 01:19:30 +0000
Files and hashes:         1: VoKIT85VvbmANvm0NTn3xMwIg9M.crl (hash: BJIONeo666n3cDVRUwLcGaCgoLeJHGUGUelX3PiGt70=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2911 (0xb5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5682884FCE55BDB98036F9B43539F7C4CC0883D3
        Validity
            Not Before: Jan 14 19:19:30 2024 GMT
            Not After : Oct  8 00:16:33 2024 GMT
        Subject: CN=02A8C5790637C6B4A094E554B2BC245128AE1FF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:b8:41:ec:86:bc:17:55:1c:df:6c:c0:88:
                    2f:18:23:f9:35:42:5c:47:49:d3:81:dc:2b:2f:69:
                    5a:3a:31:ec:25:a7:51:99:80:ab:1c:54:46:9b:2c:
                    f5:f1:24:34:b7:28:26:cf:40:3c:e8:66:98:ac:62:
                    f2:31:76:70:ab:ca:5a:fb:ed:8d:e7:ce:f8:f2:71:
                    1d:68:4f:c8:91:97:5e:4a:40:f1:3e:02:26:b1:20:
                    27:cd:e6:ab:14:6f:9a:6c:19:f0:a4:bb:3c:40:f8:
                    5f:01:3c:79:51:c5:a1:ae:bb:ce:ad:4b:e2:33:0b:
                    a6:0d:4f:5d:00:c6:7f:28:e1:ec:c0:c7:bd:b3:51:
                    a8:24:c2:72:28:81:cb:ef:76:2e:12:1c:9b:14:9f:
                    ea:37:75:af:b5:7d:4d:f2:a9:9a:9c:84:89:2a:90:
                    c6:b4:82:52:f4:4c:48:3f:07:67:f5:b8:42:a8:48:
                    22:2f:16:3c:f0:14:d2:b4:96:7c:eb:c9:f3:eb:d7:
                    35:15:58:9e:87:c6:cb:83:ff:5f:96:06:8f:1e:a2:
                    26:61:82:f8:07:1a:f4:26:22:47:25:28:a3:49:f3:
                    0b:8b:0c:1b:95:d6:e8:2f:6c:06:ca:e3:08:91:43:
                    22:f2:82:d5:54:3c:11:4e:ff:6e:7b:cf:fc:69:55:
                    68:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A8:C5:79:06:37:C6:B4:A0:94:E5:54:B2:BC:24:51:28:AE:1F:F0
            X509v3 Authority Key Identifier:
                keyid:56:82:88:4F:CE:55:BD:B9:80:36:F9:B4:35:39:F7:C4:CC:08:83:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2769/VoKIT85VvbmANvm0NTn3xMwIg9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VoKIT85VvbmANvm0NTn3xMwIg9M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2769/VoKIT85VvbmANvm0NTn3xMwIg9M.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:5a:ae:8e:61:a7:00:1a:10:7e:ee:61:7e:8f:3e:4d:a2:68:
         7a:5b:82:b6:8c:a0:be:a9:b6:d6:a2:27:e7:67:df:ec:0f:a3:
         c0:96:a0:86:61:61:9f:c9:d6:d9:09:44:48:7a:65:69:4a:3f:
         7f:34:4b:e6:fd:36:00:22:f7:c1:0a:75:0d:88:2e:ff:14:a0:
         d5:a7:9d:34:f3:c3:09:c1:9e:a5:af:95:b5:08:e1:1a:5f:23:
         f9:a0:21:ae:17:b4:db:ac:51:66:49:35:2a:e5:39:d4:57:db:
         a6:11:f8:f6:03:b3:b8:31:86:a7:a6:d5:ae:7f:fa:5c:e9:06:
         e6:da:d8:66:12:13:8f:e5:ef:1d:65:73:d4:5b:d6:09:da:1a:
         31:10:8b:f5:1b:79:92:0f:53:cb:f0:d4:65:af:94:8b:ac:71:
         cb:1d:05:c6:d5:1c:72:e5:0f:3c:9d:48:bc:8c:d8:f4:b7:dd:
         70:03:25:7f:be:f7:0f:34:76:e9:ce:55:21:89:64:61:d3:ea:
         8e:d8:74:0e:66:ae:1a:02:40:88:01:f5:70:cf:4a:df:67:46:
         44:74:f1:e0:a5:1c:97:74:53:ba:41:ca:42:2e:f0:03:3c:5b:
         c5:3b:cb:a0:b1:ac:59:09:05:b6:2c:7f:f5:cd:f1:8a:2e:48:
         ca:36:bf:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----