Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2834/gbSTrMtCmYv_AAs94Qb7V3GkjVo.mft
File:                     gbSTrMtCmYv_AAs94Qb7V3GkjVo.mft (raw, json)
Hash identifier:          PxxzyYaTgJgeKkcd7HEvSs4T/sY/J+FTxoOrjhCeScE=
Subject key identifier:   3A:41:1A:95:B2:D8:E9:D8:4F:DC:98:E2:3B:3F:E6:59:AB:54:20:A9
Authority key identifier: 81:B4:93:AC:CB:42:99:8B:FF:00:0B:3D:E1:06:FB:57:71:A4:8D:5A
Certificate issuer:       /CN=81B493ACCB42998BFF000B3DE106FB5771A48D5A
Certificate serial:       19B7
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gbSTrMtCmYv_AAs94Qb7V3GkjVo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2834/gbSTrMtCmYv_AAs94Qb7V3GkjVo.mft
Manifest number:          19B4
Signing time:             Sun 03 Nov 2024 22:51:50 +0000
Manifest this update:     Sun 03 Nov 2024 22:51:50 +0000
Manifest next update:     Mon 04 Nov 2024 04:51:50 +0000
Files and hashes:         1: 1Lwx7l_01k_t0tJWyeW8MTwJcfY.roa (hash: FqRGkn68t9uwvEn0k2jpfABuQZMIUWsPskayR5Rnz+c=)
                          2: gbSTrMtCmYv_AAs94Qb7V3GkjVo.crl (hash: LxoXePgef7q2a44RyUiMWZMnjN74E+pTNnfzAn5r9V8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6583 (0x19b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81B493ACCB42998BFF000B3DE106FB5771A48D5A
        Validity
            Not Before: Nov  3 22:51:50 2024 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=3A411A95B2D8E9D84FDC98E23B3FE659AB5420A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:20:1b:09:96:62:bc:28:37:7f:c4:ed:73:c5:
                    a6:13:99:62:9e:69:a1:8f:57:fd:9c:30:82:62:29:
                    44:52:81:79:31:63:37:fd:19:55:24:13:f0:1b:d4:
                    60:12:2a:15:f4:88:93:13:13:ac:95:bc:43:82:8f:
                    d3:7b:c4:a4:c0:26:99:4e:48:b7:2b:57:35:4d:73:
                    cf:d5:c3:c7:4e:16:15:de:53:00:07:c9:b1:86:7c:
                    d8:57:86:c5:a5:86:4e:8a:0d:25:d9:7f:4d:bb:21:
                    61:9c:58:82:19:a7:f3:e1:0f:1c:d6:e7:69:54:64:
                    a6:8b:9f:09:70:2a:df:2e:db:d0:86:80:69:cf:ed:
                    72:9a:01:d5:5a:ac:94:dd:90:06:74:5f:0a:40:56:
                    e0:2b:6b:08:b6:f9:45:5d:51:44:d4:b4:4e:51:ad:
                    0d:24:a4:40:a3:f5:05:d8:de:a2:f5:b9:e7:db:09:
                    c0:e1:62:e1:b7:32:06:90:05:c2:b7:89:68:c1:ae:
                    a0:11:6c:a8:68:df:31:e0:72:70:a7:04:5a:aa:ab:
                    36:7a:d5:6c:27:62:ee:6c:73:49:8d:a0:51:b6:5a:
                    fc:06:d2:59:57:19:21:dd:e5:75:2e:0b:ef:c0:3c:
                    ab:47:07:25:14:5d:50:ba:38:ca:21:fa:8f:ff:b0:
                    e0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:41:1A:95:B2:D8:E9:D8:4F:DC:98:E2:3B:3F:E6:59:AB:54:20:A9
            X509v3 Authority Key Identifier:
                keyid:81:B4:93:AC:CB:42:99:8B:FF:00:0B:3D:E1:06:FB:57:71:A4:8D:5A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2834/gbSTrMtCmYv_AAs94Qb7V3GkjVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gbSTrMtCmYv_AAs94Qb7V3GkjVo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2834/gbSTrMtCmYv_AAs94Qb7V3GkjVo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d4:98:25:31:04:28:59:9f:2d:33:03:3f:f8:c6:4a:48:b7:
         d9:3b:96:7e:6c:b9:5e:e8:18:ed:b8:f1:67:b2:09:83:ab:02:
         33:56:8a:ce:24:80:d3:57:a5:e4:33:28:4b:27:19:fc:93:00:
         22:f7:38:04:69:69:a6:2d:8d:09:78:a8:4a:c1:0a:61:7c:19:
         24:ab:70:f0:91:a9:08:7c:40:f0:2a:1f:76:3b:44:31:0b:b7:
         43:e6:70:f5:9c:2e:ea:b9:21:e8:91:32:92:b4:59:0b:43:7a:
         98:83:c6:ea:14:16:e1:fd:3d:f2:d6:41:13:63:2a:6c:d7:70:
         48:1d:92:01:44:20:62:27:82:da:ad:1e:03:2c:02:c7:1d:3f:
         b8:a5:f9:fe:5f:4c:f3:2e:60:67:53:e7:1c:f4:c5:87:06:6e:
         ce:bc:33:64:a6:65:33:ca:04:64:42:c6:81:f2:ca:c6:78:6a:
         4f:51:86:7b:18:bc:f4:5f:a4:93:1e:42:79:5d:b6:2d:bb:44:
         d3:0a:10:1a:ca:47:a6:0a:4f:d9:24:3c:d2:4b:58:1e:01:0f:
         40:6b:91:f8:92:11:91:64:81:70:bc:40:8a:16:32:9f:c9:c1:
         b6:78:38:e2:b9:f1:39:a6:43:d0:80:5b:0d:42:3c:b6:c5:2d:
         de:f6:5b:cc
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICGbcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODFC
NDkzQUNDQjQyOTk4QkZGMDAwQjNERTEwNkZCNTc3MUE0OEQ1QTAeFw0yNDExMDMy
MjUxNTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDNBNDExQTk1QjJEOEU5
RDg0RkRDOThFMjNCM0ZFNjU5QUI1NDIwQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+IBsJlmK8KDd/xO1zxaYTmWKeaaGPV/2cMIJiKURSgXkxYzf9
GVUkE/Ab1GASKhX0iJMTE6yVvEOCj9N7xKTAJplOSLcrVzVNc8/Vw8dOFhXeUwAH
ybGGfNhXhsWlhk6KDSXZf027IWGcWIIZp/PhDxzW52lUZKaLnwlwKt8u29CGgGnP
7XKaAdVarJTdkAZ0XwpAVuArawi2+UVdUUTUtE5RrQ0kpECj9QXY3qL1uefbCcDh
YuG3MgaQBcK3iWjBrqARbKho3zHgcnCnBFqqqzZ61WwnYu5sc0mNoFG2WvwG0llX
GSHd5XUuC+/APKtHByUUXVC6OMoh+o//sOD3AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUOkEalbLY6dhP3JjiOz/mWatUIKkwHwYDVR0jBBgwFoAUgbSTrMtCmYv/AAs9
4Qb7V3GkjVowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgz
NC9nYlNUck10Q21Zdl9BQXM5NFFiN1YzR2tqVm8uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2diU1RyTXRDbVl2X0FBczk0UWI3VjNHa2pWby5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MzQvZ2JTVHJNdENtWXZf
QUFzOTRRYjdWM0dralZvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBADPUmCUxBChZny0zAz/4xkpIt9k7ln5suV7oGO248WeyCYOrAjNWis4kgNNX
peQzKEsnGfyTACL3OARpaaYtjQl4qErBCmF8GSSrcPCRqQh8QPAqH3Y7RDELt0Pm
cPWcLuq5IeiRMpK0WQtDepiDxuoUFuH9PfLWQRNjKmzXcEgdkgFEIGIngtqtHgMs
AscdP7il+f5fTPMuYGdT5xz0xYcGbs68M2SmZTPKBGRCxoHyysZ4ak9RhnsYvPRf
pJMeQnldti27RNMKEBrKR6YKT9kkPNJLWB4BD0BrkfiSEZFkgXC8QIoWMp/JwbZ4
OOK58TmmQ9CAWw1CPLbFLd72W8w=
-----END CERTIFICATE-----
Generated at Mon Nov 4 05:26:13 2024 by rpki-client on console-fra.rpki-client.org