Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2898/8brwwwOBfwmdYZFYHK_1Ld5jDcI.mft
File:                     8brwwwOBfwmdYZFYHK_1Ld5jDcI.mft (raw, json)
Hash identifier:          a7EJJW3nY5zuX9AsePU2Yi/8q5K0LXfjZEX5etdZzzg=
Subject key identifier:   70:11:1B:40:BA:42:72:E6:0D:88:5B:B1:B0:F9:AF:BF:93:9E:43:23
Authority key identifier: F1:BA:F0:C3:03:81:7F:09:9D:61:91:58:1C:AF:F5:2D:DE:63:0D:C2
Certificate issuer:       /CN=F1BAF0C303817F099D6191581CAFF52DDE630DC2
Certificate serial:       0737
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8brwwwOBfwmdYZFYHK_1Ld5jDcI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/8brwwwOBfwmdYZFYHK_1Ld5jDcI.mft
Manifest number:          0736
Signing time:             Thu 26 May 2022 21:27:19 +0000
Manifest this update:     Thu 26 May 2022 21:27:19 +0000
Manifest next update:     Fri 27 May 2022 03:27:19 +0000
Files and hashes:         1: 1DYpkRP3iTsDqRZ0ull4P3nQiJs.roa (hash: fStoL4rupT8LxuLq7vAMwPs8WbOFiRNao24p+FKillQ=)
                          2: 8brwwwOBfwmdYZFYHK_1Ld5jDcI.crl (hash: +ipfhK17B+QtDEyHGTMONa9Nv9biqe31fvM3s2asmK8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1847 (0x737)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1BAF0C303817F099D6191581CAFF52DDE630DC2
        Validity
            Not Before: May 26 21:27:19 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=70111B40BA4272E60D885BB1B0F9AFBF939E4323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4a:f2:2f:99:73:94:67:70:e3:a1:69:2e:f6:
                    cc:d3:80:32:ae:56:16:a7:2b:da:ce:81:87:b1:01:
                    b3:8d:8e:46:2e:3b:df:7e:fc:49:b7:f5:e9:c6:0e:
                    b7:0d:3e:65:9e:3d:22:8f:88:45:ac:fd:98:ae:08:
                    c6:7c:0d:36:89:f5:69:4e:a1:b4:df:bc:a7:09:ef:
                    95:24:15:72:7a:1c:58:dc:51:a3:21:47:53:f1:a0:
                    8f:12:34:21:4e:16:c6:78:db:08:a9:cb:3a:2e:96:
                    56:ff:45:ef:c3:92:2a:33:02:54:c0:86:a5:8b:9b:
                    31:0a:c1:25:ce:c0:be:c9:60:fa:5b:c1:96:64:f6:
                    71:6f:c4:7c:6e:7b:f4:f4:8d:98:5e:df:15:05:bc:
                    6b:14:7a:89:a7:33:63:a0:60:16:81:b8:32:4a:cf:
                    1d:7c:19:2c:ef:10:5c:69:70:39:5c:c0:72:50:ec:
                    4e:da:94:ce:ba:b2:a1:7a:05:1c:a7:2c:13:9b:a3:
                    f0:83:43:46:27:f0:09:52:90:dd:4e:e6:8e:b3:1e:
                    76:d5:50:76:29:db:ac:c8:9f:6c:45:62:35:e9:fd:
                    d8:14:6c:90:e1:f6:b5:fc:18:61:17:bb:d5:68:64:
                    8d:8d:2f:67:f9:b3:11:5b:81:2d:c8:af:73:9e:03:
                    c7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:11:1B:40:BA:42:72:E6:0D:88:5B:B1:B0:F9:AF:BF:93:9E:43:23
            X509v3 Authority Key Identifier:
                keyid:F1:BA:F0:C3:03:81:7F:09:9D:61:91:58:1C:AF:F5:2D:DE:63:0D:C2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/8brwwwOBfwmdYZFYHK_1Ld5jDcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8brwwwOBfwmdYZFYHK_1Ld5jDcI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/8brwwwOBfwmdYZFYHK_1Ld5jDcI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:58:a5:22:fd:10:30:82:8d:dc:07:b1:ec:90:84:c1:85:c9:
         bc:5a:75:a2:a1:ab:18:73:9c:4a:78:e6:f7:aa:df:95:4c:f2:
         a8:53:b0:ed:ac:b7:16:3a:87:cb:20:f3:a4:2e:ed:59:aa:2c:
         e1:ae:72:2d:1f:05:d4:81:d6:f5:fa:40:eb:2e:d6:78:42:ab:
         ce:ee:d9:e9:7d:16:8b:97:14:12:a9:5f:92:bd:90:53:d8:60:
         49:6e:23:05:67:61:24:55:37:a2:1b:21:e1:96:f3:c1:a1:41:
         cd:ca:69:8f:e5:4c:1a:de:4e:b3:53:e9:de:52:de:57:2c:f8:
         cc:05:cd:91:26:5b:43:c1:19:ef:a9:93:fc:cb:d4:16:64:79:
         4a:8e:f3:f0:e9:ff:e3:25:10:2c:c8:5e:9d:8d:1f:54:2e:c7:
         ea:4a:a8:52:99:8c:41:ab:be:d7:33:f6:73:ef:9d:66:e7:a5:
         77:88:a1:29:69:b4:2b:6c:d0:fa:28:40:7e:b3:67:45:e5:4b:
         42:6b:6c:15:e5:19:07:28:db:3d:23:0f:fa:f2:5c:27:37:9c:
         2a:15:41:2d:53:f9:69:2d:7f:b2:c8:02:b4:9e:4d:42:3d:bf:
         f0:41:33:55:78:61:33:48:49:9a:07:f8:9b:a7:9a:e8:1f:78:
         ec:0b:b8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:16 2023 by rpki-client on console-ams.rpki-client.org