Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3040/1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.mft
File:                     1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.mft (raw, json)
Hash identifier:          UwOCdq4o1nb/htJ3cDoSHiZU0XGTWRpkZ/0m3kNe0X0=
Subject key identifier:   D2:00:BF:DC:A0:90:CA:86:45:EF:95:2D:0E:0F:12:18:C7:9C:91:C6
Authority key identifier: D4:5E:16:C9:CF:62:8F:F6:3C:42:FE:49:D3:0A:B5:DF:29:45:0F:03
Certificate issuer:       /CN=D45E16C9CF628FF63C42FE49D30AB5DF29450F03
Certificate serial:       0AEB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.mft
Manifest number:          0AE0
Signing time:             Thu 26 May 2022 19:26:25 +0000
Manifest this update:     Thu 26 May 2022 19:26:25 +0000
Manifest next update:     Fri 27 May 2022 01:26:25 +0000
Files and hashes:         1: 1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.crl (hash: jwEJVsRrlORrJH9yg8Z0ytHFj5L0cEDjnnu8j4u9iR0=)
                          2: 9n_40mtqYNscfFuMdGOZvABrDsU.roa (hash: ZC1KvaYHjNuJ8CG9z/lXtxYrOLnZYNWgLIcAhFRxsgs=)
                          3: ChS6iktt8OXSTpuJqgDrBkHcOos.roa (hash: 0v4M+4Y7P/7zAjJJIpy+tSRDPnpZCMTaopYAZYyL7t4=)
                          4: Rd3ASVasD5nIePklp5BbhCGRQ6w.roa (hash: aHKEVhk+lNwBKtpsNlJZ27IF2O97LjBGmG9jrVscA3o=)
                          5: lyJblXFSmrUu9Ve8ahHKRrISQy8.roa (hash: 75hEXw/DPp3H4zOvsG1AYLd7E2cyiEcNJlrBDhSVH6I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2795 (0xaeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D45E16C9CF628FF63C42FE49D30AB5DF29450F03
        Validity
            Not Before: May 26 19:26:25 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=D200BFDCA090CA8645EF952D0E0F1218C79C91C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c9:4c:c0:ce:95:9d:39:23:4a:e0:57:40:56:
                    c1:5c:72:53:0c:77:f3:34:fd:7c:d3:95:eb:a1:1e:
                    50:37:78:ae:eb:4d:74:52:35:77:d9:22:02:ce:a0:
                    36:b7:24:a3:d9:a0:30:85:13:0c:0f:ab:6f:0c:a1:
                    7d:62:75:28:16:35:8a:8d:56:8f:dd:29:33:bd:c2:
                    76:5d:05:f7:24:9a:b9:d1:52:77:79:2d:a8:e2:86:
                    47:5b:f7:c7:d1:fd:d5:ca:36:3b:4d:e7:b5:46:90:
                    71:45:3f:57:d6:fd:56:6a:af:bb:79:4c:e6:51:91:
                    b8:58:be:aa:00:0b:b1:c4:59:83:c6:97:00:01:9f:
                    0b:b9:9f:a9:75:28:ea:13:bd:ce:00:80:f5:b0:a1:
                    1a:eb:d1:1e:5d:7c:5d:e8:18:ae:e1:f6:42:41:77:
                    8d:7b:c3:d2:42:20:32:e1:c6:d4:94:3c:aa:6f:bd:
                    4d:69:84:f0:3a:3d:ac:43:d7:8a:c3:a5:14:66:90:
                    44:9e:5a:fd:20:58:52:f3:27:31:cb:54:04:e2:38:
                    78:ce:96:56:f7:96:aa:2c:b6:04:3a:a7:d9:37:42:
                    ee:59:ce:06:44:17:1d:8c:a3:2f:b2:ac:01:3d:5f:
                    d5:f3:f1:bc:21:c2:15:48:40:dd:da:67:61:13:96:
                    79:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:00:BF:DC:A0:90:CA:86:45:EF:95:2D:0E:0F:12:18:C7:9C:91:C6
            X509v3 Authority Key Identifier:
                keyid:D4:5E:16:C9:CF:62:8F:F6:3C:42:FE:49:D3:0A:B5:DF:29:45:0F:03

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:28:ba:6d:ef:41:bd:45:30:bb:67:77:c3:7d:45:4f:6a:aa:
         a9:7b:74:dc:cb:89:3a:78:14:1d:fe:6c:c1:95:24:6a:f9:03:
         e5:aa:78:0c:5f:3a:4b:0d:43:33:d9:41:dd:0a:57:db:b2:1d:
         d8:57:37:20:76:30:ed:10:fb:06:06:6d:cb:04:5c:23:bf:9d:
         94:8d:a3:f0:3a:f7:06:db:f8:3b:57:5e:6b:70:55:a2:37:62:
         e2:cf:cd:ce:7b:e4:d9:b5:44:70:33:32:99:4e:bb:a8:a9:68:
         5c:73:00:07:34:ef:46:0c:93:5d:1a:29:62:63:b1:33:eb:38:
         a8:55:2e:c8:d3:8b:60:46:9f:dd:97:aa:a7:1d:06:83:cf:de:
         15:8d:77:d7:c2:00:2e:bc:bf:e9:da:e6:06:d3:2a:e4:2f:af:
         de:24:6a:66:93:43:1d:9a:24:3e:a3:76:1d:3d:02:5b:8c:ac:
         d8:bb:32:e5:f8:83:4c:3e:aa:89:16:aa:79:37:14:1e:3b:77:
         fc:96:64:a4:91:7c:e5:f4:b8:77:46:c5:6e:d6:e2:c4:29:d0:
         06:11:f3:2b:5b:8f:63:aa:36:7c:a0:97:7a:f9:47:72:17:cf:
         0f:c6:6f:f6:df:50:ab:9d:f0:ca:8b:15:4f:01:42:23:65:e7:
         71:e9:69:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----