Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3161/tAMSLbLFfxH5ZVLbSZ68enrh9Mw.mft
File:                     tAMSLbLFfxH5ZVLbSZ68enrh9Mw.mft (raw, json)
Hash identifier:          xpoKTSBtsPVW0IYv8zlGozFdKT6yyfJkLsucX8i3AUU=
Subject key identifier:   F8:5F:EF:98:70:5F:A7:AB:08:14:4F:5B:54:CC:1D:13:1F:5A:B2:FE
Authority key identifier: B4:03:12:2D:B2:C5:7F:11:F9:65:52:DB:49:9E:BC:7A:7A:E1:F4:CC
Certificate issuer:       /CN=B403122DB2C57F11F96552DB499EBC7A7AE1F4CC
Certificate serial:       0223
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tAMSLbLFfxH5ZVLbSZ68enrh9Mw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/tAMSLbLFfxH5ZVLbSZ68enrh9Mw.mft
Manifest number:          0223
Signing time:             Tue 08 Aug 2023 01:03:27 +0000
Manifest this update:     Tue 08 Aug 2023 01:03:27 +0000
Manifest next update:     Tue 08 Aug 2023 07:03:27 +0000
Files and hashes:         1: tAMSLbLFfxH5ZVLbSZ68enrh9Mw.crl (hash: de3UTPvHRnW2kEvBq2Y0fcKZr39Ch2n46iwmu68Q7H8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547 (0x223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B403122DB2C57F11F96552DB499EBC7A7AE1F4CC
        Validity
            Not Before: Aug  8 01:03:27 2023 GMT
            Not After : Jun  7 02:16:11 2024 GMT
        Subject: CN=F85FEF98705FA7AB08144F5B54CC1D131F5AB2FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b0:b5:f0:24:d5:23:bb:e4:57:38:95:c3:e6:
                    21:5b:4b:ef:53:be:8f:c8:b1:41:39:2d:2d:2a:e4:
                    74:46:8a:61:0a:f2:5b:9f:e8:32:a2:99:51:9b:69:
                    bb:7d:ce:87:7d:df:0f:ff:4b:b5:55:42:9d:05:11:
                    1e:e4:68:67:96:81:08:b6:ac:19:b8:3c:91:ae:e9:
                    cf:83:0e:e0:ec:e4:a9:90:f1:23:bc:0b:38:af:df:
                    7b:3e:38:fd:c7:54:68:7d:a8:2b:bc:98:6e:78:c1:
                    9e:4c:34:b2:f9:49:e6:82:eb:1b:9e:24:06:3a:0e:
                    75:ea:b7:c3:7e:dc:9f:af:b8:e2:7e:d1:ef:a8:0e:
                    74:ba:cc:6e:e5:5b:2b:3c:c8:df:2e:0b:cc:cf:ec:
                    99:67:86:ff:44:89:0a:df:17:0e:9f:45:13:aa:f9:
                    fa:86:5d:1b:89:d2:4f:c0:93:dd:f0:71:88:28:a6:
                    4d:fb:1a:fc:8d:0d:89:02:8d:8f:dc:80:00:35:16:
                    a3:b8:13:07:21:1f:0d:06:22:ef:5f:cc:7c:6b:eb:
                    9c:6e:02:00:6a:57:37:25:30:65:9c:5d:1d:ea:f2:
                    b9:a3:66:b2:b7:e9:50:ab:d3:97:05:85:c2:66:46:
                    51:a0:dc:1a:2e:9e:18:8f:db:86:d2:57:f0:b2:85:
                    bc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5F:EF:98:70:5F:A7:AB:08:14:4F:5B:54:CC:1D:13:1F:5A:B2:FE
            X509v3 Authority Key Identifier:
                keyid:B4:03:12:2D:B2:C5:7F:11:F9:65:52:DB:49:9E:BC:7A:7A:E1:F4:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/tAMSLbLFfxH5ZVLbSZ68enrh9Mw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tAMSLbLFfxH5ZVLbSZ68enrh9Mw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/tAMSLbLFfxH5ZVLbSZ68enrh9Mw.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:20:db:39:4c:8a:98:2c:78:60:be:00:5f:a2:d8:cb:3c:7e:
         ad:a9:e1:85:25:c9:7d:45:61:f8:9f:bd:4d:22:45:26:f8:19:
         84:43:4c:f2:16:3e:00:41:cb:18:7e:1f:2a:ca:6e:b8:39:14:
         8c:2d:a5:c4:d5:d0:59:a0:ba:53:09:80:12:e6:1e:2b:bc:e0:
         07:d7:fd:49:66:64:c3:32:a1:9f:1a:af:d5:1e:28:94:73:41:
         4a:65:1d:7d:da:4a:9e:f7:89:4c:32:f1:de:6b:c7:71:db:4c:
         02:a2:87:b3:82:07:f4:3a:dc:74:11:51:86:4d:c7:08:7d:4e:
         92:6e:da:49:af:e6:29:c6:4d:44:7a:d8:f1:63:8c:df:5a:95:
         f8:89:11:81:9e:01:31:5c:19:ba:61:cb:4e:8b:ae:71:4a:f7:
         61:62:05:43:3c:08:d0:15:79:29:30:19:d2:bc:ed:b7:bb:45:
         f7:05:1e:22:b3:45:17:2d:b8:98:70:be:c4:c7:b2:14:2b:63:
         88:9e:c5:50:fd:98:a9:a2:56:95:82:fc:9a:e6:4f:66:fc:9c:
         a1:81:da:bf:bb:cc:bd:4e:21:45:b9:0b:97:d6:f8:58:da:3e:
         9b:ed:62:63:8e:21:ff:65:c0:f8:a1:5f:1a:bc:4c:f6:3b:39:
         35:53:29:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 05:31:18 2023 by rpki-client on console-fra.rpki-client.org