Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3241/vpb1PBFCO2qE1Qs_q5_XF_uXeTI.mft
File:                     vpb1PBFCO2qE1Qs_q5_XF_uXeTI.mft (raw, json)
Hash identifier:          ++I850wFNYPB/ja6rEg0TfvVhhh1UDNqMLnztyh3+6g=
Subject key identifier:   AA:24:E3:64:78:0C:F1:58:23:5F:15:D7:36:9E:F9:80:A2:42:E4:F7
Authority key identifier: BE:96:F5:3C:11:42:3B:6A:84:D5:0B:3F:AB:9F:D7:17:FB:97:79:32
Certificate issuer:       /CN=BE96F53C11423B6A84D50B3FAB9FD717FB977932
Certificate serial:       0834
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vpb1PBFCO2qE1Qs_q5_XF_uXeTI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3241/vpb1PBFCO2qE1Qs_q5_XF_uXeTI.mft
Manifest number:          0834
Signing time:             Tue 12 Nov 2024 00:20:28 +0000
Manifest this update:     Tue 12 Nov 2024 00:20:28 +0000
Manifest next update:     Tue 12 Nov 2024 06:20:28 +0000
Files and hashes:         1: vpb1PBFCO2qE1Qs_q5_XF_uXeTI.crl (hash: EpDSrSM0/9stA8lECDuOoV2LvOT/Uu1oAX8GNXbtyYM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2100 (0x834)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE96F53C11423B6A84D50B3FAB9FD717FB977932
        Validity
            Not Before: Nov 12 00:20:28 2024 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=AA24E364780CF158235F15D7369EF980A242E4F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9d:07:60:2d:eb:ef:d9:4e:56:15:f4:48:d1:
                    78:86:9d:1b:18:f7:ce:08:ba:7b:b9:ad:0b:b1:64:
                    72:a4:78:0e:8b:35:c0:53:72:be:7a:eb:eb:c9:b4:
                    e9:f3:32:24:2e:0d:58:26:80:b2:f8:6a:6d:4e:93:
                    5a:c0:e6:ed:42:cb:fd:22:8f:b3:f7:d0:b5:a6:f1:
                    96:82:a9:1f:fa:a3:1a:25:7b:82:cd:73:a4:da:1a:
                    cc:4a:51:2d:23:ac:40:04:f3:aa:1b:2f:e5:94:21:
                    2f:56:f8:bb:32:94:2a:3f:c3:6f:37:31:62:63:1f:
                    d1:51:d1:78:59:08:18:70:59:29:bf:82:50:64:3a:
                    98:da:c9:ad:f2:fb:fa:96:9f:4b:86:d0:81:3d:89:
                    e1:26:1c:df:b9:ba:d9:02:2c:9a:06:27:22:22:7b:
                    d4:3c:d1:ca:4b:2d:b7:d7:6f:2d:06:22:05:74:fd:
                    93:9c:83:f9:3e:ce:ac:30:db:db:a5:9f:b0:ac:72:
                    18:41:1c:d7:bf:f4:d4:7c:54:f7:f0:dc:e0:2a:99:
                    49:47:ae:f4:a4:1d:05:87:e5:a2:6f:bc:a6:c3:06:
                    72:28:fb:dc:e4:07:12:80:4d:52:f5:fc:f3:92:01:
                    a1:2c:f8:d3:24:c9:8d:3e:12:69:ff:4d:50:ae:32:
                    67:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:24:E3:64:78:0C:F1:58:23:5F:15:D7:36:9E:F9:80:A2:42:E4:F7
            X509v3 Authority Key Identifier:
                keyid:BE:96:F5:3C:11:42:3B:6A:84:D5:0B:3F:AB:9F:D7:17:FB:97:79:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3241/vpb1PBFCO2qE1Qs_q5_XF_uXeTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vpb1PBFCO2qE1Qs_q5_XF_uXeTI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3241/vpb1PBFCO2qE1Qs_q5_XF_uXeTI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d2:04:8c:69:4a:9c:07:da:aa:47:54:19:ec:ab:bb:ba:8e:
         f7:6a:be:57:bc:b9:7e:06:ba:53:6f:7c:3a:bf:99:83:95:46:
         c7:ed:0a:0e:f9:b0:0b:d4:bb:2e:3f:70:7b:a9:cc:b4:4b:b5:
         c1:44:7d:86:06:98:43:f9:5f:7e:a8:59:b7:23:fe:94:ff:56:
         3f:c8:b9:80:f5:3b:5b:6e:70:43:76:ad:0e:d9:c7:bb:40:95:
         2d:d8:03:c7:55:56:f6:c6:3a:e4:04:30:a3:f4:6f:5a:d0:68:
         91:8f:e1:ed:17:87:36:94:f4:d9:1f:f5:96:1e:fe:c1:30:34:
         59:b9:83:ba:f3:27:26:4f:0a:8f:1b:e5:a4:d4:3c:82:f9:54:
         98:23:d8:85:32:d7:2c:b4:6c:5e:8d:68:86:1a:0c:67:e4:0a:
         cf:90:b9:57:8c:ba:a8:7b:a3:dd:19:ed:e1:72:e5:9a:25:b9:
         9c:e0:34:93:d0:7b:97:16:b5:2e:ee:c7:dc:fe:1d:0c:51:e0:
         4a:59:1d:7c:b3:fc:02:32:cd:f1:4d:65:cb:d9:13:a5:2a:14:
         04:27:ba:b0:45:48:a5:94:4a:4e:29:1c:4a:5a:b3:ff:24:c1:
         4c:81:51:6c:2c:b1:18:2a:38:68:ec:54:5d:5a:32:3e:d6:d3:
         e9:63:db:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 05:35:58 2024 by rpki-client on console-fra.rpki-client.org