Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3257/C5kEyGAskuwXaB8GsxIW3LAvD8M.mft
File:                     C5kEyGAskuwXaB8GsxIW3LAvD8M.mft (raw, json)
Hash identifier:          JcYyT46sTT4bfCWB4BminmONdISiZGMykraGVJUjrPI=
Subject key identifier:   45:F4:6E:46:9C:86:3D:F6:A4:63:F4:E7:8B:19:57:E3:35:51:25:8D
Authority key identifier: 0B:99:04:C8:60:2C:92:EC:17:68:1F:06:B3:12:16:DC:B0:2F:0F:C3
Certificate issuer:       /CN=0B9904C8602C92EC17681F06B31216DCB02F0FC3
Certificate serial:       0172
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/C5kEyGAskuwXaB8GsxIW3LAvD8M.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3257/C5kEyGAskuwXaB8GsxIW3LAvD8M.mft
Manifest number:          0172
Signing time:             Mon 01 Apr 2024 17:23:36 +0000
Manifest this update:     Mon 01 Apr 2024 17:23:36 +0000
Manifest next update:     Mon 01 Apr 2024 23:23:36 +0000
Files and hashes:         1: C5kEyGAskuwXaB8GsxIW3LAvD8M.crl (hash: l/3lBeB9c9sNhQt3p0ZcbUwaZc8ALSAWqQfQczAsA0s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B9904C8602C92EC17681F06B31216DCB02F0FC3
        Validity
            Not Before: Apr  1 17:23:36 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=45F46E469C863DF6A463F4E78B1957E33551258D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8c:f3:4b:44:c7:75:b9:ac:89:bd:1c:25:a5:
                    fe:ac:18:d3:9a:d9:34:a1:9e:46:96:1e:5f:03:1e:
                    0a:34:de:f4:b6:5c:d6:dd:c0:6a:0a:46:c7:b6:94:
                    ca:e5:d5:6c:1a:e0:16:f3:cf:6f:a0:24:8f:b2:64:
                    17:36:52:e4:d2:4a:e4:91:7b:a6:34:a4:42:ab:71:
                    96:4a:79:01:b8:5e:eb:7d:d5:02:79:96:23:2d:15:
                    84:19:0a:c5:a6:04:8d:87:61:ba:60:0b:b6:6a:2c:
                    80:2b:64:01:55:1d:a9:df:b5:52:67:5a:f0:3e:1a:
                    67:97:cd:be:4c:ef:8a:ce:c2:62:03:24:96:3c:56:
                    01:99:01:41:0b:70:c5:9e:4d:73:a4:c7:da:5f:24:
                    9c:13:dc:64:8e:b9:4c:21:d3:15:91:21:f0:b1:71:
                    24:a8:da:21:c6:b0:f3:a9:33:a6:d5:05:fc:ec:3f:
                    80:d4:c9:03:27:b8:c3:3c:d6:78:f1:cc:a0:fd:13:
                    57:6a:e2:5e:a2:37:5f:37:b3:73:67:6c:81:e3:a1:
                    f6:8d:77:d1:ba:e9:ca:5c:5e:f2:6f:9b:29:f5:53:
                    02:d4:e7:31:bb:47:b5:f1:0d:8f:a1:6e:09:33:0c:
                    12:57:c3:09:d6:14:e1:f1:6e:b1:02:74:53:55:94:
                    c2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F4:6E:46:9C:86:3D:F6:A4:63:F4:E7:8B:19:57:E3:35:51:25:8D
            X509v3 Authority Key Identifier:
                keyid:0B:99:04:C8:60:2C:92:EC:17:68:1F:06:B3:12:16:DC:B0:2F:0F:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3257/C5kEyGAskuwXaB8GsxIW3LAvD8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/C5kEyGAskuwXaB8GsxIW3LAvD8M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3257/C5kEyGAskuwXaB8GsxIW3LAvD8M.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:4e:26:e3:0c:98:e8:91:d4:e9:b8:f3:46:d1:d7:52:d7:29:
         13:29:a6:5e:0e:0e:8d:49:f1:8c:d9:33:64:a6:8d:a1:31:10:
         f3:16:77:c4:a0:59:f5:77:13:cc:7f:5d:ee:eb:7b:64:98:12:
         62:35:78:52:b8:a9:66:95:fa:62:71:66:25:fc:75:a4:67:79:
         f6:4c:41:52:fd:d9:54:e9:77:64:27:0c:18:c1:c4:55:88:ea:
         88:55:63:6c:66:3c:cb:6b:48:82:62:d0:f7:60:e1:34:8c:00:
         a5:7a:43:4d:01:34:f3:45:12:a1:f9:a6:1a:90:f5:7d:3a:ab:
         14:c1:a5:b8:c8:ff:2c:46:31:84:10:19:32:76:86:aa:9e:57:
         63:f8:22:96:5d:8b:e8:e3:a2:e4:ca:78:c5:2b:b2:69:36:f7:
         fb:6f:b5:2f:81:6a:19:35:ff:60:69:13:7b:ff:36:22:f0:0b:
         b8:f5:ea:23:02:43:32:62:25:77:39:50:d8:7a:0e:16:ae:60:
         49:8e:68:bb:3f:46:4f:43:44:22:38:86:c9:e2:41:29:a7:a0:
         89:06:e2:f1:8f:7c:d6:7a:b1:bc:b0:47:3d:b7:8c:44:0f:99:
         d4:e0:35:83:dc:5e:93:54:c9:db:4d:77:cb:49:c4:54:ee:53:
         14:dd:b1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 03:07:01 2024 by rpki-client on console-ams.rpki-client.org