Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3257/yWfdv_mWeomMkoVjHt9NjodMh3c.mft
File:                     yWfdv_mWeomMkoVjHt9NjodMh3c.mft (raw, json)
Hash identifier:          0hG42LlwE18qLe8t0kiWBRwdwy2vI/fLgEOVI/oAlfo=
Subject key identifier:   59:60:AC:29:CA:02:FC:3D:9F:EF:D8:78:E0:50:5C:1D:05:6C:E5:C8
Authority key identifier: C9:67:DD:BF:F9:96:7A:89:8C:92:85:63:1E:DF:4D:8E:87:4C:87:77
Certificate issuer:       /CN=C967DDBFF9967A898C9285631EDF4D8E874C8777
Certificate serial:       0172
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yWfdv_mWeomMkoVjHt9NjodMh3c.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3257/yWfdv_mWeomMkoVjHt9NjodMh3c.mft
Manifest number:          0172
Signing time:             Mon 01 Apr 2024 17:23:36 +0000
Manifest this update:     Mon 01 Apr 2024 17:23:36 +0000
Manifest next update:     Mon 01 Apr 2024 23:23:36 +0000
Files and hashes:         1: yWfdv_mWeomMkoVjHt9NjodMh3c.crl (hash: ZnD/6arvULbXkjWuYrk2qU4q+xHu1tJVpdY3tshwLD4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C967DDBFF9967A898C9285631EDF4D8E874C8777
        Validity
            Not Before: Apr  1 17:23:36 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=5960AC29CA02FC3D9FEFD878E0505C1D056CE5C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:31:cb:b8:ea:35:62:a2:d8:7c:8d:61:27:fc:
                    c9:3e:6f:b7:2f:06:82:b7:b7:69:d4:0b:17:e6:54:
                    67:06:5d:6d:de:3c:44:6d:96:06:4e:36:3e:fa:5d:
                    27:92:6b:fc:77:8a:17:3c:98:93:7e:cb:fb:f5:d6:
                    b0:b9:2d:c9:96:aa:d6:51:f9:9e:35:b3:04:f0:46:
                    10:5b:7b:98:63:b9:08:52:27:c7:6a:15:5a:2f:8d:
                    c4:b5:92:2c:1a:bf:c8:cc:32:db:28:1e:c8:2d:43:
                    99:1e:b0:82:42:ce:2e:3e:62:4e:05:f7:12:d5:a6:
                    90:6c:12:84:77:7f:32:79:2a:18:c6:90:d2:b7:34:
                    af:4c:6a:3c:4d:99:66:a0:97:66:89:b9:db:0c:fa:
                    ef:f5:4d:14:1e:97:ab:6f:ee:6e:5e:8e:56:c4:40:
                    5c:52:b5:f2:48:1f:e3:4d:52:54:09:1b:13:39:66:
                    54:84:9f:13:0f:06:3e:0c:be:23:9c:10:a2:4f:a5:
                    54:eb:b3:04:46:d1:cb:46:24:38:c2:c0:49:4d:b2:
                    27:ad:e3:7f:be:b7:e1:f3:ae:24:5e:5e:e5:31:9a:
                    fa:1c:0a:e0:b1:7e:7a:e7:4c:fc:0d:f8:5f:7f:6f:
                    51:06:e3:37:d6:98:8d:42:7b:12:f2:76:18:b8:f3:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:60:AC:29:CA:02:FC:3D:9F:EF:D8:78:E0:50:5C:1D:05:6C:E5:C8
            X509v3 Authority Key Identifier:
                keyid:C9:67:DD:BF:F9:96:7A:89:8C:92:85:63:1E:DF:4D:8E:87:4C:87:77

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3257/yWfdv_mWeomMkoVjHt9NjodMh3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yWfdv_mWeomMkoVjHt9NjodMh3c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3257/yWfdv_mWeomMkoVjHt9NjodMh3c.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:16:53:71:d4:fb:b8:7c:95:2e:8e:90:d6:6b:3c:89:f0:46:
         82:1d:2e:88:c9:99:8a:bc:25:8b:88:45:f8:26:37:19:2a:c5:
         7a:ac:ac:20:cd:0f:d5:28:07:4a:d6:d7:5e:55:65:06:89:c6:
         2b:bc:4a:0c:ef:76:a6:17:22:3a:7a:58:06:16:d0:dd:18:04:
         e1:42:b5:03:63:5e:81:0c:8b:94:1b:dd:0c:25:d5:f0:0c:25:
         7f:28:06:84:ff:53:36:96:c5:37:0b:98:ff:01:cb:be:04:7f:
         9b:a8:6d:1c:cf:83:84:de:3b:f0:76:19:57:1f:0b:df:86:37:
         48:a6:2c:88:12:12:1f:20:1d:d9:60:3a:67:41:45:eb:3a:60:
         49:84:ee:2b:38:8e:c5:dc:c5:f1:5a:59:b4:c1:c8:94:1f:b0:
         f4:49:ad:32:80:22:f2:9b:ef:4f:b5:de:f1:21:91:b9:8b:86:
         f2:2f:cf:c3:05:2d:5e:ba:5b:fe:78:b2:bd:f4:c6:80:5c:f9:
         49:2a:f9:b8:5e:00:82:67:10:be:af:3b:8c:5a:64:22:75:6e:
         f0:d5:12:f2:61:9f:b8:91:10:37:03:86:87:c0:cd:2f:2c:a3:
         61:7e:b6:18:39:99:1e:33:02:8c:68:2a:e2:4e:05:24:41:ef:
         4d:22:8f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 03:07:01 2024 by rpki-client on console-ams.rpki-client.org