Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/333/l72y2FdLqCMxGwQqUWYnceCMsec.mft
File:                     l72y2FdLqCMxGwQqUWYnceCMsec.mft (raw, json)
Hash identifier:          MdxiWNfEXALF6jp77q0YDsPwY4QkIhXBksZIDiEsUDo=
Subject key identifier:   88:EE:95:7A:3F:1B:ED:40:8E:B1:C8:E7:7E:5B:13:32:48:48:A3:7E
Authority key identifier: 97:BD:B2:D8:57:4B:A8:23:31:1B:04:2A:51:66:27:71:E0:8C:B1:E7
Certificate issuer:       /CN=97BDB2D8574BA823311B042A51662771E08CB1E7
Certificate serial:       22D8
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/l72y2FdLqCMxGwQqUWYnceCMsec.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/333/l72y2FdLqCMxGwQqUWYnceCMsec.mft
Manifest number:          22D8
Signing time:             Thu 26 May 2022 19:25:45 +0000
Manifest this update:     Thu 26 May 2022 19:25:45 +0000
Manifest next update:     Fri 27 May 2022 01:25:45 +0000
Files and hashes:         1: l72y2FdLqCMxGwQqUWYnceCMsec.crl (hash: i1ennks5u893Gj4Y+LYzhbq7d55OlhRgmbbZiMp7R2g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8920 (0x22d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97BDB2D8574BA823311B042A51662771E08CB1E7
        Validity
            Not Before: May 26 19:25:45 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=88EE957A3F1BED408EB1C8E77E5B13324848A37E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b2:be:36:9a:97:d9:f9:5d:5c:c4:7d:65:13:
                    12:12:b0:3c:d3:33:a8:8c:07:1b:a1:28:61:1b:27:
                    ce:a1:d7:80:34:7c:59:ec:97:89:38:a8:31:fc:f9:
                    fd:99:94:54:a5:05:dc:14:dc:3b:9b:c4:09:6a:04:
                    98:6c:b2:dc:9e:51:ea:ae:94:8d:8b:db:1c:3a:c9:
                    1f:3b:40:91:20:07:4e:8a:cc:69:37:3c:3c:1e:51:
                    07:2e:ca:eb:a2:2f:54:46:60:c0:38:fc:ba:a1:ee:
                    32:6a:2e:92:89:40:b4:cb:69:01:49:17:f9:d8:b9:
                    b7:d5:5f:31:ba:d0:9f:31:16:fe:1b:61:a5:62:35:
                    4c:7a:80:15:f1:11:19:b0:43:5c:c4:6f:c8:31:18:
                    35:71:10:b2:3f:6f:cd:e8:d9:86:8a:44:d3:db:23:
                    9a:fb:1f:31:da:d8:58:eb:36:0b:81:f3:76:70:23:
                    7e:3f:8b:f0:0c:c8:36:81:bf:20:df:8c:2c:1f:4b:
                    71:da:fa:62:41:a0:7c:38:05:07:8f:61:54:f4:b7:
                    ce:02:bd:39:f7:e9:46:34:89:8a:6f:b1:b4:8f:7c:
                    d7:76:e9:2c:4b:8d:b9:fc:ba:87:28:ac:69:ee:16:
                    c0:a3:61:6b:4c:f5:e2:88:fc:5f:2f:ff:cd:88:60:
                    fa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EE:95:7A:3F:1B:ED:40:8E:B1:C8:E7:7E:5B:13:32:48:48:A3:7E
            X509v3 Authority Key Identifier:
                keyid:97:BD:B2:D8:57:4B:A8:23:31:1B:04:2A:51:66:27:71:E0:8C:B1:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/333/l72y2FdLqCMxGwQqUWYnceCMsec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/l72y2FdLqCMxGwQqUWYnceCMsec.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/333/l72y2FdLqCMxGwQqUWYnceCMsec.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ca:28:69:a1:7c:04:f3:73:e8:15:2d:a3:d8:6e:e2:88:ff:
         fc:8c:09:9c:6c:4b:19:d9:ce:39:b2:41:9e:3f:be:4f:6e:bf:
         44:88:24:14:d1:0f:5d:24:9f:d0:af:79:e3:0d:51:cb:02:89:
         55:12:36:59:54:f9:c0:a7:75:65:fb:cb:1e:cc:c5:7e:ad:c0:
         23:39:ad:e7:4e:4d:de:36:a0:c0:ce:7d:be:58:64:23:95:48:
         5f:35:70:37:52:ad:74:aa:8d:f2:64:6e:ab:34:2d:30:01:7d:
         e3:ba:18:bf:6e:52:95:cf:bd:74:71:a9:08:b6:98:18:1e:84:
         1a:cd:4e:41:08:51:42:74:65:bb:2e:3e:24:18:c7:c1:fb:ee:
         3a:af:a7:9e:e2:92:f5:f1:6f:69:55:4d:d4:1a:6e:38:2c:cd:
         6a:58:02:89:4c:48:72:10:20:57:a6:51:fc:7d:f8:15:9e:dd:
         a5:3a:38:4f:5a:d4:ec:10:79:a1:54:28:c7:ed:4c:22:93:0d:
         b0:c4:ac:02:db:a1:49:33:36:35:e0:5d:3c:be:33:4f:23:56:
         d1:25:89:1e:88:d3:af:a0:d4:67:07:48:44:0e:6a:73:39:26:
         8b:a5:72:8e:50:30:99:b6:0c:9a:43:ad:56:7d:e9:3b:cb:bc:
         b4:67:42:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org