Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/378/HyvT_FgAR7sT-SXU8sngoeOGTmU.mft
File:                     HyvT_FgAR7sT-SXU8sngoeOGTmU.mft (raw, json)
Hash identifier:          vQKX4n9yziKDK9IwFALfXRC/EYgu8PbNj6EiXe3ro9g=
Subject key identifier:   5B:C3:16:23:F7:A9:A6:A2:D0:A3:3A:AF:4E:29:C6:14:B1:34:11:9C
Authority key identifier: 1F:2B:D3:FC:58:00:47:BB:13:F9:25:D4:F2:C9:E0:A1:E3:86:4E:65
Certificate issuer:       /CN=1F2BD3FC580047BB13F925D4F2C9E0A1E3864E65
Certificate serial:       1AA5
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HyvT_FgAR7sT-SXU8sngoeOGTmU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/378/HyvT_FgAR7sT-SXU8sngoeOGTmU.mft
Manifest number:          1AA5
Signing time:             Fri 15 Nov 2024 01:52:10 +0000
Manifest this update:     Fri 15 Nov 2024 01:52:10 +0000
Manifest next update:     Fri 15 Nov 2024 07:52:10 +0000
Files and hashes:         1: HyvT_FgAR7sT-SXU8sngoeOGTmU.crl (hash: 4GuTauc8CWbEgfAaYDlUxuT1a1V+C46qR5ScmtD1Ci0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6821 (0x1aa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F2BD3FC580047BB13F925D4F2C9E0A1E3864E65
        Validity
            Not Before: Nov 15 01:52:10 2024 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=5BC31623F7A9A6A2D0A33AAF4E29C614B134119C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d3:4c:a2:f6:8a:8e:a9:6e:4c:0a:65:fe:fd:
                    69:09:e3:f9:7a:88:77:91:f9:93:f9:f5:a1:36:d2:
                    45:fa:a3:99:17:9f:24:b7:57:13:43:ad:13:a5:05:
                    aa:6b:40:c2:0a:ae:5b:4a:7c:da:66:c4:04:f9:97:
                    92:15:e9:c8:9d:91:86:86:e7:10:da:ad:db:3a:93:
                    ea:7a:00:13:4b:85:ba:17:17:e6:bc:b7:be:31:88:
                    38:ec:cc:f9:41:74:d5:77:70:6b:1a:e8:0f:c8:1a:
                    5c:27:64:a4:21:33:9b:fc:55:83:7e:e2:78:a3:b4:
                    e8:b6:60:b2:34:f4:51:8a:91:8e:3e:8b:ae:b8:7c:
                    87:38:a0:44:1c:ab:80:82:9a:e8:30:c9:20:24:a4:
                    b3:17:f4:0c:e2:a7:46:2d:fe:bc:13:fa:06:3d:3d:
                    e1:d2:e2:0c:f0:d0:a7:e6:9c:17:12:11:eb:68:f5:
                    a9:ce:fc:e9:53:6c:57:f5:de:bf:d8:1a:9c:c8:2c:
                    4d:bc:47:3a:80:fd:e5:7c:f1:2c:85:5b:55:1b:ee:
                    6c:35:2a:0c:9a:23:49:de:a2:78:ad:4b:ee:b1:45:
                    fc:a0:18:d3:58:2d:88:ea:ff:91:55:4a:18:33:32:
                    75:df:63:8d:98:b6:75:94:6e:5d:35:ff:fd:7a:dc:
                    73:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C3:16:23:F7:A9:A6:A2:D0:A3:3A:AF:4E:29:C6:14:B1:34:11:9C
            X509v3 Authority Key Identifier:
                keyid:1F:2B:D3:FC:58:00:47:BB:13:F9:25:D4:F2:C9:E0:A1:E3:86:4E:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/378/HyvT_FgAR7sT-SXU8sngoeOGTmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HyvT_FgAR7sT-SXU8sngoeOGTmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/378/HyvT_FgAR7sT-SXU8sngoeOGTmU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:41:f8:15:14:04:fd:cf:5b:33:b2:03:6d:7c:c0:0e:0d:47:
         7a:7e:c9:d9:3e:24:34:32:ce:43:ba:3e:2d:bb:43:fe:04:5a:
         38:ee:3c:05:31:3b:01:f3:06:2c:74:fd:8d:9b:c6:8e:5d:5a:
         28:cb:e7:23:3f:ca:28:e3:48:60:7f:b4:51:65:14:46:a5:e4:
         fd:c2:99:2f:47:f0:1c:cf:ad:3b:cd:08:dd:3b:08:05:42:a8:
         3f:dd:5b:9f:bc:02:8a:46:a7:c4:25:17:cd:06:15:3b:a7:2f:
         dc:52:30:04:dd:cc:d3:c4:c4:23:4c:03:1f:28:fd:da:f0:40:
         f2:8c:58:4d:1e:ad:b0:71:c0:04:66:42:6b:da:f6:66:98:87:
         c9:9b:60:5d:cf:a6:f4:91:e1:f7:ec:e1:75:1c:7f:4a:db:3c:
         47:60:56:22:c4:38:8e:57:e3:bb:ae:d8:42:01:98:b6:0b:10:
         d2:e6:1c:1c:f9:68:57:0a:74:c8:a6:74:87:1e:0c:3f:e3:7a:
         ff:ba:d4:cf:16:77:e5:0b:ef:0d:e2:62:19:e6:dd:25:40:e5:
         1e:3f:47:93:6d:6f:5a:c0:52:a9:59:b4:17:4a:ed:b4:bf:f3:
         7f:4d:b1:03:56:87:1c:d7:d9:2a:be:86:9e:2c:45:a7:fc:73:
         6a:10:b0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 07:16:31 2024 by rpki-client on console-ams.rpki-client.org