Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.mft
File:                     78pGd_Mh9N8jFzkfmOIjZGdF5-4.mft (raw, json)
Hash identifier:          qSQncRZ4NlfdmeDEi357Pc2sl0lOnfvMrlNABbXBeWI=
Subject key identifier:   24:10:06:95:B2:66:8A:43:51:75:F1:22:95:B0:8B:08:7A:7D:A4:0E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Certificate issuer:       /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial:       1DB5
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.mft
Manifest number:          154F
Signing time:             Thu 09 May 2024 04:24:52 +0000
Manifest this update:     Thu 09 May 2024 04:24:51 +0000
Manifest next update:     Thu 09 May 2024 10:24:51 +0000
Files and hashes:         1: 78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl (hash: 4NKemTgRG+0oEtKuJ2cPWvxRJfjipDqMTEukPzAW5sk=)
                          2: OaH8P1qSbT_x864HDJT0B6dhBoI.roa (hash: leoC29oiz5TsVepoqSI5jjaOQMGkcIBJzWdBcu8T2Uw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7605 (0x1db5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
        Validity
            Not Before: May  9 04:24:51 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=24100695B2668A435175F12295B08B087A7DA40E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:39:c6:f5:d9:89:a9:b6:38:5e:a3:b6:10:0a:
                    d7:62:3e:1d:12:6a:cb:e1:5a:3e:b0:6c:8e:cb:6a:
                    32:83:0b:20:97:25:7e:a2:b0:26:66:32:e9:c7:1a:
                    1d:fa:49:22:c8:21:70:66:9b:37:3c:a7:2d:ea:27:
                    1b:5b:c1:42:b9:77:66:13:34:b0:a6:2b:7a:c5:49:
                    c5:eb:fe:12:41:a6:b5:19:ac:7a:fe:12:63:aa:e5:
                    e7:04:2d:4b:22:95:54:7f:76:08:1d:3e:57:02:bf:
                    ec:cc:21:bb:07:73:6b:20:f9:e1:61:6b:a9:39:ab:
                    24:e5:02:46:05:bf:aa:f7:d5:39:a9:c4:37:fb:2c:
                    78:66:c0:99:11:ef:0f:66:20:8b:2a:5b:9e:b2:e7:
                    a0:07:61:e7:81:22:50:eb:fe:e4:a3:43:e4:8f:f2:
                    db:bb:78:26:99:09:1e:f0:fc:3e:c1:a8:35:af:75:
                    27:53:b8:b8:0d:ab:a0:92:13:02:3f:5c:92:47:b0:
                    34:0a:54:32:60:db:f1:8e:e3:76:94:bf:1d:03:bb:
                    68:0e:b6:59:c2:fc:f1:40:35:82:08:53:40:45:27:
                    84:a1:db:09:e5:ba:e1:a9:22:4d:2d:16:34:58:8d:
                    6f:54:48:57:58:f1:8b:36:ce:e1:e7:2a:6b:05:63:
                    6c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:10:06:95:B2:66:8A:43:51:75:F1:22:95:B0:8B:08:7A:7D:A4:0E
            X509v3 Authority Key Identifier:
                keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:96:10:1d:d3:4b:0d:08:41:18:00:dc:87:87:89:16:1a:87:
         e8:fd:a8:9a:e5:bc:b9:3e:38:8e:b3:8f:33:32:d3:1a:e5:a0:
         90:84:95:c1:d5:54:04:5e:2b:3b:63:74:30:74:2f:52:a1:c4:
         d5:a0:c1:db:da:c8:6a:61:20:a0:88:6f:65:df:78:09:50:a9:
         95:9e:0b:86:ec:00:f8:54:e6:6c:ec:ef:04:5e:91:32:0c:20:
         71:97:0b:d3:41:d5:bf:f4:03:bc:5c:fc:10:01:8a:ad:d7:f6:
         75:f2:e8:66:2f:7b:d4:21:7f:58:70:1f:8d:b9:92:52:f5:c1:
         09:9a:b5:7e:2b:88:84:85:fe:bc:77:49:e1:25:11:aa:f7:f6:
         f7:96:7b:68:32:6c:8e:45:34:78:20:69:7a:eb:fb:25:e8:b3:
         db:5c:47:4c:21:d9:b5:ef:32:2f:2a:78:c6:3d:9a:ee:8f:b1:
         d9:fc:50:7d:7d:90:e1:59:9e:5a:70:b2:29:3c:34:7d:36:a1:
         96:bf:a2:a1:09:46:14:ab:ed:53:df:24:4b:c8:6e:fc:b5:ad:
         20:0d:f0:e6:e2:88:44:c1:18:52:d1:c6:75:33:72:39:e5:0e:
         02:62:56:f4:8a:7e:d1:37:15:69:59:92:a9:3e:3c:84:19:2b:
         4c:8f:ed:79
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICHbUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA1MDkw
NDI0NTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDI0MTAwNjk1QjI2NjhB
NDM1MTc1RjEyMjk1QjA4QjA4N0E3REE0MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDOcb12Ymptjheo7YQCtdiPh0SasvhWj6wbI7LajKDCyCXJX6i
sCZmMunHGh36SSLIIXBmmzc8py3qJxtbwUK5d2YTNLCmK3rFScXr/hJBprUZrHr+
EmOq5ecELUsilVR/dggdPlcCv+zMIbsHc2sg+eFha6k5qyTlAkYFv6r31TmpxDf7
LHhmwJkR7w9mIIsqW56y56AHYeeBIlDr/uSjQ+SP8tu7eCaZCR7w/D7BqDWvdSdT
uLgNq6CSEwI/XJJHsDQKVDJg2/GO43aUvx0Du2gOtlnC/PFANYIIU0BFJ4Sh2wnl
uuGpIk0tFjRYjW9USFdY8Ys2zuHnKmsFY2zbAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUJBAGlbJmikNRdfEilbCLCHp9pA4wHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzc4cEdkX01oOU44akZ6
a2ZtT0lqWkdkRjUtNC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAJlhAd00sNCEEYANyHh4kWGofo/aia5by5PjiOs48zMtMa5aCQhJXB1VQEXis7
Y3QwdC9SocTVoMHb2shqYSCgiG9l33gJUKmVnguG7AD4VOZs7O8EXpEyDCBxlwvT
QdW/9AO8XPwQAYqt1/Z18uhmL3vUIX9YcB+NuZJS9cEJmrV+K4iEhf68d0nhJRGq
9/b3lntoMmyORTR4IGl66/sl6LPbXEdMIdm17zIvKnjGPZruj7HZ/FB9fZDhWZ5a
cLIpPDR9NqGWv6KhCUYUq+1T3yRLyG78ta0gDfDm4ohEwRhS0cZ1M3I55Q4CYlb0
in7RNxVpWZKpPjyEGStMj+15
-----END CERTIFICATE-----
Generated at Thu May 9 09:43:34 2024 by rpki-client on console-fra.rpki-client.org