Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/531/CCK3vPfcmeUZE6DRGnZqJutRIOw.mft
File:                     CCK3vPfcmeUZE6DRGnZqJutRIOw.mft (raw, json)
Hash identifier:          cYGW9UMm1Y7xKtc74/TIAxCxKwVw79nQdMAb2TRusBk=
Subject key identifier:   B7:4B:61:DE:22:32:09:85:24:B2:13:1E:AE:A7:76:59:43:F3:62:77
Authority key identifier: 08:22:B7:BC:F7:DC:99:E5:19:13:A0:D1:1A:76:6A:26:EB:51:20:EC
Certificate issuer:       /CN=0822B7BCF7DC99E51913A0D11A766A26EB5120EC
Certificate serial:       11A4
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/CCK3vPfcmeUZE6DRGnZqJutRIOw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/531/CCK3vPfcmeUZE6DRGnZqJutRIOw.mft
Manifest number:          11A4
Signing time:             Tue 16 Jan 2024 01:21:02 +0000
Manifest this update:     Tue 16 Jan 2024 01:21:02 +0000
Manifest next update:     Tue 16 Jan 2024 07:21:02 +0000
Files and hashes:         1: CCK3vPfcmeUZE6DRGnZqJutRIOw.crl (hash: 7M5D8snHeInXoC2V7rfLfyhEnkPyH7VPYfzI0jf5Qzo=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4516 (0x11a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0822B7BCF7DC99E51913A0D11A766A26EB5120EC
        Validity
            Not Before: Jan 16 01:21:02 2024 GMT
            Not After : Jan 16 06:09:07 2024 GMT
        Subject: CN=B74B61DE2232098524B2131EAEA7765943F36277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d0:76:cc:52:3f:e9:13:16:16:b5:ae:94:dd:
                    d5:31:2f:69:95:c7:3c:70:3d:ff:25:1d:49:6f:0e:
                    88:b8:6f:69:8f:2b:6d:dd:d5:b5:aa:cc:f7:87:dd:
                    af:a2:28:d7:9e:b8:65:b3:77:fd:97:5e:10:5c:d2:
                    e1:41:f5:a1:3e:ba:0e:81:23:94:90:df:35:54:92:
                    27:9e:55:09:08:c2:b7:0f:47:73:a7:6f:6c:28:61:
                    dc:dc:9b:8f:e9:37:7d:7f:e8:d5:2e:3c:dd:39:0a:
                    56:2c:f6:2b:da:84:e8:2d:a1:22:51:b5:81:78:ac:
                    0c:cd:17:56:d8:f3:03:94:17:a5:79:a3:35:43:af:
                    68:be:a8:96:57:60:6c:c4:6a:93:9a:11:6b:18:1c:
                    d5:2a:39:50:e7:a2:96:cd:70:0e:f8:11:57:d1:c6:
                    54:2b:e8:a3:6d:b6:2f:2a:fe:98:2c:5e:1b:a1:0f:
                    b5:78:8a:4d:7d:82:64:03:da:d0:c8:60:63:dc:df:
                    7f:4b:d6:be:29:7e:24:6a:14:4b:6d:35:cc:2b:64:
                    28:75:67:ca:98:61:cd:dc:fb:b8:5e:d9:ac:1f:72:
                    d3:b3:5e:bd:6b:1e:32:48:e5:a6:f2:45:39:71:dc:
                    62:9e:f4:84:a1:bd:7c:4d:9a:b2:98:09:08:83:e1:
                    0e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4B:61:DE:22:32:09:85:24:B2:13:1E:AE:A7:76:59:43:F3:62:77
            X509v3 Authority Key Identifier:
                keyid:08:22:B7:BC:F7:DC:99:E5:19:13:A0:D1:1A:76:6A:26:EB:51:20:EC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/531/CCK3vPfcmeUZE6DRGnZqJutRIOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/CCK3vPfcmeUZE6DRGnZqJutRIOw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/531/CCK3vPfcmeUZE6DRGnZqJutRIOw.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:fd:e5:6f:16:e3:16:b0:fa:94:29:70:71:11:2b:5c:43:d1:
         c4:c1:cd:00:4f:62:76:37:e9:2c:8c:2c:05:01:c1:54:0c:97:
         9d:a9:fa:e9:0e:dc:eb:b5:a5:e6:18:69:08:8f:73:c9:9b:1c:
         b4:49:95:32:eb:4d:28:70:e6:3f:a0:67:08:04:89:ba:f0:02:
         3a:57:05:eb:fc:5f:2b:ce:3c:1c:bc:88:1c:c1:c2:b3:00:f5:
         c4:78:69:19:67:d3:79:c7:48:b5:c6:9a:7f:b2:06:75:dc:0e:
         b7:14:23:f0:ce:b7:d0:30:2c:c3:2a:65:37:cd:3c:7c:54:bc:
         c7:d0:cc:9e:90:40:45:ae:5e:65:3c:fa:9a:49:d5:65:8f:b4:
         90:9c:f8:9b:9f:85:22:ff:be:55:d8:92:94:98:1e:cf:b0:74:
         57:f6:8f:19:c9:56:4e:3b:d2:e2:47:8d:32:0c:62:a3:88:c1:
         f6:d6:4b:c8:74:68:e2:1e:60:47:b4:b6:df:27:86:11:d0:89:
         ac:bc:b8:63:14:e2:17:7b:a0:13:f5:fc:b4:29:ca:b8:3d:11:
         0a:8b:bf:09:04:ff:ed:1f:f4:55:67:7f:23:89:e8:14:02:2b:
         03:6f:5e:be:c0:f9:26:a9:85:9c:5e:a9:c2:12:84:bc:00:22:
         a2:8d:2d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 12:18:54 2024 by rpki-client on console-fra.rpki-client.org