Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/583/1dMbAyNQokehCjrK_NcalSb7ArA.mft
File:                     1dMbAyNQokehCjrK_NcalSb7ArA.mft (raw, json)
Hash identifier:          ZUNBUKWON52P0nK/zDJBwEtc8lGxz1/Nlc36Xkw1THI=
Subject key identifier:   7C:AB:89:01:9F:CC:DE:93:0A:58:A2:21:AA:C7:92:9E:B2:E4:E4:27
Authority key identifier: D5:D3:1B:03:23:50:A2:47:A1:0A:3A:CA:FC:D7:1A:95:26:FB:02:B0
Certificate issuer:       /CN=D5D31B032350A247A10A3ACAFCD71A9526FB02B0
Certificate serial:       0735
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1dMbAyNQokehCjrK_NcalSb7ArA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/1dMbAyNQokehCjrK_NcalSb7ArA.mft
Manifest number:          0735
Signing time:             Thu 26 May 2022 20:25:16 +0000
Manifest this update:     Thu 26 May 2022 20:25:16 +0000
Manifest next update:     Fri 27 May 2022 02:25:16 +0000
Files and hashes:         1: 1dMbAyNQokehCjrK_NcalSb7ArA.crl (hash: +vExSldC2BGnBp/LRA8vn+q0sLebWjBjlD0XnIeJK4U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1845 (0x735)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5D31B032350A247A10A3ACAFCD71A9526FB02B0
        Validity
            Not Before: May 26 20:25:16 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=7CAB89019FCCDE930A58A221AAC7929EB2E4E427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bc:55:68:83:54:28:d8:f7:34:1d:a5:06:29:
                    42:c9:e5:22:bb:56:72:fe:df:95:a4:27:0f:80:43:
                    be:b0:ea:e0:13:a3:db:b6:af:5c:78:96:76:12:3d:
                    e7:93:2c:38:78:87:80:6d:a8:15:d4:0c:50:aa:60:
                    07:34:58:9a:f1:80:16:19:bb:a1:13:1e:b1:4d:47:
                    6c:87:78:de:54:86:63:00:1f:e2:50:d3:4a:82:b0:
                    55:81:f8:9a:9c:be:88:1f:38:7d:07:9c:5b:50:77:
                    3f:aa:ef:ab:2e:ef:17:b4:3d:bd:76:70:d6:7e:4a:
                    40:24:a5:b9:9b:01:f6:61:ef:c2:74:75:d9:5f:41:
                    fd:4a:c6:95:c6:f7:8a:a0:bf:34:e3:a5:cd:93:21:
                    9a:e3:66:3b:28:77:7e:c1:d0:b7:5d:15:8f:ca:ec:
                    33:ed:ce:28:ae:e9:e9:9b:2f:05:f9:3a:94:7d:dc:
                    40:e1:3f:e0:90:5b:56:72:23:52:a0:85:74:1d:66:
                    86:5b:6b:7f:f1:6a:cd:63:17:30:00:0b:b4:f4:56:
                    f9:20:a9:19:1b:3b:ff:dc:74:10:b1:42:93:59:3f:
                    50:b5:1e:eb:7a:1a:bf:60:39:dc:46:f3:2d:4d:07:
                    65:a4:bf:ea:42:fa:7f:dc:df:e6:00:95:89:9a:39:
                    c0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AB:89:01:9F:CC:DE:93:0A:58:A2:21:AA:C7:92:9E:B2:E4:E4:27
            X509v3 Authority Key Identifier:
                keyid:D5:D3:1B:03:23:50:A2:47:A1:0A:3A:CA:FC:D7:1A:95:26:FB:02:B0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/1dMbAyNQokehCjrK_NcalSb7ArA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1dMbAyNQokehCjrK_NcalSb7ArA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/1dMbAyNQokehCjrK_NcalSb7ArA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:7f:4b:49:e1:2b:0c:f1:6d:70:da:c1:2a:fe:84:0d:b4:e6:
         39:e4:7c:50:46:9e:6f:bd:ce:65:16:8c:56:72:c6:7a:75:79:
         e6:de:2e:83:d9:7d:84:a8:ed:c4:7f:15:f5:ca:6c:8f:49:5b:
         9f:e5:ab:64:35:2b:39:7f:64:3b:30:a3:0c:43:4a:1b:b4:9c:
         bc:ca:a1:b8:e1:b2:e3:20:ef:56:eb:6a:a8:17:eb:e3:25:cd:
         4c:dd:f2:4f:51:0b:d8:b5:ea:83:3c:e0:81:62:68:69:88:cf:
         29:28:0e:3c:83:db:da:55:88:6f:48:8f:31:93:b8:09:92:3f:
         25:ee:00:9e:cc:df:82:ce:92:7b:01:db:4c:c9:0f:46:92:48:
         1f:cc:3f:d5:ac:30:b5:44:c2:ad:23:6c:f7:89:fc:58:b5:03:
         92:ed:cb:c9:8d:7c:7a:18:8a:c4:ef:6c:4a:da:44:5f:66:e4:
         51:7b:52:de:e3:a2:b3:72:09:5a:57:03:05:51:3d:cf:a8:9a:
         d2:07:bc:5d:bd:99:a1:57:51:da:f0:8c:cb:3b:34:a1:c4:51:
         8d:b2:07:a6:22:e5:a2:10:b0:88:16:ea:45:9b:6b:fe:f0:99:
         ec:ed:56:87:5c:e4:88:78:23:39:78:40:16:1b:45:76:c2:b8:
         ec:bc:14:f9
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICBzUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDVE
MzFCMDMyMzUwQTI0N0ExMEEzQUNBRkNENzFBOTUyNkZCMDJCMDAeFw0yMjA1MjYy
MDI1MTZaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKDdDQUI4OTAxOUZDQ0RF
OTMwQTU4QTIyMUFBQzc5MjlFQjJFNEU0MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBvFVog1Qo2Pc0HaUGKULJ5SK7VnL+35WkJw+AQ76w6uATo9u2
r1x4lnYSPeeTLDh4h4BtqBXUDFCqYAc0WJrxgBYZu6ETHrFNR2yHeN5UhmMAH+JQ
00qCsFWB+JqcvogfOH0HnFtQdz+q76su7xe0Pb12cNZ+SkAkpbmbAfZh78J0ddlf
Qf1KxpXG94qgvzTjpc2TIZrjZjsod37B0LddFY/K7DPtziiu6embLwX5OpR93EDh
P+CQW1ZyI1KghXQdZoZba3/xas1jFzAAC7T0VvkgqRkbO//cdBCxQpNZP1C1Hut6
Gr9gOdxG8y1NB2Wkv+pC+n/c3+YAlYmaOcBHAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUfKuJAZ/M3pMKWKIhqseSnrLk5CcwHwYDVR0jBBgwFoAU1dMbAyNQokehCjrK
/NcalSb7ArAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTgz
LzFkTWJBeU5Rb2tlaENqcktfTmNhbFNiN0FyQS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvMWRNYkF5TlFva2VoQ2pyS19OY2FsU2I3QXJBLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTgzLzFkTWJBeU5Rb2tlaENq
cktfTmNhbFNiN0FyQS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBUf0tJ4SsM8W1w2sEq/oQNtOY55HxQRp5vvc5lFoxWcsZ6dXnm3i6D2X2EqO3E
fxX1ymyPSVuf5atkNSs5f2Q7MKMMQ0obtJy8yqG44bLjIO9W62qoF+vjJc1M3fJP
UQvYteqDPOCBYmhpiM8pKA48g9vaVYhvSI8xk7gJkj8l7gCezN+CzpJ7AdtMyQ9G
kkgfzD/VrDC1RMKtI2z3ifxYtQOS7cvJjXx6GIrE72xK2kRfZuRRe1Le46Kzcgla
VwMFUT3PqJrSB7xdvZmhV1Ha8IzLOzShxFGNsgemIuWiELCIFupFm2v+8Jns7VaH
XOSIeCM5eEAWG0V2wrjsvBT5
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:36 2024 by rpki-client on console-ams.rpki-client.org