Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/589/vW24_rI-BQ0W6bQI_Wz7kH374ik.mft
File:                     vW24_rI-BQ0W6bQI_Wz7kH374ik.mft (raw, json)
Hash identifier:          BRPcLFrzgMy+6LaGFqb+QpXHWA39MyF2srTGPLhIqGo=
Subject key identifier:   DD:90:DE:A7:3A:31:74:91:C0:C4:EC:2E:E5:9E:4E:B4:BC:5C:3E:0B
Authority key identifier: BD:6D:B8:FE:B2:3E:05:0D:16:E9:B4:08:FD:6C:FB:90:7D:FB:E2:29
Certificate issuer:       /CN=BD6DB8FEB23E050D16E9B408FD6CFB907DFBE229
Certificate serial:       0DD3
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vW24_rI-BQ0W6bQI_Wz7kH374ik.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/589/vW24_rI-BQ0W6bQI_Wz7kH374ik.mft
Manifest number:          0DD3
Signing time:             Sun 08 Jan 2023 09:16:19 +0000
Manifest this update:     Sun 08 Jan 2023 09:16:19 +0000
Manifest next update:     Sun 08 Jan 2023 15:16:19 +0000
Files and hashes:         1: vW24_rI-BQ0W6bQI_Wz7kH374ik.crl (hash: PH/6pfR7CZy6nqJvtrrQyhtYgZSUFH3J1Y54BROY6h0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3539 (0xdd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD6DB8FEB23E050D16E9B408FD6CFB907DFBE229
        Validity
            Not Before: Jan  8 09:16:19 2023 GMT
            Not After : Jan  6 08:35:17 2024 GMT
        Subject: CN=DD90DEA73A317491C0C4EC2EE59E4EB4BC5C3E0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f1:cb:12:7c:c1:a2:a9:eb:91:24:32:b9:a7:
                    f4:0c:87:fc:34:a7:b2:8e:e7:8b:cc:a9:a5:0d:ac:
                    06:df:26:0f:47:37:cf:47:71:15:99:c4:d7:97:95:
                    df:04:01:8e:9c:4e:a8:1f:9a:84:01:c0:aa:93:fd:
                    17:71:87:70:82:1a:c4:3f:24:84:d5:0a:21:74:1b:
                    c3:d5:88:00:86:07:79:ad:5b:ef:3e:79:b9:96:c0:
                    f1:ad:e1:7f:21:ee:5e:d6:eb:ea:38:3c:e1:e5:24:
                    d6:4f:bb:95:93:d9:f0:d6:a0:1f:94:48:03:5f:a7:
                    e5:67:81:9b:88:df:7b:30:3d:66:2c:5d:8d:43:ad:
                    1d:03:9d:7e:d7:54:14:06:e8:28:56:e5:b4:67:b4:
                    7e:70:e2:81:28:7e:92:94:ac:70:9b:7b:c5:8b:78:
                    e5:fe:16:14:16:d3:1b:47:85:98:4f:51:51:58:89:
                    5c:03:8e:da:3a:db:8d:4e:06:c5:93:e6:e7:0e:e0:
                    2c:49:59:35:9b:b2:90:22:d9:b6:0b:c9:ac:55:f1:
                    26:19:59:74:e6:07:eb:04:6f:bd:fa:73:41:92:86:
                    4d:fa:f3:ff:f0:54:b8:c2:43:e7:81:f9:7f:63:d3:
                    32:d8:e9:96:62:6f:f4:73:4b:43:4c:4e:0f:7e:dd:
                    8b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:90:DE:A7:3A:31:74:91:C0:C4:EC:2E:E5:9E:4E:B4:BC:5C:3E:0B
            X509v3 Authority Key Identifier:
                keyid:BD:6D:B8:FE:B2:3E:05:0D:16:E9:B4:08:FD:6C:FB:90:7D:FB:E2:29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/589/vW24_rI-BQ0W6bQI_Wz7kH374ik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vW24_rI-BQ0W6bQI_Wz7kH374ik.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/589/vW24_rI-BQ0W6bQI_Wz7kH374ik.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:93:6a:1c:ba:74:be:ae:95:69:98:9c:18:92:d5:3a:c2:36:
         f4:2c:04:bd:18:d7:1a:b7:f2:e3:17:cd:82:62:73:df:88:28:
         63:cf:e3:0f:7a:95:2f:f2:d6:a4:db:e6:a4:ce:c7:ea:22:af:
         f9:1e:d0:24:9b:62:c5:13:26:e3:cd:1f:28:74:cc:d6:b2:8e:
         be:89:e9:f3:4e:e7:0f:a2:12:82:99:0d:80:ab:33:8a:80:06:
         00:e6:68:f8:e7:1d:7b:45:a9:2f:43:e2:26:6f:c6:85:63:c4:
         25:07:54:13:a7:d7:9c:7e:03:47:39:9a:ab:c1:45:6a:16:12:
         b5:4b:a6:27:14:be:66:a5:ad:3c:03:90:27:7c:78:c7:78:32:
         eb:44:61:a5:03:bd:b3:63:3e:68:a3:07:8d:25:45:26:14:bf:
         3e:5b:67:3d:44:98:5d:6e:ae:e2:71:c3:91:29:6d:77:34:57:
         78:9e:bd:db:32:8e:c8:ad:a3:e7:29:8b:2b:85:16:e7:0e:1c:
         c4:c0:a6:14:c4:95:6c:92:d9:02:74:10:47:ac:af:c2:27:21:
         78:b3:27:32:86:16:9f:97:3f:1d:fe:cb:a8:41:d8:39:2b:e4:
         26:f7:9a:19:93:97:c2:9a:ca:fc:2a:8f:8a:51:97:c6:b1:83:
         f2:cc:30:61
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICDdMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkQ2
REI4RkVCMjNFMDUwRDE2RTlCNDA4RkQ2Q0ZCOTA3REZCRTIyOTAeFw0yMzAxMDgw
OTE2MTlaFw0yNDAxMDYwODM1MTdaMDMxMTAvBgNVBAMTKEREOTBERUE3M0EzMTc0
OTFDMEM0RUMyRUU1OUU0RUI0QkM1QzNFMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDC8csSfMGiqeuRJDK5p/QMh/w0p7KO54vMqaUNrAbfJg9HN89H
cRWZxNeXld8EAY6cTqgfmoQBwKqT/Rdxh3CCGsQ/JITVCiF0G8PViACGB3mtW+8+
ebmWwPGt4X8h7l7W6+o4POHlJNZPu5WT2fDWoB+USANfp+VngZuI33swPWYsXY1D
rR0DnX7XVBQG6ChW5bRntH5w4oEofpKUrHCbe8WLeOX+FhQW0xtHhZhPUVFYiVwD
jto6241OBsWT5ucO4CxJWTWbspAi2bYLyaxV8SYZWXTmB+sEb736c0GShk368//w
VLjCQ+eB+X9j0zLY6ZZib/RzS0NMTg9+3YtzAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQU3ZDepzoxdJHAxOwu5Z5OtLxcPgswHwYDVR0jBBgwFoAUvW24/rI+BQ0W6bQI
/Wz7kH374ikwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTg5
L3ZXMjRfckktQlEwVzZiUUlfV3o3a0gzNzRpay5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdlcyNF9ySS1CUTBXNmJRSV9XejdrSDM3NGlrLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTg5L3ZXMjRfckktQlEwVzZi
UUlfV3o3a0gzNzRpay5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBFk2ocunS+rpVpmJwYktU6wjb0LAS9GNcat/LjF82CYnPfiChjz+MPepUv8tak
2+akzsfqIq/5HtAkm2LFEybjzR8odMzWso6+ienzTucPohKCmQ2AqzOKgAYA5mj4
5x17RakvQ+Imb8aFY8QlB1QTp9ecfgNHOZqrwUVqFhK1S6YnFL5mpa08A5AnfHjH
eDLrRGGlA72zYz5ooweNJUUmFL8+W2c9RJhdbq7iccORKW13NFd4nr3bMo7IraPn
KYsrhRbnDhzEwKYUxJVsktkCdBBHrK/CJyF4sycyhhaflz8d/suoQdg5K+Qm95oZ
k5fCmsr8Ko+KUZfGsYPyzDBh
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:36 2024 by rpki-client on console-ams.rpki-client.org