Manifest

$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft
File:                     3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft (raw, json)
Hash identifier:          jix9l+XU70LN1v5iHP3WDB1yTIKYtwgsBzcmtqSbpDk=
Subject key identifier:   42:09:80:FD:B6:A2:02:A9:32:15:F6:29:5A:54:7D:75:BF:04:6D:17
Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59
Certificate issuer:       /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
Certificate serial:       2E037442885D557104AD6DD3FDC6B09CC9DEB9C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
Subject info access:      rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft
Manifest number:          025E
Signing time:             Sat 19 Oct 2024 00:36:55 +0000
Manifest this update:     Sat 19 Oct 2024 00:31:55 +0000
Manifest next update:     Sun 20 Oct 2024 03:22:55 +0000
Files and hashes:         1: 326131333a313830303a31303a3a2f34382d3438203d3e2034383432.roa (hash: n+dBxezcnyvbpsA1DkoKjK0otYEzrL6qtImkl7Iay2U=)
                          2: 326131333a313830303a3a2f33322d3434203d3e2034383432.roa (hash: I5a+abAosOJPG8nAa/FqALdUzzGDHagNqxX+0T6cCjg=)
                          3: 326131333a313830313a3138303a3a2f34332d3433203d3e2034383432.roa (hash: fvs9DYRlbYmgp6qG+QZj+epIb1tQpSfzEoTpz6kXssM=)
                          4: 3139342e3132372e3232392e302f32342d3234203d3e20313531343634.roa (hash: ptA8zh1keOHKQ+AEeS2Hfc2K+6B+PGjErQygT931+3k=)
                          5: 3139342e3132372e3232392e302f32342d3234203d3e2034383432.roa (hash: RKKPO8UDpirqQpMIIyUMOfTFwfGY1E8Nc1c5LB1yPVg=)
                          6: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl (hash: NHeaFo3GscpcU5hr3hp0o5ZDmDSW2HWbvYLS0X5lKpo=)
                          7: 326131333a313830303a3a2f34342d3438203d3e2034383432.roa (hash: +JnjSu27syQbPuR2W2pkxAuR4CDV8qCKQ87VKxU9nP0=)
                          8: 326131333a313830313a3138303a3a2f34332d3438203d3e20313531343634.roa (hash: kghmO1MItu7ETLt8/ETjEoas52eeGmwEP7VXy5Y5fGI=)
                          9: 326131333a313830323a3a2f33362d3434203d3e20323039333036.roa (hash: rjSuK2x5LJ9JpoRZOm9Ea1uvdttRpcujWNO9Yf0KkJE=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:03:74:42:88:5d:55:71:04:ad:6d:d3:fd:c6:b0:9c:c9:de:b9:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
        Validity
            Not Before: Oct 19 00:31:55 2024 GMT
            Not After : Oct 20 03:22:55 2024 GMT
        Subject: CN=420980FDB6A202A93215F6295A547D75BF046D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ff:8e:32:87:43:db:af:07:77:a3:71:9f:2b:
                    ef:e2:4f:60:f6:a8:24:d8:32:51:c9:73:ea:cc:de:
                    77:2e:81:de:95:fe:12:eb:8f:f3:1d:77:22:02:51:
                    09:c6:9e:40:6e:60:26:86:d4:0a:04:cb:65:a9:d1:
                    64:79:85:da:16:33:87:ca:d0:82:22:fc:ac:ad:60:
                    a6:67:4f:bc:ec:e5:bf:8e:7c:cb:0c:45:6f:c4:c9:
                    44:1b:f4:9c:80:cc:7d:ef:ee:2b:dd:24:e4:e5:cd:
                    ca:f5:de:15:61:0b:1c:5b:3f:76:50:16:bc:0e:b6:
                    a6:74:2d:1b:15:bc:de:d6:03:3c:23:d2:c6:ef:ce:
                    c3:a5:c3:da:0a:c5:08:33:fc:39:e3:4f:45:6e:33:
                    c2:11:a2:f5:80:42:43:df:aa:4d:29:53:79:17:74:
                    4b:12:d0:05:98:cb:98:34:95:75:5a:94:90:68:63:
                    dc:5a:69:04:0a:00:aa:39:64:a5:03:11:4a:5a:cb:
                    76:71:08:cc:ce:b6:ec:15:ba:2c:29:55:6e:46:98:
                    ff:8c:7e:a1:98:f2:98:a5:40:9d:70:4c:60:6c:b5:
                    1a:55:d7:7f:07:d4:30:11:9d:59:41:aa:a1:f0:5d:
                    68:28:c9:45:2f:6b:4b:29:8e:2c:32:d8:ec:65:f3:
                    ea:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:09:80:FD:B6:A2:02:A9:32:15:F6:29:5A:54:7D:75:BF:04:6D:17
            X509v3 Authority Key Identifier:
                keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:db:7d:13:33:07:5a:18:d2:6b:ef:d0:56:61:2d:2a:9c:6b:
         46:bb:1c:58:f4:2f:dd:94:fb:09:7b:25:8c:55:b6:8d:0d:ff:
         bd:c3:52:f1:ca:4d:b3:d8:ee:38:e9:2b:8f:ff:a4:55:eb:5f:
         8e:0a:20:96:2d:3b:3b:80:59:2e:bf:c8:c3:45:c8:64:68:27:
         87:d5:77:75:a8:6c:55:f5:4f:54:f7:c1:96:53:b2:84:16:bc:
         6e:be:9c:a5:d3:d3:b7:42:aa:52:cd:06:d4:0d:82:ea:e4:35:
         09:37:81:35:95:51:f6:1a:22:f6:b3:ee:7b:c5:83:62:f7:b7:
         7f:e7:6e:17:40:39:42:04:a4:85:8b:ba:a6:b0:08:b2:5f:07:
         00:50:6f:04:fc:55:46:8c:a2:ed:b8:f1:ad:5a:62:b5:97:8c:
         ee:85:b3:12:8b:82:7d:ba:da:30:9c:56:dc:4c:cd:0d:54:ff:
         27:cb:fd:39:62:a4:57:9d:7f:29:57:55:6e:ef:e8:a5:e0:2a:
         ee:d6:fb:d5:72:cc:30:ba:23:fc:a9:45:d4:2f:c1:12:31:bb:
         d9:10:7e:45:80:68:34:5c:c5:75:f2:6f:0d:09:7e:eb:d5:14:
         67:1c:d3:62:db:16:cd:47:80:cd:37:e7:3e:50:1e:7c:ec:47:
         11:a9:b0:d4
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgIULgN0QohdVXEErW3T/cawnMneucgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2NkZWMyNzM4NGFhZGU1Y2EwODA5ZmQ2ZjE2ZDJiY2Ex
OGJlYjY1OTAeFw0yNDEwMTkwMDMxNTVaFw0yNDEwMjAwMzIyNTVaMDMxMTAvBgNV
BAMTKDQyMDk4MEZEQjZBMjAyQTkzMjE1RjYyOTVBNTQ3RDc1QkYwNDZEMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY/44yh0Pbrwd3o3GfK+/iT2D2
qCTYMlHJc+rM3ncugd6V/hLrj/MddyICUQnGnkBuYCaG1AoEy2Wp0WR5hdoWM4fK
0IIi/KytYKZnT7zs5b+OfMsMRW/EyUQb9JyAzH3v7ivdJOTlzcr13hVhCxxbP3ZQ
FrwOtqZ0LRsVvN7WAzwj0sbvzsOlw9oKxQgz/DnjT0VuM8IRovWAQkPfqk0pU3kX
dEsS0AWYy5g0lXValJBoY9xaaQQKAKo5ZKUDEUpay3ZxCMzOtuwVuiwpVW5GmP+M
fqGY8pilQJ1wTGBstRpV138H1DARnVlBqqHwXWgoyUUva0spjiwy2Oxl8+qPAgMB
AAGjggH9MIIB+TAdBgNVHQ4EFgQUQgmA/baiAqkyFfYpWlR9db8EbRcwHwYDVR0j
BBgwFoAUPN7Cc4Sq3lyggJ/W8W0ryhi+tlkwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud
HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVw
by9UaWFuaGFpUnBraS8wLzNDREVDMjczODRBQURFNUNBMDgwOUZENkYxNkQyQkNB
MThCRUI2NTkuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6
Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9QTjdDYzRTcTNseWdn
Sl9XOFcwcnloaS10bGsuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4Zf
cnN5bmM6Ly9yc3luYy5ycGtpLnRpYW5oYWkubGluay9yZXBvL1RpYW5oYWlScGtp
LzAvM0NERUMyNzM4NEFBREU1Q0EwODA5RkQ2RjE2RDJCQ0ExOEJFQjY1OS5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAC7bfRMzB1oY0mvv0FZhLSqca0a7HFj0L92U+wl7JYxVto0N/73DUvHK
TbPY7jjpK4//pFXrX44KIJYtOzuAWS6/yMNFyGRoJ4fVd3WobFX1T1T3wZZTsoQW
vG6+nKXT07dCqlLNBtQNgurkNQk3gTWVUfYaIvaz7nvFg2L3t3/nbhdAOUIEpIWL
uqawCLJfBwBQbwT8VUaMou248a1aYrWXjO6FsxKLgn262jCcVtxMzQ1U/yfL/Tli
pFedfylXVW7v6KXgKu7W+9VyzDC6I/ypRdQvwRIxu9kQfkWAaDRcxXXybw0JfuvV
FGcc02LbFs1HgM035z5QHnzsRxGpsNQ=
-----END CERTIFICATE-----
Generated at Tue Oct 29 14:33:55 2024 by rpki-client on console-ams.rpki-client.org