Manifest

$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
File:                     459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft (raw, json)
Hash identifier:          v/KIDxQPC1Hd+FMV+4KTTH/hfgzLVYk76TiCUey/Tes=
Subject key identifier:   9E:BC:1C:27:E6:1D:7A:1E:52:BA:EC:EB:FA:B3:D4:5A:15:89:E1:3E
Authority key identifier: 45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F
Certificate issuer:       /CN=A91F56750000/serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
Certificate serial:       2C407E295A81FE58B13DB3F63D8F623E5B7AC2CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
Subject info access:      rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
Manifest number:          025A
Signing time:             Sat 19 Oct 2024 03:31:55 +0000
Manifest this update:     Sat 19 Oct 2024 03:26:55 +0000
Manifest next update:     Sun 20 Oct 2024 06:17:55 +0000
Files and hashes:         1: 3130332e3135302e3137322e302f32332d3234203d3e2034383432.roa (hash: khIuZjwZoSaiZsTYR9yOkhQqW1vTO+y7JNzYp+RM+Jo=)
                          2: 323430313a32303a3a2f33322d3430203d3e2034383432.roa (hash: w/GWWEWlzxWeQV7jbdIZxJ6YYRkL5l/+Mu/dma84kd8=)
                          3: 3130332e3135302e3137322e302f32332d3234203d3e203338303038.roa (hash: PVDMOTIHc0Ci+Izu7LqmiHEXNyVdYhr5+8jlMIJ0/ZQ=)
                          4: 459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl (hash: WVfZkfKZgKJHCMOFJOa0ZrUGXhR0bCajxaRpZEFWoqQ=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:40:7e:29:5a:81:fe:58:b1:3d:b3:f6:3d:8f:62:3e:5b:7a:c2:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F56750000/serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
        Validity
            Not Before: Oct 19 03:26:55 2024 GMT
            Not After : Oct 20 06:17:55 2024 GMT
        Subject: CN=9EBC1C27E61D7A1E52BAECEBFAB3D45A1589E13E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:12:4a:38:5f:46:33:14:3a:10:a1:7c:ef:66:
                    4b:fd:31:bc:43:ae:4d:7c:bd:50:3b:7b:06:3f:04:
                    e0:53:1b:54:66:0b:a5:a3:42:a1:2a:89:05:14:0a:
                    ef:29:ac:c6:90:7c:50:11:39:29:b1:45:d1:7e:35:
                    85:4a:f0:86:1e:e7:d7:ea:b3:ef:f6:62:e8:f5:c0:
                    76:fd:4e:df:c9:0c:44:dd:cd:88:4b:47:25:5f:6a:
                    db:4c:bc:b6:c3:48:5e:e9:cf:15:1e:e2:63:d2:45:
                    05:14:4b:12:14:75:91:a1:a1:e3:2c:79:2e:ae:b6:
                    49:4f:5d:48:d1:0b:07:05:04:03:7d:9d:7f:36:cb:
                    cf:5f:a2:04:2b:d2:b8:23:3e:23:6a:42:f6:cf:15:
                    fc:99:cd:a9:00:e0:a9:de:08:b5:eb:64:75:7f:73:
                    e7:6e:2a:1e:dd:46:34:f2:ef:f1:2a:1b:09:72:b2:
                    4d:c1:c4:1d:71:76:ec:03:76:8b:67:57:98:fa:6d:
                    21:7c:87:42:f5:3c:4d:b1:b6:9f:cc:97:df:9f:dc:
                    7e:e0:ff:28:bd:19:b3:9f:d5:fe:ee:87:d0:e2:43:
                    04:70:b1:a7:89:e3:42:ea:11:59:84:ff:be:5a:a1:
                    90:59:3e:b9:dc:ae:a1:75:03:a7:4d:31:ea:fb:5d:
                    c7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BC:1C:27:E6:1D:7A:1E:52:BA:EC:EB:FA:B3:D4:5A:15:89:E1:3E
            X509v3 Authority Key Identifier:
                keyid:45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:fa:07:dc:15:1c:10:1f:65:9f:04:a1:fc:0b:4b:fb:c1:36:
         de:6d:91:0f:c8:e1:e7:e0:73:15:22:e4:6c:9d:0e:fa:80:cf:
         e5:17:67:e5:12:1d:5e:a8:d7:59:ad:b9:61:b9:41:9d:87:0d:
         f5:b0:95:a6:26:1e:ae:d9:a9:1b:38:2b:bd:b0:00:8f:25:96:
         ad:ac:2f:f6:ac:ea:0f:8d:a2:fb:79:d9:0d:f6:48:52:86:b5:
         ad:ab:1c:af:f6:55:bf:94:79:93:77:88:c5:af:07:10:93:80:
         d7:0b:a4:07:8a:5a:99:ff:52:d7:8b:ba:56:6c:58:7c:11:a6:
         2f:36:e5:13:00:64:50:b4:89:1c:6c:48:a8:11:35:dd:27:ca:
         72:24:07:3a:1e:bb:3d:ec:ff:ff:a9:93:f2:33:b5:18:4a:6e:
         fb:95:c5:9e:5e:ac:84:a9:c7:a2:ef:d2:6c:59:39:40:04:20:
         01:63:8b:2e:46:69:9c:89:ab:89:2f:54:91:f3:6a:3c:41:44:
         b9:4e:67:b7:3a:3f:0c:59:7e:35:cc:7c:63:83:ae:fe:c3:9d:
         ec:c7:e4:a5:99:61:d9:8f:c3:cd:ea:ec:5c:b7:64:d0:6c:ba:
         08:91:73:af:cd:52:55:1f:a7:38:ab:8d:3d:f1:af:7e:67:66:
         2f:f8:90:2a
-----BEGIN CERTIFICATE-----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