Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1628/mXwN1JSBnpwfO_06qYAx_vjrfaM.mft
File:                     mXwN1JSBnpwfO_06qYAx_vjrfaM.mft (raw, json)
Hash identifier:          51PPu7Y+3z3FpnXsAfmJVJMi+CCqZMRFbGTsu9xXol4=
Subject key identifier:   C5:FA:8B:ED:7B:BF:A0:EC:97:95:23:CC:FF:61:70:4D:A5:6C:3B:69
Authority key identifier: 99:7C:0D:D4:94:81:9E:9C:1F:3B:FD:3A:A9:80:31:FE:F8:EB:7D:A3
Certificate issuer:       /CN=997C0DD494819E9C1F3BFD3AA98031FEF8EB7DA3
Certificate serial:       0E94
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mXwN1JSBnpwfO_06qYAx_vjrfaM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1628/mXwN1JSBnpwfO_06qYAx_vjrfaM.mft
Manifest number:          0E92
Signing time:             Wed 01 Mar 2023 09:45:43 +0000
Manifest this update:     Wed 01 Mar 2023 09:45:43 +0000
Manifest next update:     Wed 01 Mar 2023 15:45:43 +0000
Files and hashes:         1: mXwN1JSBnpwfO_06qYAx_vjrfaM.crl (hash: Fh4DKnCR5E2amIfqEYco1aw5OjlLqtsXYyxz8ICFqeU=)
                          2: zyqKrSsEQTh-uxoqaeQhTj2xlAc.roa (hash: 0tGTwFblaUxh+2jH1Kjjs89C9ovJ2U0VII/EASpm4cc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3732 (0xe94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997C0DD494819E9C1F3BFD3AA98031FEF8EB7DA3
        Validity
            Not Before: Mar  1 09:45:43 2023 GMT
            Not After : Feb 17 02:46:59 2024 GMT
        Subject: CN=C5FA8BED7BBFA0EC979523CCFF61704DA56C3B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:13:f2:a7:be:3b:a0:dd:e7:d6:4a:47:51:6e:
                    5a:30:ae:84:d6:de:90:ba:11:b1:50:a7:d1:f4:03:
                    8e:81:c2:0f:1f:23:03:7b:a1:e6:60:97:af:b0:e3:
                    1a:7d:f7:c8:3f:a3:3d:00:11:88:0b:64:9e:c9:82:
                    46:23:ec:54:4d:66:b0:41:cb:b6:03:a2:70:23:02:
                    02:c2:f9:e3:82:93:aa:7c:ee:66:3f:ea:6b:b3:5a:
                    f4:41:df:fe:6b:9b:99:63:6d:cc:7b:c7:78:7d:32:
                    f5:9d:da:46:4e:82:f0:69:f6:66:c9:00:50:23:72:
                    91:02:95:52:11:d9:58:d6:12:07:b8:64:65:d4:32:
                    84:c0:6d:5e:43:6f:70:ae:33:ed:bb:3a:fa:4f:e5:
                    7f:f8:68:0c:f7:ba:de:bc:9f:c4:8d:b5:85:82:81:
                    2c:2a:44:35:94:bf:0c:9b:4f:d2:29:aa:60:b5:65:
                    fe:c6:a0:03:b2:fd:0d:7f:dd:c0:3c:5d:e4:8d:f1:
                    46:69:69:9b:7a:2e:63:ca:67:6d:ce:ce:4b:e8:78:
                    5b:7e:e8:63:04:8f:cc:59:5b:39:9c:fd:35:4f:32:
                    96:65:21:ad:9e:0e:17:1f:ac:d2:7d:0f:f4:40:b7:
                    d8:47:f8:f5:1b:1f:48:c3:ac:ee:f6:22:1b:79:81:
                    e2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FA:8B:ED:7B:BF:A0:EC:97:95:23:CC:FF:61:70:4D:A5:6C:3B:69
            X509v3 Authority Key Identifier:
                keyid:99:7C:0D:D4:94:81:9E:9C:1F:3B:FD:3A:A9:80:31:FE:F8:EB:7D:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1628/mXwN1JSBnpwfO_06qYAx_vjrfaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mXwN1JSBnpwfO_06qYAx_vjrfaM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1628/mXwN1JSBnpwfO_06qYAx_vjrfaM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:d9:4b:09:77:ce:f8:4d:40:93:a9:08:cc:eb:a8:aa:8b:80:
         a5:fc:01:05:c3:ba:7e:74:d4:cd:9e:19:5c:45:06:c9:46:ad:
         45:07:97:49:33:1f:55:f8:17:a2:d9:9b:52:a7:59:99:26:3c:
         4a:ad:0b:57:7d:e5:93:b8:56:4a:ea:f4:b5:09:9c:33:c9:bb:
         ad:0c:dd:f8:83:66:d2:83:15:11:de:17:a6:e9:fe:9b:a5:bd:
         39:5f:f3:ad:ba:ac:9a:00:a3:0d:52:7d:a7:b9:29:92:3b:90:
         45:c8:87:27:67:b2:f8:75:28:79:8f:16:5a:fc:47:d6:22:19:
         2c:fe:82:c8:12:3a:a2:09:f3:26:7c:95:9a:97:3c:9f:8c:f1:
         a2:66:6c:f8:36:f8:f7:ba:19:ea:20:b5:28:50:b4:b4:87:18:
         9a:9f:3c:1e:26:48:9d:f0:fe:c5:17:3e:dd:75:f7:a6:b5:2a:
         97:dc:c3:7c:bd:c1:3a:2c:31:25:bd:a8:f5:ba:9f:ed:bc:ea:
         d2:9a:09:17:ee:97:bb:39:f8:cc:66:ce:79:91:e8:b8:07:bf:
         f9:43:0c:ab:77:47:e7:f2:3d:f0:72:b3:a1:0a:b4:0c:12:b3:
         4c:57:1c:dc:76:c4:17:2b:d3:a0:d9:02:c6:e7:33:b6:dd:f0:
         67:0f:58:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:16 2023 by rpki-client on console.sobornost.net