Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2417/_kCLChfM0YvSz40HuUVC3dTs1J0.mft
File:                     _kCLChfM0YvSz40HuUVC3dTs1J0.mft (raw, json)
Hash identifier:          LVt0xkMGBuqROoXs+SvG2lFxksST5C+8bPM189+4AL4=
Subject key identifier:   AD:AE:A2:C0:10:FC:75:E8:BC:AF:ED:65:D0:7C:99:60:2D:92:58:D3
Authority key identifier: FE:40:8B:0A:17:CC:D1:8B:D2:CF:8D:07:B9:45:42:DD:D4:EC:D4:9D
Certificate issuer:       /CN=FE408B0A17CCD18BD2CF8D07B94542DDD4ECD49D
Certificate serial:       0F61
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_kCLChfM0YvSz40HuUVC3dTs1J0.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2417/_kCLChfM0YvSz40HuUVC3dTs1J0.mft
Manifest number:          0F61
Signing time:             Fri 14 Apr 2023 01:56:19 +0000
Manifest this update:     Fri 14 Apr 2023 01:56:19 +0000
Manifest next update:     Fri 14 Apr 2023 07:56:19 +0000
Files and hashes:         1: _kCLChfM0YvSz40HuUVC3dTs1J0.crl (hash: 3zq2IyGn4dLnSPz+Rryp68kG04Du4QVQey68k9sg46w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3937 (0xf61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE408B0A17CCD18BD2CF8D07B94542DDD4ECD49D
        Validity
            Not Before: Apr 14 01:56:19 2023 GMT
            Not After : Mar 27 01:13:10 2024 GMT
        Subject: CN=ADAEA2C010FC75E8BCAFED65D07C99602D9258D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8d:61:f2:82:cc:bc:2e:72:12:68:6d:c7:2f:
                    c4:0f:fb:4c:58:85:f0:5c:68:93:22:cd:52:86:0f:
                    ba:ec:84:7b:c0:a0:2a:89:fd:f6:48:b5:f2:8c:3d:
                    48:c1:fd:08:14:76:be:6c:67:33:f9:47:23:6d:b8:
                    a2:e2:d2:f9:ce:97:cd:95:88:03:bc:41:2a:eb:d9:
                    2e:62:3a:2e:cb:a0:46:54:79:03:17:46:19:82:3d:
                    6a:30:f5:12:8b:05:25:1e:65:68:61:c0:54:c0:30:
                    53:cb:a0:84:02:da:fd:73:23:c6:d5:97:42:ff:6f:
                    07:78:a0:35:2b:db:0e:2e:81:6e:5d:7a:8d:ba:ca:
                    5e:d2:d5:00:13:38:b6:e8:fe:d4:2e:b8:fe:11:19:
                    5e:b8:48:b8:b9:33:eb:b7:90:da:a0:18:42:51:71:
                    a6:7e:4f:2e:77:a9:1f:c2:7a:59:01:da:8b:b8:85:
                    d4:9e:3d:9e:cc:9f:17:d1:ec:a8:65:2f:43:8b:62:
                    8e:35:42:93:25:bb:3d:37:27:54:9d:4c:f3:e1:b6:
                    ef:b6:1f:91:3d:e1:ee:66:a3:92:b4:ae:1c:0c:ee:
                    25:45:08:66:d3:3c:88:e1:c7:27:9f:4d:23:df:00:
                    f0:81:ba:07:a2:b7:b6:40:1c:00:93:03:8e:2f:2b:
                    6b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AE:A2:C0:10:FC:75:E8:BC:AF:ED:65:D0:7C:99:60:2D:92:58:D3
            X509v3 Authority Key Identifier:
                keyid:FE:40:8B:0A:17:CC:D1:8B:D2:CF:8D:07:B9:45:42:DD:D4:EC:D4:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2417/_kCLChfM0YvSz40HuUVC3dTs1J0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_kCLChfM0YvSz40HuUVC3dTs1J0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2417/_kCLChfM0YvSz40HuUVC3dTs1J0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:db:e7:24:71:32:9b:06:d2:48:4d:c3:a9:79:cb:35:c2:f4:
         07:84:69:cb:ee:d4:d1:4e:26:63:ab:58:82:55:90:eb:0c:5a:
         af:97:d3:51:26:d6:8b:90:85:fe:b1:56:11:d9:c3:cc:29:3b:
         52:c9:42:d0:53:ca:b4:89:55:18:3e:76:42:b1:e9:4a:c6:40:
         16:7a:e2:d4:07:d5:17:06:60:32:7a:84:43:e9:dd:68:ef:ac:
         55:11:8d:73:2f:93:cd:53:2c:a9:63:35:2d:2a:b9:e8:9e:b6:
         4b:32:e3:e5:68:6c:21:f0:4c:50:63:05:b3:48:24:a2:a9:fb:
         a2:fe:43:59:88:69:c4:0b:b0:47:12:06:25:ac:bb:3e:c4:f2:
         15:74:34:2a:52:05:61:79:21:c8:b3:4d:64:4b:28:a7:da:69:
         b3:ba:72:02:d5:26:aa:5a:6e:da:47:db:16:5a:68:ce:06:d5:
         b2:ee:93:f5:52:cc:da:50:2b:4a:6d:51:b0:b7:39:fc:c0:16:
         e0:d9:1c:5b:76:12:06:ce:6c:d5:b8:a3:a8:53:81:e9:f2:c8:
         d2:fc:64:2a:58:3d:61:0d:9b:e6:cf:0b:b2:19:8c:0d:7b:5c:
         8b:fe:dd:ce:d4:87:6f:0d:9c:09:43:5b:02:3f:4b:aa:03:8f:
         5f:c3:c6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:19 2023 by rpki-client on console.sobornost.net