Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2767/jpsOFQMC6NRzWaCBchLAKog4dQc.mft
File:                     jpsOFQMC6NRzWaCBchLAKog4dQc.mft (raw, json)
Hash identifier:          oVWBibVyd5CXY4QYtA1IoSOEMwoZuOjAGVhoTSCFP4I=
Subject key identifier:   B3:B0:FF:09:BE:59:50:8E:8C:AA:C2:C7:4B:FC:08:75:A4:DB:9B:76
Authority key identifier: 8E:9B:0E:15:03:02:E8:D4:73:59:A0:81:72:12:C0:2A:88:38:75:07
Certificate issuer:       /CN=8E9B0E150302E8D47359A0817212C02A88387507
Certificate serial:       147B
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jpsOFQMC6NRzWaCBchLAKog4dQc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2767/jpsOFQMC6NRzWaCBchLAKog4dQc.mft
Manifest number:          147B
Signing time:             Tue 09 Jan 2024 12:49:59 +0000
Manifest this update:     Tue 09 Jan 2024 12:49:59 +0000
Manifest next update:     Tue 09 Jan 2024 18:49:59 +0000
Files and hashes:         1: jpsOFQMC6NRzWaCBchLAKog4dQc.crl (hash: AqK9DSdFG+XezBllZsFG2GJ9lamkgYLzKpuVD1EgiCE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5243 (0x147b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9B0E150302E8D47359A0817212C02A88387507
        Validity
            Not Before: Jan  9 12:49:59 2024 GMT
            Not After : Oct  8 00:16:33 2024 GMT
        Subject: CN=B3B0FF09BE59508E8CAAC2C74BFC0875A4DB9B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c9:d4:a1:78:76:04:b5:c0:31:ba:53:93:44:
                    77:7a:87:72:ca:30:07:cf:15:04:76:94:64:01:7c:
                    ae:aa:05:56:42:2b:73:c9:7a:e8:16:bb:de:89:1b:
                    c6:54:c6:ca:88:24:9d:64:bc:9f:43:fa:ae:d9:be:
                    ed:40:76:80:28:5a:15:d2:e2:e9:d7:4e:7b:d8:40:
                    92:b1:3c:e5:0f:a9:55:51:a2:12:35:4a:01:05:3e:
                    4f:44:4f:77:0f:14:b8:0c:2b:47:71:2b:87:80:2f:
                    f0:78:6d:14:73:06:bb:26:ed:aa:80:52:1f:a9:37:
                    cc:9f:df:7c:87:42:d5:d5:5f:e1:df:7f:55:18:fa:
                    c6:e4:42:86:f7:46:d9:0a:61:b8:7f:6f:b6:e1:74:
                    fa:b0:e9:9d:89:9b:68:d6:74:ee:94:2f:54:8d:c9:
                    80:1e:86:f0:b6:c6:b7:7f:75:79:4f:81:1a:db:b7:
                    f9:70:64:1e:1b:0d:75:fc:d0:6d:0e:5b:ff:04:62:
                    0d:40:9a:de:6f:0f:59:4f:4e:1d:c5:93:19:f3:85:
                    ba:5f:95:8c:c0:b1:1a:36:4f:e0:85:60:7c:3e:b5:
                    14:2d:33:9f:73:6e:53:d9:86:a7:b9:13:f4:7a:c3:
                    17:f8:36:ac:ec:90:1d:d8:b4:38:9e:51:28:1e:b4:
                    95:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B0:FF:09:BE:59:50:8E:8C:AA:C2:C7:4B:FC:08:75:A4:DB:9B:76
            X509v3 Authority Key Identifier:
                keyid:8E:9B:0E:15:03:02:E8:D4:73:59:A0:81:72:12:C0:2A:88:38:75:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2767/jpsOFQMC6NRzWaCBchLAKog4dQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jpsOFQMC6NRzWaCBchLAKog4dQc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2767/jpsOFQMC6NRzWaCBchLAKog4dQc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:21:00:3d:3c:56:f7:88:69:a1:f6:79:74:fd:6c:23:ef:b5:
         d9:2f:c9:90:de:1e:bd:80:c2:61:64:ab:b0:0e:d9:68:a8:9a:
         29:6c:f5:14:c0:b2:b3:f0:aa:9a:2f:25:a5:fa:1e:75:78:c0:
         7d:be:be:09:07:e9:05:15:76:a5:9c:51:cb:51:a0:98:02:a6:
         7d:21:75:6c:7e:de:25:29:30:5d:73:4b:59:5f:c0:32:be:11:
         2b:8f:cf:4e:9f:f3:bf:c3:af:36:93:96:b4:1e:27:e9:d6:71:
         e9:7a:9d:68:68:12:3a:bf:12:50:40:1e:1b:af:c1:54:e0:13:
         d3:94:57:b4:bd:9b:f5:b6:d8:81:89:90:2e:bc:19:ca:92:ba:
         13:5b:a7:19:43:6c:22:1e:29:e0:7e:06:ac:50:ec:ad:fa:37:
         14:3e:4c:97:72:ea:c7:35:dd:c5:7b:9c:e3:58:1a:2f:5e:af:
         0d:28:51:1b:9b:31:69:c5:8d:8a:02:b2:1b:bf:cf:7d:cf:ae:
         11:cf:21:cc:bc:e2:1f:fe:38:10:23:b2:44:51:72:79:1f:86:
         82:58:4f:ca:0e:2c:35:c8:f1:2e:ea:9f:6b:dd:7c:79:3f:f8:
         25:d5:22:79:58:ef:b5:49:8e:10:f4:d7:6f:e5:73:a9:18:98:
         35:8b:19:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:14 2024 by rpki-client on console.sobornost.net