Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2769/VoKIT85VvbmANvm0NTn3xMwIg9M.mft
File:                     VoKIT85VvbmANvm0NTn3xMwIg9M.mft (raw, json)
Hash identifier:          TA4AJ4UrdEArfxjjRsPEttp40Kny3qzAULNq8bpgf/o=
Subject key identifier:   02:A8:C5:79:06:37:C6:B4:A0:94:E5:54:B2:BC:24:51:28:AE:1F:F0
Authority key identifier: 56:82:88:4F:CE:55:BD:B9:80:36:F9:B4:35:39:F7:C4:CC:08:83:D3
Certificate issuer:       /CN=5682884FCE55BDB98036F9B43539F7C4CC0883D3
Certificate serial:       0B45
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VoKIT85VvbmANvm0NTn3xMwIg9M.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2769/VoKIT85VvbmANvm0NTn3xMwIg9M.mft
Manifest number:          0B45
Signing time:             Tue 09 Jan 2024 11:49:12 +0000
Manifest this update:     Tue 09 Jan 2024 11:49:11 +0000
Manifest next update:     Tue 09 Jan 2024 17:49:11 +0000
Files and hashes:         1: VoKIT85VvbmANvm0NTn3xMwIg9M.crl (hash: S+CGojMCSedCrYZlLUuLPHOY7yWPI3ahlZyjAjPTqKo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2885 (0xb45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5682884FCE55BDB98036F9B43539F7C4CC0883D3
        Validity
            Not Before: Jan  9 11:49:11 2024 GMT
            Not After : Oct  8 00:16:33 2024 GMT
        Subject: CN=02A8C5790637C6B4A094E554B2BC245128AE1FF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:b8:41:ec:86:bc:17:55:1c:df:6c:c0:88:
                    2f:18:23:f9:35:42:5c:47:49:d3:81:dc:2b:2f:69:
                    5a:3a:31:ec:25:a7:51:99:80:ab:1c:54:46:9b:2c:
                    f5:f1:24:34:b7:28:26:cf:40:3c:e8:66:98:ac:62:
                    f2:31:76:70:ab:ca:5a:fb:ed:8d:e7:ce:f8:f2:71:
                    1d:68:4f:c8:91:97:5e:4a:40:f1:3e:02:26:b1:20:
                    27:cd:e6:ab:14:6f:9a:6c:19:f0:a4:bb:3c:40:f8:
                    5f:01:3c:79:51:c5:a1:ae:bb:ce:ad:4b:e2:33:0b:
                    a6:0d:4f:5d:00:c6:7f:28:e1:ec:c0:c7:bd:b3:51:
                    a8:24:c2:72:28:81:cb:ef:76:2e:12:1c:9b:14:9f:
                    ea:37:75:af:b5:7d:4d:f2:a9:9a:9c:84:89:2a:90:
                    c6:b4:82:52:f4:4c:48:3f:07:67:f5:b8:42:a8:48:
                    22:2f:16:3c:f0:14:d2:b4:96:7c:eb:c9:f3:eb:d7:
                    35:15:58:9e:87:c6:cb:83:ff:5f:96:06:8f:1e:a2:
                    26:61:82:f8:07:1a:f4:26:22:47:25:28:a3:49:f3:
                    0b:8b:0c:1b:95:d6:e8:2f:6c:06:ca:e3:08:91:43:
                    22:f2:82:d5:54:3c:11:4e:ff:6e:7b:cf:fc:69:55:
                    68:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A8:C5:79:06:37:C6:B4:A0:94:E5:54:B2:BC:24:51:28:AE:1F:F0
            X509v3 Authority Key Identifier:
                keyid:56:82:88:4F:CE:55:BD:B9:80:36:F9:B4:35:39:F7:C4:CC:08:83:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2769/VoKIT85VvbmANvm0NTn3xMwIg9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VoKIT85VvbmANvm0NTn3xMwIg9M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2769/VoKIT85VvbmANvm0NTn3xMwIg9M.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b9:1f:91:06:73:62:70:0c:f8:08:85:78:ba:a5:5c:4f:a9:
         da:3e:62:fa:dd:6c:21:d5:23:1c:70:0a:fa:ce:f6:02:70:cd:
         e7:2f:0c:d9:54:64:ce:72:2b:08:18:04:dc:41:03:ea:a9:32:
         a0:97:ca:05:c9:62:d3:6a:29:c7:dc:62:97:4f:d9:5f:ec:13:
         28:47:a3:b8:d3:ad:e8:f0:bc:4a:2e:ee:44:04:5d:8d:7e:9d:
         71:56:fc:71:e9:31:62:f1:30:7b:dd:2c:40:8e:5a:2c:ba:e3:
         f2:22:40:c7:14:84:ed:9e:40:1b:c7:e6:f9:56:72:1c:b7:2f:
         5d:3f:18:2d:96:fb:46:86:ee:71:53:7c:b4:c9:13:db:67:4c:
         95:76:c0:dd:40:97:b3:dd:22:8e:3d:ea:36:f0:af:df:33:dd:
         07:22:f2:dc:a3:4f:81:b6:d7:57:85:43:76:98:83:72:5e:9c:
         4b:c8:5a:26:51:40:e6:25:13:50:d9:4a:57:bf:eb:7d:ea:7d:
         b7:82:07:3f:70:47:e1:57:33:e2:a3:a5:c7:f2:33:cc:b9:79:
         14:52:91:c6:48:62:7e:d8:84:43:24:63:fc:f7:33:5d:a6:6a:
         02:99:0b:ee:51:ab:c2:62:e4:e5:28:17:9d:16:b8:37:50:8a:
         d6:f7:7c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:14 2024 by rpki-client on console.sobornost.net