Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2773/0SIsg1ZJI5e9UFKksq0d30_t-B4.mft
File:                     0SIsg1ZJI5e9UFKksq0d30_t-B4.mft (raw, json)
Hash identifier:          2OgjtEIg+batDsMzf213DGE76ukX6EgetEW7HyJ3Uzo=
Subject key identifier:   EF:C3:F9:25:4F:3F:C2:C7:5A:AB:CC:36:94:E2:1A:F7:8B:78:24:A3
Authority key identifier: D1:22:2C:83:56:49:23:97:BD:50:52:A4:B2:AD:1D:DF:4F:ED:F8:1E
Certificate issuer:       /CN=D1222C8356492397BD5052A4B2AD1DDF4FEDF81E
Certificate serial:       037F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0SIsg1ZJI5e9UFKksq0d30_t-B4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2773/0SIsg1ZJI5e9UFKksq0d30_t-B4.mft
Manifest number:          037F
Signing time:             Tue 09 Jan 2024 11:48:03 +0000
Manifest this update:     Tue 09 Jan 2024 11:48:03 +0000
Manifest next update:     Tue 09 Jan 2024 17:48:03 +0000
Files and hashes:         1: 0SIsg1ZJI5e9UFKksq0d30_t-B4.crl (hash: OxmwiukdiCYknqxAMMpoepcd6sIidRIeWku1r3Y+YnY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895 (0x37f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1222C8356492397BD5052A4B2AD1DDF4FEDF81E
        Validity
            Not Before: Jan  9 11:48:03 2024 GMT
            Not After : Oct  8 00:16:33 2024 GMT
        Subject: CN=EFC3F9254F3FC2C75AABCC3694E21AF78B7824A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5a:ec:3f:b6:fd:d6:7b:ee:74:73:a8:cb:59:
                    74:96:d6:c7:dc:02:cc:42:81:6b:43:88:b2:84:36:
                    74:89:31:59:70:17:47:d7:7e:db:ee:17:c8:62:ea:
                    7b:5a:ef:b7:fa:5f:80:9d:d4:19:1c:94:84:29:bd:
                    4e:6a:b6:09:da:11:a1:b6:69:9d:7d:2c:72:b3:3f:
                    e8:3c:1d:bb:5a:bb:70:55:0d:7e:7e:20:48:3f:36:
                    9f:bf:18:6b:e3:7e:9e:f2:76:82:0c:86:30:7c:4b:
                    0f:31:df:a0:86:6e:66:9e:40:b5:00:39:00:e9:2a:
                    41:fb:67:65:a9:de:45:ba:bd:70:78:29:91:f5:81:
                    24:70:4f:5b:ce:93:ac:ca:38:3d:83:64:f5:9f:d2:
                    1e:7d:78:33:cc:bc:0a:b1:f4:43:20:4a:5f:d3:8c:
                    96:ad:fa:57:c9:9a:d8:17:32:2f:55:08:12:72:c9:
                    4a:ea:f4:71:e1:25:47:5e:8e:61:92:8a:78:75:d7:
                    62:de:d2:31:05:ac:1d:c4:7d:0a:de:36:ed:ef:2e:
                    38:8d:d7:77:d7:55:86:be:9b:1b:3a:c6:af:c9:ab:
                    dd:fe:a3:67:15:02:3b:b0:79:4a:40:cf:46:5a:16:
                    eb:6e:2a:61:58:f4:0f:17:ca:bd:3c:e8:0e:90:5c:
                    37:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C3:F9:25:4F:3F:C2:C7:5A:AB:CC:36:94:E2:1A:F7:8B:78:24:A3
            X509v3 Authority Key Identifier:
                keyid:D1:22:2C:83:56:49:23:97:BD:50:52:A4:B2:AD:1D:DF:4F:ED:F8:1E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2773/0SIsg1ZJI5e9UFKksq0d30_t-B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0SIsg1ZJI5e9UFKksq0d30_t-B4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2773/0SIsg1ZJI5e9UFKksq0d30_t-B4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:6a:10:0d:fa:24:b5:01:6e:23:ee:7c:a5:07:97:1b:f8:94:
         7a:2a:25:f7:4e:b7:41:eb:17:f9:43:bd:90:f4:de:d8:9e:7c:
         c6:67:f6:d9:65:9d:19:93:d9:70:f8:6f:7e:88:ff:13:42:dc:
         49:79:4a:81:bc:af:c5:97:01:76:a0:f7:c9:3a:77:d1:c0:2c:
         c8:c2:cf:5b:9f:5c:6b:37:21:6a:fc:38:e7:52:83:22:b1:61:
         ba:e8:2a:88:02:c0:08:67:cb:5a:7f:8c:a1:10:6f:37:70:2a:
         b9:51:1a:2b:e6:a2:4a:36:59:a8:40:c3:d8:24:d9:be:2a:cc:
         4e:b5:70:d6:af:d3:c4:34:8f:57:c7:b3:b7:3f:e0:8b:9e:0f:
         2a:37:09:58:49:65:4f:ce:15:59:e8:12:88:a4:65:da:18:af:
         57:e3:1a:48:dd:1e:b6:6e:45:df:97:a2:5b:72:75:c1:37:b8:
         92:68:64:e4:54:b1:e2:69:3c:79:1b:56:27:1f:a5:25:74:ee:
         81:d9:5d:85:8d:b4:01:58:7f:7e:e9:e1:6d:1a:13:5f:91:c9:
         f0:00:d0:bc:ed:29:f1:10:1d:9f:6e:cb:12:cf:04:b7:56:15:
         9e:12:a1:6d:57:75:c4:4b:c8:fd:b3:ee:55:e3:c7:7b:00:1f:
         bc:2a:a8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:14 2024 by rpki-client on console.sobornost.net