Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2833/Y9bJ2JQXRLoVSABQwE71MyDKD8M.mft
File:                     Y9bJ2JQXRLoVSABQwE71MyDKD8M.mft (raw, json)
Hash identifier:          jcwmmvPbRw2sOd0Xz5QGJ3yRnT+GGdMvaqbdYr8L1f8=
Subject key identifier:   C6:62:60:92:EB:E0:20:F9:A5:D5:A3:98:08:75:01:84:69:A0:3D:F4
Authority key identifier: 63:D6:C9:D8:94:17:44:BA:15:48:00:50:C0:4E:F5:33:20:CA:0F:C3
Certificate issuer:       /CN=63D6C9D8941744BA15480050C04EF53320CA0FC3
Certificate serial:       0624
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y9bJ2JQXRLoVSABQwE71MyDKD8M.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2833/Y9bJ2JQXRLoVSABQwE71MyDKD8M.mft
Manifest number:          0620
Signing time:             Thu 06 Feb 2025 01:54:51 +0000
Manifest this update:     Thu 06 Feb 2025 01:54:51 +0000
Manifest next update:     Thu 06 Feb 2025 07:54:51 +0000
Files and hashes:         1: Y9bJ2JQXRLoVSABQwE71MyDKD8M.crl (hash: FzMrecnJHOelxJ1HIMRROaAnYc7EnHLiO6UFwEaowCc=)
                          2: jhEl146Xh18nVcFHzrgpQEmSx_o.roa (hash: /SsBB3irtj2eTzoAwSinOxBMNYgfwekptzt5QE81VUY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1572 (0x624)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63D6C9D8941744BA15480050C04EF53320CA0FC3
        Validity
            Not Before: Feb  6 01:54:51 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=C6626092EBE020F9A5D5A3980875018469A03DF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3d:d6:71:d5:37:b6:18:8f:49:b2:c1:39:5a:
                    d8:a9:eb:58:04:31:ca:00:28:cb:0a:69:18:ba:81:
                    e1:c6:b0:1b:f6:c4:77:72:7c:b7:bc:f3:cf:1c:fd:
                    ab:2d:a1:da:6d:fa:ea:41:e7:01:e5:de:b9:ac:71:
                    b3:9a:d8:33:6e:3d:6a:fc:e7:58:bd:93:5f:fe:91:
                    7f:13:92:bd:1e:8a:1d:ea:dd:59:53:61:de:2a:c6:
                    b5:49:7f:8c:44:a4:eb:27:44:d8:02:25:b8:b9:16:
                    0f:a6:72:1e:c4:fe:09:5b:65:ea:c3:f1:02:35:36:
                    36:73:ab:6d:2b:0c:1d:b5:b2:80:4a:9d:1d:42:67:
                    2a:d2:26:01:3d:c9:e9:71:91:fb:e3:98:4b:3b:18:
                    3a:ca:e4:46:47:53:09:30:fa:26:08:20:5a:45:34:
                    49:9f:f0:98:d2:0e:d2:6e:43:ea:ae:c1:4a:19:b0:
                    2f:92:a4:54:ab:a0:d3:fd:9e:34:8b:57:7f:32:3d:
                    8b:d2:c0:07:db:b5:e3:85:62:75:31:48:c6:1a:ff:
                    54:c9:ff:4f:f5:fe:58:08:b0:76:31:71:3d:4c:12:
                    2c:2c:e3:cf:cb:86:29:66:63:6e:20:50:a4:c7:71:
                    00:6b:af:34:d3:bf:0d:31:88:aa:ed:b0:8f:9f:d2:
                    f6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:62:60:92:EB:E0:20:F9:A5:D5:A3:98:08:75:01:84:69:A0:3D:F4
            X509v3 Authority Key Identifier:
                keyid:63:D6:C9:D8:94:17:44:BA:15:48:00:50:C0:4E:F5:33:20:CA:0F:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2833/Y9bJ2JQXRLoVSABQwE71MyDKD8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y9bJ2JQXRLoVSABQwE71MyDKD8M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2833/Y9bJ2JQXRLoVSABQwE71MyDKD8M.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:6f:1b:68:43:97:6b:1f:db:07:7a:35:de:0c:54:aa:d5:07:
         ea:1a:2e:68:a9:b0:e0:a1:1f:a4:0e:55:f3:6a:54:27:bd:be:
         66:d4:92:6b:4c:0b:6e:8d:ee:8a:a2:7c:70:90:45:97:34:a8:
         db:f0:53:5a:84:78:cc:74:8c:e6:f7:4a:60:08:95:94:70:bb:
         6b:a5:ef:ad:6c:4f:ef:72:1f:2b:44:1c:1f:97:ea:b9:bd:e6:
         68:67:0f:61:c9:7e:cd:9f:67:54:de:f2:50:a9:fb:37:45:aa:
         a7:f2:df:73:40:b0:c6:af:83:d4:69:20:2b:5a:c7:e7:37:96:
         de:6c:74:7b:ea:aa:94:54:3d:17:e0:c9:cc:9b:05:cc:36:51:
         50:14:ad:e8:3b:a7:77:66:25:56:20:4c:2f:ae:9e:07:63:76:
         33:5d:8c:b0:87:b7:11:9b:5c:61:09:e1:98:75:1f:64:7d:28:
         e2:14:25:eb:0c:58:3d:60:ec:35:67:35:d4:20:74:62:6c:34:
         cd:88:93:9d:ec:09:fe:ea:73:53:3b:68:26:0e:2a:8e:83:95:
         02:7e:3e:d3:3b:a3:17:ac:ce:21:d8:ab:0a:ef:8e:ad:e1:bd:
         e6:8f:cb:c9:ca:5c:f8:6f:38:e0:bb:15:71:1d:80:27:2f:b7:
         df:d7:47:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 6 09:38:59 2025 by rpki-client on console.sobornost.net