Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2834/gbSTrMtCmYv_AAs94Qb7V3GkjVo.mft
File:                     gbSTrMtCmYv_AAs94Qb7V3GkjVo.mft (raw, json)
Hash identifier:          hxCJbPOrTHmowp1A5i0R0zWdmI+m/FKBBXxRZT3iijQ=
Subject key identifier:   3A:41:1A:95:B2:D8:E9:D8:4F:DC:98:E2:3B:3F:E6:59:AB:54:20:A9
Authority key identifier: 81:B4:93:AC:CB:42:99:8B:FF:00:0B:3D:E1:06:FB:57:71:A4:8D:5A
Certificate issuer:       /CN=81B493ACCB42998BFF000B3DE106FB5771A48D5A
Certificate serial:       19AD
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gbSTrMtCmYv_AAs94Qb7V3GkjVo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2834/gbSTrMtCmYv_AAs94Qb7V3GkjVo.mft
Manifest number:          19AA
Signing time:             Fri 01 Nov 2024 22:21:31 +0000
Manifest this update:     Fri 01 Nov 2024 22:21:31 +0000
Manifest next update:     Sat 02 Nov 2024 04:21:31 +0000
Files and hashes:         1: 1Lwx7l_01k_t0tJWyeW8MTwJcfY.roa (hash: FqRGkn68t9uwvEn0k2jpfABuQZMIUWsPskayR5Rnz+c=)
                          2: gbSTrMtCmYv_AAs94Qb7V3GkjVo.crl (hash: XQKjkoJj7u6D5PR8OSX8UCJhB34Gy/vMJcWCYeZdpZ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6573 (0x19ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81B493ACCB42998BFF000B3DE106FB5771A48D5A
        Validity
            Not Before: Nov  1 22:21:31 2024 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=3A411A95B2D8E9D84FDC98E23B3FE659AB5420A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:20:1b:09:96:62:bc:28:37:7f:c4:ed:73:c5:
                    a6:13:99:62:9e:69:a1:8f:57:fd:9c:30:82:62:29:
                    44:52:81:79:31:63:37:fd:19:55:24:13:f0:1b:d4:
                    60:12:2a:15:f4:88:93:13:13:ac:95:bc:43:82:8f:
                    d3:7b:c4:a4:c0:26:99:4e:48:b7:2b:57:35:4d:73:
                    cf:d5:c3:c7:4e:16:15:de:53:00:07:c9:b1:86:7c:
                    d8:57:86:c5:a5:86:4e:8a:0d:25:d9:7f:4d:bb:21:
                    61:9c:58:82:19:a7:f3:e1:0f:1c:d6:e7:69:54:64:
                    a6:8b:9f:09:70:2a:df:2e:db:d0:86:80:69:cf:ed:
                    72:9a:01:d5:5a:ac:94:dd:90:06:74:5f:0a:40:56:
                    e0:2b:6b:08:b6:f9:45:5d:51:44:d4:b4:4e:51:ad:
                    0d:24:a4:40:a3:f5:05:d8:de:a2:f5:b9:e7:db:09:
                    c0:e1:62:e1:b7:32:06:90:05:c2:b7:89:68:c1:ae:
                    a0:11:6c:a8:68:df:31:e0:72:70:a7:04:5a:aa:ab:
                    36:7a:d5:6c:27:62:ee:6c:73:49:8d:a0:51:b6:5a:
                    fc:06:d2:59:57:19:21:dd:e5:75:2e:0b:ef:c0:3c:
                    ab:47:07:25:14:5d:50:ba:38:ca:21:fa:8f:ff:b0:
                    e0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:41:1A:95:B2:D8:E9:D8:4F:DC:98:E2:3B:3F:E6:59:AB:54:20:A9
            X509v3 Authority Key Identifier:
                keyid:81:B4:93:AC:CB:42:99:8B:FF:00:0B:3D:E1:06:FB:57:71:A4:8D:5A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2834/gbSTrMtCmYv_AAs94Qb7V3GkjVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gbSTrMtCmYv_AAs94Qb7V3GkjVo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2834/gbSTrMtCmYv_AAs94Qb7V3GkjVo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:b5:b3:3c:c6:c4:62:85:01:d3:bd:c2:41:25:85:f3:ad:ca:
         0c:80:c8:a5:2d:96:07:e8:33:f3:b4:4c:70:a8:85:e0:fa:b3:
         c8:26:b8:d1:2b:e9:6a:7b:5f:4b:5d:1e:14:e8:b5:97:28:51:
         0f:61:dd:57:38:7f:56:49:c2:44:ef:86:d2:48:36:b9:5b:44:
         73:80:62:58:9f:77:4e:19:94:24:61:f0:5d:cf:af:0a:94:f9:
         d4:1e:ca:79:8e:34:49:e5:bc:80:7a:f8:5e:b3:87:00:52:44:
         62:fc:7b:d0:bf:79:18:86:96:bc:3a:30:f8:62:6b:f3:36:cc:
         f9:e5:74:70:22:a1:45:4e:08:d3:89:e5:c0:e2:40:49:e0:7e:
         da:fa:8a:15:70:a5:6b:6e:60:ba:4b:bd:6f:87:6f:34:e5:6a:
         b7:bd:a3:ec:e3:f3:a1:7c:b2:25:8e:6a:16:b3:25:f8:d0:8d:
         2b:6f:89:93:82:91:54:58:c8:d4:16:02:1c:e3:c4:c5:b3:07:
         0f:9b:11:8c:3d:c1:68:1e:a5:46:a5:c5:6b:c8:78:92:5d:19:
         a6:e2:f0:df:f7:d6:f4:1c:bd:4d:2e:e7:74:9c:be:65:13:52:
         a2:7e:43:df:09:18:ae:7e:3c:fd:8e:df:41:a1:a1:3d:ab:cf:
         02:a4:ae:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 04:34:54 2024 by rpki-client on console.sobornost.net