Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3257/yWfdv_mWeomMkoVjHt9NjodMh3c.mft
File:                     yWfdv_mWeomMkoVjHt9NjodMh3c.mft (raw, json)
Hash identifier:          TmFC3AS0np1NAm9FccrqKG5/wBSoBEFU9HOMdLPBru8=
Subject key identifier:   59:60:AC:29:CA:02:FC:3D:9F:EF:D8:78:E0:50:5C:1D:05:6C:E5:C8
Authority key identifier: C9:67:DD:BF:F9:96:7A:89:8C:92:85:63:1E:DF:4D:8E:87:4C:87:77
Certificate issuer:       /CN=C967DDBFF9967A898C9285631EDF4D8E874C8777
Certificate serial:       0173
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yWfdv_mWeomMkoVjHt9NjodMh3c.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3257/yWfdv_mWeomMkoVjHt9NjodMh3c.mft
Manifest number:          0173
Signing time:             Mon 01 Apr 2024 22:23:31 +0000
Manifest this update:     Mon 01 Apr 2024 22:23:31 +0000
Manifest next update:     Tue 02 Apr 2024 04:23:31 +0000
Files and hashes:         1: yWfdv_mWeomMkoVjHt9NjodMh3c.crl (hash: 4feQLRs69Vrbce7zzHk/CYGd2rPCxV+7qcHREnBGfbI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C967DDBFF9967A898C9285631EDF4D8E874C8777
        Validity
            Not Before: Apr  1 22:23:31 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=5960AC29CA02FC3D9FEFD878E0505C1D056CE5C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:31:cb:b8:ea:35:62:a2:d8:7c:8d:61:27:fc:
                    c9:3e:6f:b7:2f:06:82:b7:b7:69:d4:0b:17:e6:54:
                    67:06:5d:6d:de:3c:44:6d:96:06:4e:36:3e:fa:5d:
                    27:92:6b:fc:77:8a:17:3c:98:93:7e:cb:fb:f5:d6:
                    b0:b9:2d:c9:96:aa:d6:51:f9:9e:35:b3:04:f0:46:
                    10:5b:7b:98:63:b9:08:52:27:c7:6a:15:5a:2f:8d:
                    c4:b5:92:2c:1a:bf:c8:cc:32:db:28:1e:c8:2d:43:
                    99:1e:b0:82:42:ce:2e:3e:62:4e:05:f7:12:d5:a6:
                    90:6c:12:84:77:7f:32:79:2a:18:c6:90:d2:b7:34:
                    af:4c:6a:3c:4d:99:66:a0:97:66:89:b9:db:0c:fa:
                    ef:f5:4d:14:1e:97:ab:6f:ee:6e:5e:8e:56:c4:40:
                    5c:52:b5:f2:48:1f:e3:4d:52:54:09:1b:13:39:66:
                    54:84:9f:13:0f:06:3e:0c:be:23:9c:10:a2:4f:a5:
                    54:eb:b3:04:46:d1:cb:46:24:38:c2:c0:49:4d:b2:
                    27:ad:e3:7f:be:b7:e1:f3:ae:24:5e:5e:e5:31:9a:
                    fa:1c:0a:e0:b1:7e:7a:e7:4c:fc:0d:f8:5f:7f:6f:
                    51:06:e3:37:d6:98:8d:42:7b:12:f2:76:18:b8:f3:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:60:AC:29:CA:02:FC:3D:9F:EF:D8:78:E0:50:5C:1D:05:6C:E5:C8
            X509v3 Authority Key Identifier:
                keyid:C9:67:DD:BF:F9:96:7A:89:8C:92:85:63:1E:DF:4D:8E:87:4C:87:77

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3257/yWfdv_mWeomMkoVjHt9NjodMh3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yWfdv_mWeomMkoVjHt9NjodMh3c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3257/yWfdv_mWeomMkoVjHt9NjodMh3c.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:74:05:33:c1:91:c1:c0:7d:f6:91:78:20:9d:26:61:b4:73:
         52:1b:ac:b1:d4:dc:96:dd:8c:d9:52:73:76:53:fa:4b:d0:72:
         b2:f6:9e:ef:3f:9e:40:69:53:9d:c5:e5:e5:38:f5:05:d1:1b:
         36:d9:c9:ed:a1:34:be:15:eb:68:9b:51:2e:3c:17:08:e3:0e:
         76:9b:fe:b0:81:8d:4f:49:e2:ec:8f:f0:c0:ec:5f:be:e6:8e:
         eb:4f:3a:f4:df:55:8f:41:d6:95:da:e2:35:a7:6a:ff:b9:73:
         d7:ff:e9:1e:b2:7b:e7:1a:f2:ec:7f:a5:0e:fa:14:27:86:1d:
         4f:79:ea:a2:51:70:99:ff:00:b2:e6:5a:a7:49:43:8c:c5:7a:
         3c:e0:bb:a2:fa:bf:b3:f8:37:a6:ef:17:22:b3:6b:e7:cc:42:
         89:51:b7:0f:09:06:8d:01:26:a7:98:b4:0a:8f:32:a4:5f:7f:
         43:85:e9:41:70:44:45:32:64:d6:44:57:92:5e:d4:8a:95:a5:
         fa:6e:c1:13:a4:84:c3:b8:c3:f9:61:50:76:68:13:ff:32:d2:
         2a:9b:78:fb:34:40:81:9a:19:18:9d:ad:b3:a7:f4:41:a5:86:
         62:76:ed:78:c3:20:cc:8a:ac:e1:e3:c3:8e:15:fc:1f:23:af:
         4d:4c:f0:53
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzk2
N0REQkZGOTk2N0E4OThDOTI4NTYzMUVERjREOEU4NzRDODc3NzAeFw0yNDA0MDEy
MjIzMzFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDU5NjBBQzI5Q0EwMkZD
M0Q5RkVGRDg3OEUwNTA1QzFEMDU2Q0U1QzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZMcu46jVioth8jWEn/Mk+b7cvBoK3t2nUCxfmVGcGXW3ePERt
lgZONj76XSeSa/x3ihc8mJN+y/v11rC5LcmWqtZR+Z41swTwRhBbe5hjuQhSJ8dq
FVovjcS1kiwav8jMMtsoHsgtQ5kesIJCzi4+Yk4F9xLVppBsEoR3fzJ5KhjGkNK3
NK9MajxNmWagl2aJudsM+u/1TRQel6tv7m5ejlbEQFxStfJIH+NNUlQJGxM5ZlSE
nxMPBj4MviOcEKJPpVTrswRG0ctGJDjCwElNsiet43++t+HzriReXuUxmvocCuCx
fnrnTPwN+F9/b1EG4zfWmI1CexLydhi486p5AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUWWCsKcoC/D2f79h44FBcHQVs5cgwHwYDVR0jBBgwFoAUyWfdv/mWeomMkoVj
Ht9NjodMh3cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1
Ny95V2Zkdl9tV2VvbU1rb1ZqSHQ5TmpvZE1oM2MuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3lXZmR2X21XZW9tTWtvVmpIdDlOam9kTWgzYy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTcveVdmZHZfbVdlb21N
a29Wakh0OU5qb2RNaDNjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAHl0BTPBkcHAffaReCCdJmG0c1IbrLHU3JbdjNlSc3ZT+kvQcrL2nu8/nkBp
U53F5eU49QXRGzbZye2hNL4V62ibUS48FwjjDnab/rCBjU9J4uyP8MDsX77mjutP
OvTfVY9B1pXa4jWnav+5c9f/6R6ye+ca8ux/pQ76FCeGHU956qJRcJn/ALLmWqdJ
Q4zFejzgu6L6v7P4N6bvFyKza+fMQolRtw8JBo0BJqeYtAqPMqRff0OF6UFwREUy
ZNZEV5Je1IqVpfpuwROkhMO4w/lhUHZoE/8y0iqbePs0QIGaGRidrbOn9EGlhmJ2
7XjDIMyKrOHjw44V/B8jr01M8FM=
-----END CERTIFICATE-----
Generated at Tue Apr 2 07:08:13 2024 by rpki-client on console.sobornost.net