Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/531/CCK3vPfcmeUZE6DRGnZqJutRIOw.mft
File:                     CCK3vPfcmeUZE6DRGnZqJutRIOw.mft (raw, json)
Hash identifier:          TsKAwjsvD94QIAiS0JazISdITHNrJmQXoMHsBB4LP8E=
Subject key identifier:   B7:4B:61:DE:22:32:09:85:24:B2:13:1E:AE:A7:76:59:43:F3:62:77
Authority key identifier: 08:22:B7:BC:F7:DC:99:E5:19:13:A0:D1:1A:76:6A:26:EB:51:20:EC
Certificate issuer:       /CN=0822B7BCF7DC99E51913A0D11A766A26EB5120EC
Certificate serial:       1184
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/CCK3vPfcmeUZE6DRGnZqJutRIOw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/531/CCK3vPfcmeUZE6DRGnZqJutRIOw.mft
Manifest number:          1184
Signing time:             Tue 09 Jan 2024 12:50:12 +0000
Manifest this update:     Tue 09 Jan 2024 12:50:12 +0000
Manifest next update:     Tue 09 Jan 2024 18:50:12 +0000
Files and hashes:         1: CCK3vPfcmeUZE6DRGnZqJutRIOw.crl (hash: R0Zaupiz4lvjpLKEumgzxemyyp7BluqKFAnBSjKxMm0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4484 (0x1184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0822B7BCF7DC99E51913A0D11A766A26EB5120EC
        Validity
            Not Before: Jan  9 12:50:12 2024 GMT
            Not After : Jan 16 06:09:07 2024 GMT
        Subject: CN=B74B61DE2232098524B2131EAEA7765943F36277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d0:76:cc:52:3f:e9:13:16:16:b5:ae:94:dd:
                    d5:31:2f:69:95:c7:3c:70:3d:ff:25:1d:49:6f:0e:
                    88:b8:6f:69:8f:2b:6d:dd:d5:b5:aa:cc:f7:87:dd:
                    af:a2:28:d7:9e:b8:65:b3:77:fd:97:5e:10:5c:d2:
                    e1:41:f5:a1:3e:ba:0e:81:23:94:90:df:35:54:92:
                    27:9e:55:09:08:c2:b7:0f:47:73:a7:6f:6c:28:61:
                    dc:dc:9b:8f:e9:37:7d:7f:e8:d5:2e:3c:dd:39:0a:
                    56:2c:f6:2b:da:84:e8:2d:a1:22:51:b5:81:78:ac:
                    0c:cd:17:56:d8:f3:03:94:17:a5:79:a3:35:43:af:
                    68:be:a8:96:57:60:6c:c4:6a:93:9a:11:6b:18:1c:
                    d5:2a:39:50:e7:a2:96:cd:70:0e:f8:11:57:d1:c6:
                    54:2b:e8:a3:6d:b6:2f:2a:fe:98:2c:5e:1b:a1:0f:
                    b5:78:8a:4d:7d:82:64:03:da:d0:c8:60:63:dc:df:
                    7f:4b:d6:be:29:7e:24:6a:14:4b:6d:35:cc:2b:64:
                    28:75:67:ca:98:61:cd:dc:fb:b8:5e:d9:ac:1f:72:
                    d3:b3:5e:bd:6b:1e:32:48:e5:a6:f2:45:39:71:dc:
                    62:9e:f4:84:a1:bd:7c:4d:9a:b2:98:09:08:83:e1:
                    0e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4B:61:DE:22:32:09:85:24:B2:13:1E:AE:A7:76:59:43:F3:62:77
            X509v3 Authority Key Identifier:
                keyid:08:22:B7:BC:F7:DC:99:E5:19:13:A0:D1:1A:76:6A:26:EB:51:20:EC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/531/CCK3vPfcmeUZE6DRGnZqJutRIOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/CCK3vPfcmeUZE6DRGnZqJutRIOw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/531/CCK3vPfcmeUZE6DRGnZqJutRIOw.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:fd:00:c5:81:83:08:4e:bc:9d:9a:57:9a:44:08:9c:9f:08:
         49:3d:5d:1f:23:c3:03:4b:a5:7f:d7:9b:13:23:4b:23:a1:17:
         72:66:01:62:5f:e6:22:cf:7a:86:68:53:10:ca:db:1e:78:95:
         89:fb:2f:09:b2:63:2e:6f:ba:70:b0:f1:2c:63:d0:0e:56:c3:
         81:7f:0a:73:55:ae:18:23:24:e8:43:b2:79:aa:67:27:c3:3a:
         d1:a4:04:e3:97:4f:94:39:d8:62:e8:ce:b1:6a:9e:bb:d9:27:
         30:c8:22:24:ca:4d:48:15:b6:ff:e9:fc:58:24:33:f1:6c:cf:
         c8:18:93:21:78:60:b6:0e:72:52:c8:38:e9:66:16:7a:ae:e0:
         03:3a:63:17:31:ba:ec:c8:72:96:8c:7d:be:49:32:64:77:58:
         5d:0c:b1:7d:06:20:d0:24:35:c6:32:e8:78:a1:fc:e0:5e:8a:
         33:9e:92:f0:17:d6:66:40:2d:72:34:3a:9e:82:e9:4c:69:92:
         a4:9f:6e:1c:b1:82:3a:be:d1:8b:c0:10:dd:1c:5b:be:fd:92:
         b6:46:82:b8:49:92:44:34:35:23:f1:d1:f5:6f:03:64:10:a5:
         3e:9e:dc:12:d9:88:3e:1c:80:33:29:6a:58:6d:fe:3b:63:90:
         9c:6c:73:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:14 2024 by rpki-client on console.sobornost.net