Manifest

$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
File:                     3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft (raw, json)
Hash identifier:          UnG2hqzSEpAmp+a7+gqdJWcDUKCMh0TjL4VHkr3a5GY=
Subject key identifier:   A6:74:93:2C:8D:8A:F9:9F:0A:DA:0B:C9:4D:E6:D4:BC:5E:3B:18:BD
Authority key identifier: 3E:32:DA:3B:9D:C9:55:F9:6C:F1:BF:58:C5:74:8B:7B:80:FC:B7:98
Certificate issuer:       /CN=3e32da3b9dc955f96cf1bf58c5748b7b80fcb798
Certificate serial:       745E45567B7B41C92ADAB26A43CE6D881BF16382
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PjLaO53JVfls8b9YxXSLe4D8t5g.cer
Subject info access:      rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
Manifest number:          0239
Signing time:             Fri 27 Sep 2024 04:27:04 +0000
Manifest this update:     Fri 27 Sep 2024 04:22:04 +0000
Manifest next update:     Sat 28 Sep 2024 06:05:04 +0000
Files and hashes:         1: 3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.crl (hash: PghWu95z1hSk263O8QWQBos++GG1YA+kPLvPkkg3tYE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:5e:45:56:7b:7b:41:c9:2a:da:b2:6a:43:ce:6d:88:1b:f1:63:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e32da3b9dc955f96cf1bf58c5748b7b80fcb798
        Validity
            Not Before: Sep 27 04:22:04 2024 GMT
            Not After : Sep 28 06:05:04 2024 GMT
        Subject: CN=A674932C8D8AF99F0ADA0BC94DE6D4BC5E3B18BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e0:dc:a7:cd:31:b4:3b:85:62:12:8e:5f:6a:
                    59:99:e4:92:2a:c7:0b:28:ed:4e:60:6a:db:97:28:
                    43:22:4e:fc:bc:f2:77:ca:40:8b:40:63:df:ff:54:
                    9d:ae:a9:8f:05:6b:7a:f1:04:4c:f2:84:0d:98:f9:
                    a1:7c:ad:f2:5b:4c:04:4a:2f:36:fd:be:d7:d0:aa:
                    de:5d:3d:15:8a:56:ac:0f:18:15:c2:a5:4b:de:b2:
                    7f:c7:14:c7:1b:76:68:eb:1a:2f:22:c2:fb:cc:86:
                    8b:12:6c:98:e3:db:92:b6:55:da:06:c6:2b:88:2e:
                    d9:df:2c:1f:90:ae:be:53:29:4c:ad:4f:19:12:77:
                    e8:08:20:d5:22:ce:ae:56:d3:33:b3:11:f0:3d:f7:
                    6e:70:85:3d:14:11:ff:b0:74:b4:1e:f2:8a:ad:2f:
                    88:f1:16:e9:08:10:d4:0e:99:49:f2:15:85:7c:d8:
                    86:38:b4:cf:67:c6:06:f4:8f:ec:a2:1b:00:b2:4b:
                    cf:11:79:65:1d:28:74:e5:a2:b2:63:67:37:d0:ee:
                    99:34:11:63:cf:2e:ff:a3:a5:5a:1b:fc:81:85:2c:
                    34:f0:31:56:e2:6a:d4:27:35:17:05:48:df:eb:16:
                    17:39:a7:54:bf:7b:04:b3:ac:c6:e6:82:a9:70:04:
                    cf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:74:93:2C:8D:8A:F9:9F:0A:DA:0B:C9:4D:E6:D4:BC:5E:3B:18:BD
            X509v3 Authority Key Identifier:
                keyid:3E:32:DA:3B:9D:C9:55:F9:6C:F1:BF:58:C5:74:8B:7B:80:FC:B7:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjLaO53JVfls8b9YxXSLe4D8t5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:cf:fc:28:5b:45:75:ac:32:10:4e:92:45:01:f9:0d:d1:e7:
         e1:6f:2a:d1:7c:1f:26:11:b9:26:13:43:a3:39:0d:fc:06:58:
         7e:9e:17:fd:d7:e5:19:bd:a3:ac:52:c4:2b:40:36:ab:a6:47:
         d5:6a:d8:62:3d:cd:23:eb:29:22:b0:ae:30:9b:ff:1d:5a:e8:
         e2:2e:18:de:5d:0a:24:5b:c4:f2:90:38:c5:71:a5:8a:b0:a9:
         92:21:90:75:ba:dc:95:20:2b:75:7b:b6:07:17:ff:52:72:1b:
         aa:ea:ae:0f:49:26:c0:35:06:b0:32:53:87:30:a8:72:7c:70:
         42:6c:2d:1f:22:bc:c0:78:d5:b3:66:92:c5:ed:7b:e6:5f:38:
         14:39:37:c0:b1:55:19:e7:0e:09:6f:f8:1a:11:ea:c3:19:34:
         70:9b:f9:94:52:45:5f:98:d7:45:75:a3:21:0b:03:49:f5:d4:
         2c:85:2e:2d:41:b3:4c:09:9d:41:3f:2b:d3:58:52:8a:72:2c:
         85:bf:fa:64:98:80:02:da:26:32:7d:a8:42:f3:5c:f5:b7:dd:
         e4:37:9e:12:8d:ea:39:9b:e3:8b:43:ec:48:32:75:6e:8b:06:
         0a:5c:7f:15:99:da:f3:4f:cd:ea:da:29:4d:5b:2f:40:ed:5a:
         81:29:3d:a5
-----BEGIN CERTIFICATE-----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