Manifest

$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft
File:                     3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft (raw, json)
Hash identifier:          ALobmNVZJbdxaXhqf5K/eiWm7vY/iQAnOKadfdA2W9k=
Subject key identifier:   92:93:F0:C6:A1:8B:E9:BB:A0:28:FA:DF:FF:69:3F:F1:0F:DD:E2:E3
Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59
Certificate issuer:       /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
Certificate serial:       55852A446B3A14732F64231BACF87E5C3FFE3A3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
Subject info access:      rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft
Manifest number:          DD
Signing time:             Sun 07 Jan 2024 00:09:45 +0000
Manifest this update:     Sun 07 Jan 2024 00:04:45 +0000
Manifest next update:     Mon 08 Jan 2024 02:41:45 +0000
Files and hashes:         1: 326131333a313830323a3a2f34302d3434203d3e20323039333036.roa (hash: aCpb9oQI8bU17ZmVfytNyddEjVtsC+2ym4b11SAiuBM=)
                          2: 326131333a313830303a3a2f33322d3434203d3e2034383432.roa (hash: QbUNKUpU2CPXvK6kmjfpEwjrO4kZHMc/TAogkasZjc0=)
                          3: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl (hash: pr74CEjk/dbADuEBg0VAsTNVIPYheJ1ka0pPN2qvXRQ=)
                          4: 3139342e3132372e3232392e302f32342d3234203d3e20313531343634.roa (hash: 7KwrI5EuBCcuLw5X1NF/PDWhcUoqozGhrQVDmDf42x4=)
                          5: 326131333a313830313a3138303a3a2f34332d3433203d3e2034383432.roa (hash: bHLrFfRXbu3mJPZtiprVji4gY+vSOYcHSULAQ5qBO+8=)
                          6: 326131333a313830313a3138303a3a2f34332d3438203d3e20313531343634.roa (hash: 8S8KaEMtwBSV+e9Y4su0imbiw2K8EuQoF1xiZf4VnyU=)
                          7: 326131333a313830303a31303a3a2f34382d3438203d3e2034383432.roa (hash: hQDpZacWKQtyymoNvHrMV8GO+OeAGXW9c1cdbIO8RBY=)
                          8: 3139342e3132372e3232392e302f32342d3234203d3e2034383432.roa (hash: kp/B54VYVfHsNEAFajsnxzOEEcidnvHQ0igzOulXWdo=)
                          9: 326131333a313830303a3a2f34342d3438203d3e2034383432.roa (hash: IEwSaCiGRKw+GYOBeKLvB4VFwnhFNmZcA0UMMrCtaSc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:85:2a:44:6b:3a:14:73:2f:64:23:1b:ac:f8:7e:5c:3f:fe:3a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
        Validity
            Not Before: Jan  7 00:04:45 2024 GMT
            Not After : Jan  8 02:41:45 2024 GMT
        Subject: CN=9293F0C6A18BE9BBA028FADFFF693FF10FDDE2E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:b6:24:ec:40:25:88:2e:0b:f4:c8:77:30:
                    b2:87:b1:6b:a8:10:df:94:e4:da:14:89:51:65:fa:
                    2f:d9:a9:53:d2:f8:5a:2c:6c:58:c0:e1:32:a4:74:
                    ae:0f:e2:9b:ed:98:e6:3b:5b:9d:24:64:97:a6:36:
                    34:12:22:84:f0:fd:35:0f:d6:04:b7:a3:7c:df:60:
                    ea:fc:6b:c9:06:d7:4f:09:43:0b:cc:c3:32:93:d5:
                    5d:87:66:24:cc:07:9b:95:af:05:78:da:50:2d:18:
                    22:09:55:e1:e8:a7:cf:9b:f1:b6:6b:e8:a0:30:fd:
                    46:0d:ef:26:f7:c0:bc:93:a0:27:ff:46:ce:e6:a6:
                    2e:83:33:64:21:26:ae:c3:b3:20:52:c1:97:3c:02:
                    54:74:43:9d:49:35:96:f1:30:54:cb:52:81:bf:95:
                    92:5f:a5:52:04:a2:34:f7:06:52:89:a7:f5:8e:36:
                    29:8c:ca:7a:65:16:4c:16:72:07:aa:f3:d0:f4:1f:
                    6c:47:86:4c:9c:47:e5:ed:ae:79:a3:7f:a6:e9:42:
                    ac:f6:da:05:7c:63:86:35:8f:30:cf:45:db:fe:aa:
                    a3:96:c5:25:84:8a:46:31:fd:f2:da:ff:09:81:7e:
                    94:35:a7:f6:b3:13:68:bd:6f:ec:07:de:68:51:b4:
                    7d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:93:F0:C6:A1:8B:E9:BB:A0:28:FA:DF:FF:69:3F:F1:0F:DD:E2:E3
            X509v3 Authority Key Identifier:
                keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d6:fe:dd:b7:90:27:ec:ab:5f:7a:8c:4d:0a:5e:03:b1:8b:
         71:cf:72:a3:be:b5:ce:bc:59:eb:87:b7:7d:00:57:c3:05:25:
         53:c1:88:93:9e:51:f4:cc:69:64:91:6e:ff:73:e7:58:2f:b8:
         fa:e1:5c:14:c6:49:15:5f:a6:e1:39:6c:66:4a:d3:94:85:1e:
         3e:8d:d7:2c:66:1c:f7:00:d8:8d:59:96:ed:38:0c:06:7e:78:
         9f:94:5c:17:4a:a7:5d:69:9d:b4:25:4e:a3:11:f1:02:19:1a:
         ee:4f:ce:23:87:9c:71:73:3f:db:2a:03:45:8c:89:ed:ec:53:
         7d:4e:03:a5:ce:1f:27:4b:76:16:b2:82:60:87:82:56:60:ee:
         e7:26:50:68:bd:03:19:ca:18:30:0d:67:cd:cb:2e:0a:10:15:
         05:9b:c4:68:84:07:14:d3:2d:54:b9:a1:3e:70:52:93:8f:fa:
         7c:8d:4d:08:b5:98:12:17:f3:07:2b:73:c5:b3:c5:31:89:71:
         22:7d:1d:22:60:b6:98:32:9e:1b:ae:97:3d:e9:8c:18:d4:19:
         a5:1f:36:12:69:94:31:75:47:02:87:63:fa:da:9c:f7:b5:8e:
         b4:c1:0d:6c:3a:29:d6:9c:34:97:9f:96:07:27:75:bd:ea:2d:
         79:e8:10:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:35:41 2025 by rpki-client