Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1/RstaoMqemvBSLrXYP_vuf88TePA.mft
File:                     RstaoMqemvBSLrXYP_vuf88TePA.mft (raw, json)
Hash identifier:          uWuCMlXSMDnwNj41SAymBj4VwUBwDnlAF2G6GGs1pHM=
Subject key identifier:   53:F2:7C:C4:34:1B:CD:81:AC:C7:2A:BA:E2:E1:C0:94:6E:F9:27:A6
Authority key identifier: 46:CB:5A:A0:CA:9E:9A:F0:52:2E:B5:D8:3F:FB:EE:7F:CF:13:78:F0
Certificate issuer:       /CN=46CB5AA0CA9E9AF0522EB5D83FFBEE7FCF1378F0
Certificate serial:       12DE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RstaoMqemvBSLrXYP_vuf88TePA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1/RstaoMqemvBSLrXYP_vuf88TePA.mft
Manifest number:          12DE
Signing time:             Fri 31 Jan 2025 15:27:13 +0000
Manifest this update:     Fri 31 Jan 2025 15:27:13 +0000
Manifest next update:     Fri 31 Jan 2025 21:27:13 +0000
Files and hashes:         1: RstaoMqemvBSLrXYP_vuf88TePA.crl (hash: aeJyrrElNW87Umi+b8yWLBvQbWD7nZGEmaEM9K1wqqI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4830 (0x12de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46CB5AA0CA9E9AF0522EB5D83FFBEE7FCF1378F0
        Validity
            Not Before: Jan 31 15:27:13 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=53F27CC4341BCD81ACC72ABAE2E1C0946EF927A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d5:85:e8:31:1b:ff:ba:8e:dc:fb:06:27:33:
                    ac:08:85:14:9c:7c:c2:7c:31:55:a6:15:88:4a:b5:
                    63:b1:64:dc:68:ea:35:4e:1b:da:d1:10:02:4e:02:
                    8c:22:9e:e7:e1:0e:52:5d:73:9b:1a:49:cd:cc:4b:
                    c2:f4:7e:43:da:44:f5:89:74:a1:b1:ed:01:b4:13:
                    02:8a:d9:4c:dd:00:bd:f3:a0:8f:f5:9d:8d:2a:a6:
                    62:dd:af:2f:c3:ed:cf:88:0e:f3:31:1b:6f:a4:b2:
                    7b:54:61:19:74:6f:5b:43:58:24:38:c9:06:2d:fb:
                    58:46:b3:fc:2a:9f:e0:2c:c4:6c:3e:17:61:e2:9a:
                    ec:f7:3f:19:39:16:3d:dc:f4:01:99:b0:73:42:11:
                    43:85:9d:60:97:cc:96:9c:f8:1c:15:1b:b4:81:d8:
                    c5:7d:d1:00:ad:55:f2:c8:60:45:65:60:fb:79:bc:
                    b4:81:b4:dc:b9:82:34:a6:72:5b:77:99:87:82:eb:
                    be:42:23:47:e0:5b:1f:d5:d0:89:95:5b:d0:78:48:
                    79:ca:8d:98:cf:a7:7d:73:e0:8a:90:8f:8a:7c:1e:
                    9a:58:c7:4d:cd:55:e6:b0:4b:8d:c7:ab:65:50:c3:
                    8e:50:6d:77:f7:4d:0e:7d:df:49:25:fb:5d:86:18:
                    ff:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F2:7C:C4:34:1B:CD:81:AC:C7:2A:BA:E2:E1:C0:94:6E:F9:27:A6
            X509v3 Authority Key Identifier:
                keyid:46:CB:5A:A0:CA:9E:9A:F0:52:2E:B5:D8:3F:FB:EE:7F:CF:13:78:F0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1/RstaoMqemvBSLrXYP_vuf88TePA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RstaoMqemvBSLrXYP_vuf88TePA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1/RstaoMqemvBSLrXYP_vuf88TePA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:01:26:97:8a:41:92:fe:a0:a3:dd:4e:6f:a4:0f:ee:0d:52:
         bc:99:d5:05:40:c9:44:1b:1d:36:18:88:12:7b:86:9b:ff:36:
         5e:36:94:cd:66:b3:f0:4c:fe:9f:c3:65:e7:63:ca:b4:37:e4:
         07:8e:a8:dd:54:d7:38:19:44:e4:07:1d:15:e0:7a:3a:34:c6:
         05:92:9d:37:e8:55:f8:3a:d2:f1:f2:ed:9e:ac:68:32:80:1f:
         d7:3e:d7:30:68:9c:e8:d1:3b:2b:05:52:7b:05:b3:b9:b1:62:
         a0:bd:f3:ee:ce:43:65:c7:d3:b5:9d:ee:52:e3:7c:8c:9e:9d:
         01:54:8a:75:7d:39:fc:c4:5e:68:46:50:29:29:2c:96:6f:b6:
         7e:2a:4f:8f:f5:a9:e4:f6:da:57:33:ba:21:78:ad:c9:e5:60:
         63:e4:57:60:69:37:e7:10:89:d9:85:d7:61:25:72:f2:89:66:
         ab:b6:76:73:1c:7b:3d:45:86:f9:83:b8:4d:b9:47:69:11:eb:
         ec:f8:4f:fa:03:40:2b:e2:59:8a:3f:5c:99:0c:9d:3d:c4:f4:
         31:73:62:b3:9a:b0:91:6c:f8:30:ec:05:3b:e0:33:2b:60:a5:
         89:1f:b7:af:fa:dc:63:3d:3a:d7:0d:3e:26:9e:de:70:d3:91:
         38:22:b7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:24:28 2025 by rpki-client