Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1029/A_XQOpMuSOf5T61oEuoovsj1LQI.mft
File:                     A_XQOpMuSOf5T61oEuoovsj1LQI.mft (raw, json)
Hash identifier:          bliGllzgeU+ADMR9WbB50G1m3PhhJfJ1PN1+1q4Czqk=
Subject key identifier:   B1:60:D3:B1:D8:F2:83:E7:40:DB:34:9B:5E:72:62:42:F2:28:DD:F8
Authority key identifier: 03:F5:D0:3A:93:2E:48:E7:F9:4F:AD:68:12:EA:28:BE:C8:F5:2D:02
Certificate issuer:       /CN=03F5D03A932E48E7F94FAD6812EA28BEC8F52D02
Certificate serial:       2324
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_XQOpMuSOf5T61oEuoovsj1LQI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1029/A_XQOpMuSOf5T61oEuoovsj1LQI.mft
Manifest number:          2324
Signing time:             Fri 31 Jan 2025 15:27:06 +0000
Manifest this update:     Fri 31 Jan 2025 15:27:06 +0000
Manifest next update:     Fri 31 Jan 2025 21:27:06 +0000
Files and hashes:         1: A_XQOpMuSOf5T61oEuoovsj1LQI.crl (hash: hUDzSPE8VbcMifIm3Z/nbxx6OTXOtDck78nsV/T5Bp8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8996 (0x2324)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03F5D03A932E48E7F94FAD6812EA28BEC8F52D02
        Validity
            Not Before: Jan 31 15:27:06 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=B160D3B1D8F283E740DB349B5E726242F228DDF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4b:5a:0d:2a:fa:2e:90:fc:19:f4:ce:b8:b3:
                    7c:3a:88:3f:a7:a9:e4:07:da:94:8c:e5:58:41:09:
                    16:75:a0:69:9f:e0:be:3b:16:0c:99:f0:7a:01:6e:
                    f7:35:98:45:0c:7e:b8:81:9c:b3:34:17:c7:25:05:
                    f6:d7:e6:16:86:18:ab:71:6b:2d:2a:4f:9c:91:1d:
                    65:cc:c9:96:af:69:3c:6f:83:89:54:ed:08:09:6d:
                    72:49:10:4d:35:1a:28:0c:ec:e5:14:17:06:55:6d:
                    ce:c8:23:c2:00:f7:3c:84:00:d2:3f:5f:da:e3:43:
                    94:57:70:cf:cc:f0:70:9d:88:ac:53:53:23:db:64:
                    7f:03:64:be:95:28:e7:2d:8d:ce:c3:05:44:d0:c0:
                    b9:a0:82:c1:3b:65:c5:c7:89:0b:09:b1:e2:09:6a:
                    32:47:b9:ce:d5:da:2d:6e:7a:57:0d:bf:14:de:b0:
                    51:f4:7c:f7:22:4b:cb:b9:7e:1e:fd:61:f1:7a:d7:
                    35:0e:60:94:b4:39:83:2d:d8:6f:32:72:e2:66:23:
                    d0:7b:ce:a9:c9:69:c8:03:7b:1b:d7:6f:65:f2:69:
                    ca:d9:da:b7:f2:54:c9:eb:7e:5b:65:ab:04:37:01:
                    1e:6f:e8:43:28:b7:be:fe:05:e4:48:af:e2:9f:9a:
                    78:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:60:D3:B1:D8:F2:83:E7:40:DB:34:9B:5E:72:62:42:F2:28:DD:F8
            X509v3 Authority Key Identifier:
                keyid:03:F5:D0:3A:93:2E:48:E7:F9:4F:AD:68:12:EA:28:BE:C8:F5:2D:02

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1029/A_XQOpMuSOf5T61oEuoovsj1LQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_XQOpMuSOf5T61oEuoovsj1LQI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1029/A_XQOpMuSOf5T61oEuoovsj1LQI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:10:28:55:f7:ac:a6:9a:59:08:90:f9:9e:2b:67:1e:94:c7:
         72:fa:36:85:8a:47:7c:e2:46:18:12:74:b7:c8:a3:2c:26:85:
         ab:ed:12:a5:ac:1b:03:b7:c0:42:73:1d:2d:e3:54:37:71:70:
         ec:7f:52:dc:f0:9c:0b:87:8b:87:15:d9:83:70:65:e9:36:b7:
         83:28:4c:55:68:5f:3e:ab:6f:45:69:41:0a:f1:8d:8b:05:55:
         24:a4:a3:2b:ee:3c:50:9b:cf:ff:58:fd:66:d0:b0:ae:88:97:
         57:c8:f7:c5:4e:16:88:52:c2:a4:8d:cc:27:49:00:d7:82:1f:
         07:6b:9e:db:5a:c4:31:35:60:ff:e5:fa:11:ea:d3:50:13:b3:
         68:11:86:2b:39:91:be:05:31:0e:ae:2b:93:1a:cf:d2:d5:7e:
         0c:7e:8f:3b:eb:0f:09:2e:af:af:6b:dd:c2:85:89:dd:f3:eb:
         2d:eb:6c:2e:a8:d1:b5:ff:17:b7:86:4e:85:c3:37:6e:9a:8b:
         b7:f0:b5:cc:4b:47:da:f3:b5:5a:fb:e5:b9:35:7f:07:ae:26:
         06:cd:c2:c1:66:12:31:dc:93:4d:6b:0f:e3:fe:99:39:66:9c:
         1b:b0:68:22:b1:eb:54:31:f6:70:2a:5b:17:23:8d:42:d4:1a:
         ea:41:53:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:28:15 2025 by rpki-client