Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft
File:                     7JfpAsM6EGVBKiW96FhrxCFuOWI.mft (raw, json)
Hash identifier:          8FKJy2dIZs4g+FbhOT+OZ4FiX0bRri4dxsdkSrswvUo=
Subject key identifier:   63:8B:1F:B2:B0:BC:8D:C7:85:A1:67:18:71:61:35:54:C0:7E:F8:EA
Authority key identifier: EC:97:E9:02:C3:3A:10:65:41:2A:25:BD:E8:58:6B:C4:21:6E:39:62
Certificate issuer:       /CN=EC97E902C33A1065412A25BDE8586BC4216E3962
Certificate serial:       1C0C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7JfpAsM6EGVBKiW96FhrxCFuOWI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft
Manifest number:          1C0C
Signing time:             Fri 31 Jan 2025 15:26:11 +0000
Manifest this update:     Fri 31 Jan 2025 15:26:11 +0000
Manifest next update:     Fri 31 Jan 2025 21:26:11 +0000
Files and hashes:         1: 7JfpAsM6EGVBKiW96FhrxCFuOWI.crl (hash: HCstaiQqJBKn1aX332/CXXCgwgvThi3OptCy9e8hrtE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7180 (0x1c0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC97E902C33A1065412A25BDE8586BC4216E3962
        Validity
            Not Before: Jan 31 15:26:11 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=638B1FB2B0BC8DC785A1671871613554C07EF8EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:20:45:39:7a:52:f6:52:e2:42:7e:07:38:
                    42:f0:e3:50:25:dd:4c:90:03:c5:0a:86:eb:b5:3e:
                    0f:64:5e:f2:01:28:8c:79:da:4e:36:e1:e5:07:f7:
                    da:ba:7b:b3:0e:85:16:95:44:d9:f6:91:ef:6b:1e:
                    f6:4a:88:d6:5b:f9:f4:8d:d3:dc:02:51:15:c6:a7:
                    39:83:47:d2:6e:86:d8:56:03:43:d2:e9:4b:4c:c5:
                    64:92:4c:56:e4:3d:5a:25:e4:71:12:41:e9:fc:ba:
                    75:6c:b6:ca:e5:fa:22:23:e9:62:a6:40:c1:44:de:
                    0d:64:d6:fd:c6:4d:20:dc:60:8c:fb:d4:ba:d4:be:
                    34:e1:20:dd:73:47:8e:ca:14:30:01:d5:ed:af:0f:
                    b4:4f:e7:26:c3:b5:ad:b3:45:8b:f6:94:47:ec:5f:
                    52:d1:0f:72:61:56:40:94:a2:a2:70:aa:3b:ba:3b:
                    4a:33:79:0f:47:fe:56:6a:e4:aa:d3:25:94:34:24:
                    81:19:67:dc:27:f7:01:b3:0d:9b:0e:db:9f:7b:7a:
                    04:be:27:99:d7:eb:c1:a4:0c:4e:81:84:72:50:d5:
                    80:23:cc:08:32:57:d6:9e:ef:0f:e8:5a:90:06:43:
                    2a:9f:cc:77:d0:41:98:d1:52:9c:6b:35:59:93:02:
                    8e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8B:1F:B2:B0:BC:8D:C7:85:A1:67:18:71:61:35:54:C0:7E:F8:EA
            X509v3 Authority Key Identifier:
                keyid:EC:97:E9:02:C3:3A:10:65:41:2A:25:BD:E8:58:6B:C4:21:6E:39:62

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7JfpAsM6EGVBKiW96FhrxCFuOWI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:5f:5a:8d:78:c7:3e:fc:4b:af:92:b2:aa:a5:ce:21:25:9f:
         a8:01:02:71:02:d7:31:c7:d5:b9:86:75:4a:95:1f:d2:f7:6b:
         9f:0e:11:e7:e2:78:81:cc:88:56:4d:5d:b8:49:2c:4e:7d:6c:
         ec:86:26:ac:b3:52:c7:8b:69:2d:4f:71:ed:06:87:fd:85:ed:
         fe:1a:f2:df:8c:b1:b2:07:61:bc:ae:18:e3:39:3b:56:28:61:
         c8:e9:b5:e8:27:ef:a1:c7:b7:2d:2d:11:1b:ad:08:83:ea:70:
         b8:6f:0d:2b:3e:e2:e7:f0:58:b6:ae:3f:19:db:d0:83:93:8e:
         76:89:7e:83:46:4f:07:5c:98:e6:08:dc:d2:c7:81:22:7a:2d:
         e3:cb:e0:ef:6b:95:38:2c:e1:d3:8b:e5:08:19:0b:02:7f:bd:
         de:d3:16:4f:a0:a0:49:5d:d6:05:b0:25:74:4a:cd:9a:4c:8a:
         e1:ec:dd:65:5a:27:c7:d9:ba:5b:33:f8:56:87:03:9f:6a:7d:
         0a:59:b2:84:7b:77:b9:68:be:82:40:d5:ae:89:70:67:d0:40:
         ce:26:0d:7f:c1:62:8c:e3:92:3f:c6:df:be:01:14:c8:74:87:
         fa:2d:12:be:6f:e1:3e:ee:be:12:e3:66:6a:d1:96:09:3e:6e:
         6e:ff:8a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:47:57 2025 by rpki-client