Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/135/pT5UsSYIO-poFXlysjQqCd94Fag.mft
File:                     pT5UsSYIO-poFXlysjQqCd94Fag.mft (raw, json)
Hash identifier:          mrLxNmh8mOMz0E0wM4qPf6lC2kbPL5DCDlliTjMZfDA=
Subject key identifier:   41:96:E9:B1:7E:53:95:7E:2C:72:75:3E:48:3D:EF:7A:60:78:30:4F
Authority key identifier: A5:3E:54:B1:26:08:3B:EA:68:15:79:72:B2:34:2A:09:DF:78:15:A8
Certificate issuer:       /CN=A53E54B126083BEA68157972B2342A09DF7815A8
Certificate serial:       3414
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pT5UsSYIO-poFXlysjQqCd94Fag.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/135/pT5UsSYIO-poFXlysjQqCd94Fag.mft
Manifest number:          3414
Signing time:             Fri 31 Jan 2025 15:24:28 +0000
Manifest this update:     Fri 31 Jan 2025 15:24:28 +0000
Manifest next update:     Fri 31 Jan 2025 21:24:28 +0000
Files and hashes:         1: pT5UsSYIO-poFXlysjQqCd94Fag.crl (hash: RZjGdO6nQkmWOwrWgIfWkFelIzzy05F4Rx5GOQjr8x4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13332 (0x3414)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A53E54B126083BEA68157972B2342A09DF7815A8
        Validity
            Not Before: Jan 31 15:24:28 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=4196E9B17E53957E2C72753E483DEF7A6078304F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:27:76:13:c6:96:f8:fa:09:7e:02:d1:96:1b:
                    d7:68:65:77:7c:82:ca:61:a4:4e:18:f0:b2:4d:33:
                    6d:7b:37:64:c2:8e:d2:6e:64:bd:92:5a:ae:0c:d4:
                    e8:49:b1:7a:2e:9e:37:3f:23:7d:c6:f4:4a:76:bc:
                    2c:f7:73:f8:11:00:77:37:e6:ca:98:5b:8f:9e:92:
                    ff:f2:94:ca:a5:d6:d8:11:7f:93:73:17:55:77:d0:
                    e4:f0:a7:82:a7:ef:d2:67:17:a3:ba:02:45:db:66:
                    28:2d:73:8c:a2:ca:c6:34:cc:89:9b:f5:dc:6a:c9:
                    6c:a5:7c:5d:9d:ff:17:f5:27:2b:b6:e6:25:a9:21:
                    cf:1e:fb:9a:13:5f:48:d4:e8:d5:fe:7f:fc:eb:d9:
                    cc:f7:42:f2:48:90:aa:47:fd:ea:df:b3:9a:8d:d6:
                    ac:aa:51:99:af:90:54:59:4f:3e:b0:4b:0f:ad:7a:
                    2d:e7:65:f8:df:de:58:8e:c1:1e:0f:f1:94:54:64:
                    25:43:e9:1c:71:0d:5b:1c:cc:09:fd:8e:9b:48:62:
                    26:86:38:c0:50:60:a5:56:6d:2a:36:ba:31:5d:dd:
                    cb:97:c6:e0:c6:e2:45:16:5a:22:46:5f:38:94:31:
                    58:16:cf:25:ae:06:c2:95:49:ef:be:3f:30:bf:09:
                    50:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:96:E9:B1:7E:53:95:7E:2C:72:75:3E:48:3D:EF:7A:60:78:30:4F
            X509v3 Authority Key Identifier:
                keyid:A5:3E:54:B1:26:08:3B:EA:68:15:79:72:B2:34:2A:09:DF:78:15:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/135/pT5UsSYIO-poFXlysjQqCd94Fag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pT5UsSYIO-poFXlysjQqCd94Fag.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/135/pT5UsSYIO-poFXlysjQqCd94Fag.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:da:81:fa:ad:37:e1:6c:89:79:4a:57:f0:d3:2a:40:6c:52:
         3e:93:81:10:ec:b8:12:76:a0:a0:29:43:f8:84:1c:ff:8b:ce:
         d4:c1:35:aa:79:96:02:7a:91:d1:d1:5d:ea:5b:2c:6f:1e:f5:
         5a:68:b7:0f:ce:c2:8d:46:da:83:c3:e9:83:91:a3:47:dd:33:
         1c:69:1d:62:d0:71:a8:3c:4c:95:b6:4a:e6:6e:f0:94:7a:7f:
         23:13:0e:e0:69:49:0a:59:62:ec:af:61:e5:f9:38:55:c2:5b:
         f0:b4:da:bc:f3:5a:b0:67:47:44:a1:85:39:c2:34:36:eb:d3:
         89:af:10:fc:74:0b:ae:f7:7e:67:34:7e:3d:db:a1:9e:de:fd:
         ee:24:e2:db:9a:88:4a:32:a8:58:68:43:eb:3b:e5:a2:0b:a5:
         88:86:b8:c5:5e:a2:3c:b6:a6:6a:9d:96:bb:88:b7:9c:5a:88:
         a4:00:58:1b:20:72:e1:b1:2f:1d:3d:9d:10:83:c2:a7:9d:51:
         25:97:e7:54:01:94:13:ed:ec:19:31:d5:d3:29:b8:a2:38:af:
         91:80:f4:6b:1c:24:e1:3e:51:f6:a1:9e:74:ff:6f:82:e3:42:
         76:ad:31:2a:34:ca:21:35:c5:1c:3a:69:69:19:ba:56:e1:62:
         29:b1:41:f2
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICNBQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTUz
RTU0QjEyNjA4M0JFQTY4MTU3OTcyQjIzNDJBMDlERjc4MTVBODAeFw0yNTAxMzEx
NTI0MjhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQxOTZFOUIxN0U1Mzk1
N0UyQzcyNzUzRTQ4M0RFRjdBNjA3ODMwNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxJ3YTxpb4+gl+AtGWG9doZXd8gsphpE4Y8LJNM217N2TCjtJu
ZL2SWq4M1OhJsXounjc/I33G9Ep2vCz3c/gRAHc35sqYW4+ekv/ylMql1tgRf5Nz
F1V30OTwp4Kn79JnF6O6AkXbZigtc4yiysY0zImb9dxqyWylfF2d/xf1Jyu25iWp
Ic8e+5oTX0jU6NX+f/zr2cz3QvJIkKpH/erfs5qN1qyqUZmvkFRZTz6wSw+tei3n
Zfjf3liOwR4P8ZRUZCVD6RxxDVsczAn9jptIYiaGOMBQYKVWbSo2ujFd3cuXxuDG
4kUWWiJGXziUMVgWzyWuBsKVSe++PzC/CVCDAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUQZbpsX5TlX4scnU+SD3vemB4ME8wHwYDVR0jBBgwFoAUpT5UsSYIO+poFXly
sjQqCd94FagwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM1
L3BUNVVzU1lJTy1wb0ZYbHlzalFxQ2Q5NEZhZy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvcFQ1VXNTWUlPLXBvRlhseXNqUXFDZDk0RmFnLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM1L3BUNVVzU1lJTy1wb0ZY
bHlzalFxQ2Q5NEZhZy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDb2oH6rTfhbIl5Slfw0ypAbFI+k4EQ7LgSdqCgKUP4hBz/i87UwTWqeZYCepHR
0V3qWyxvHvVaaLcPzsKNRtqDw+mDkaNH3TMcaR1i0HGoPEyVtkrmbvCUen8jEw7g
aUkKWWLsr2Hl+ThVwlvwtNq881qwZ0dEoYU5wjQ269OJrxD8dAuu935nNH4926Ge
3v3uJOLbmohKMqhYaEPrO+WiC6WIhrjFXqI8tqZqnZa7iLecWoikAFgbIHLhsS8d
PZ0Qg8KnnVEll+dUAZQT7ewZMdXTKbiiOK+RgPRrHCThPlH2oZ50/2+C40J2rTEq
NMohNcUcOmlpGbpW4WIpsUHy
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:24:34 2025 by rpki-client