Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft
File:                     4G9RPYtETnmh9YTzwpOWosJuXzk.mft (raw, json)
Hash identifier:          TDDojKeJIHsqB+LWrH5JVqHh7Z+zVi/j2Z2gc9GnrqI=
Subject key identifier:   51:01:FB:A0:CB:07:E8:AB:D2:6F:64:10:03:8F:65:90:E7:1D:DD:D0
Authority key identifier: E0:6F:51:3D:8B:44:4E:79:A1:F5:84:F3:C2:93:96:A2:C2:6E:5F:39
Certificate issuer:       /CN=E06F513D8B444E79A1F584F3C29396A2C26E5F39
Certificate serial:       12E3
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft
Manifest number:          12E0
Signing time:             Fri 31 Jan 2025 15:29:29 +0000
Manifest this update:     Fri 31 Jan 2025 15:29:29 +0000
Manifest next update:     Fri 31 Jan 2025 21:29:29 +0000
Files and hashes:         1: 4G9RPYtETnmh9YTzwpOWosJuXzk.crl (hash: Xn0bSihFhmPDeTIz2VwejpZO8sfASr8b+/zlG6+pMqs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4835 (0x12e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06F513D8B444E79A1F584F3C29396A2C26E5F39
        Validity
            Not Before: Jan 31 15:29:29 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=5101FBA0CB07E8ABD26F6410038F6590E71DDDD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b0:c3:bc:90:87:ae:6d:03:db:f8:21:62:72:
                    42:61:4b:66:d0:a5:e5:0a:ee:e9:d2:36:94:ba:b8:
                    13:a8:4e:7a:5f:ff:e8:96:d6:7f:04:10:af:ea:de:
                    f2:c2:49:35:dc:b0:69:c6:7e:1a:36:f8:59:f7:e9:
                    59:97:d1:60:23:78:df:84:fc:83:13:f0:da:4e:75:
                    6f:b2:bb:07:c9:0d:0b:d1:2d:d3:06:38:83:c6:13:
                    26:d7:7a:08:43:8f:d7:58:52:43:67:46:a7:84:bc:
                    a1:db:e6:e2:6c:02:ee:9e:a6:28:86:88:43:4a:66:
                    3c:ec:f6:b7:90:bb:71:ed:b0:16:d7:ed:f5:d2:69:
                    48:d3:b5:24:c6:a4:30:62:c9:a9:c6:db:8d:39:14:
                    8a:4d:05:14:b0:4d:75:f1:17:95:d6:ec:79:5d:7e:
                    22:d6:9e:28:ff:19:72:ba:ce:46:aa:ae:4a:72:64:
                    0b:3d:9c:d2:f4:00:6a:7c:f6:f9:e9:e0:52:29:ee:
                    9a:f3:9d:79:04:a5:e7:75:34:5c:d9:93:1f:e3:83:
                    ca:a6:d8:6f:07:43:59:ca:70:5f:e8:33:99:78:cb:
                    c3:9c:5b:dc:36:14:2f:99:af:b4:ea:3c:fa:df:99:
                    a5:8e:68:91:fb:fc:ae:80:58:56:04:4d:d7:d6:05:
                    1b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:01:FB:A0:CB:07:E8:AB:D2:6F:64:10:03:8F:65:90:E7:1D:DD:D0
            X509v3 Authority Key Identifier:
                keyid:E0:6F:51:3D:8B:44:4E:79:A1:F5:84:F3:C2:93:96:A2:C2:6E:5F:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d3:bc:a4:c8:b8:92:15:84:f8:bd:f3:c8:ee:8f:a3:04:d4:
         e6:cd:57:7e:cf:40:eb:5c:99:da:bb:6b:c4:17:b4:cc:3a:76:
         a3:16:b9:cf:55:4a:fb:7e:93:c4:06:7f:71:45:b5:ad:40:ce:
         d5:31:11:a1:5a:dd:1f:04:f6:16:6d:73:c6:ce:06:56:8f:f4:
         74:e5:c6:88:f4:cd:29:81:94:1c:64:31:65:78:06:c3:31:c6:
         59:56:f7:6b:9c:94:5a:00:97:e8:7e:cf:35:5d:e9:25:3e:4b:
         45:60:09:c4:6e:9a:01:b3:4a:a4:e9:33:a2:85:39:b0:61:b1:
         d0:75:ff:0f:83:80:79:55:35:cc:83:1a:da:2c:0b:71:2f:dc:
         97:f6:03:f2:0f:a1:ea:fa:d9:9e:f9:7d:7f:b5:d0:4c:4c:f2:
         09:09:a5:f1:02:74:07:e8:a0:4f:e8:10:61:37:48:f1:5b:62:
         c2:80:f3:7a:18:2d:6b:34:a9:d2:d9:8c:45:48:34:26:8b:ab:
         f1:0b:1c:5a:40:0b:a8:d1:96:49:31:57:02:3a:85:92:0a:51:
         72:c3:60:f8:06:89:28:84:29:fd:32:8b:bd:6f:6b:08:43:61:
         2d:a1:73:ea:0b:0f:43:55:0b:4d:06:7e:28:11:ff:91:3b:94:
         f4:e0:5f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:42:25 2025 by rpki-client