Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/190/5I_tdgOElq0qsZctE0aPTT1AMWQ.mft
File:                     5I_tdgOElq0qsZctE0aPTT1AMWQ.mft (raw, json)
Hash identifier:          ECVLnatFDOBoAh4P3b/YFOUKcD+BhHgP3ttNY3RW0+4=
Subject key identifier:   FA:15:89:20:CE:27:D0:A4:A1:BD:BD:C6:CC:B5:B6:9B:3C:19:3B:3E
Authority key identifier: E4:8F:ED:76:03:84:96:AD:2A:B1:97:2D:13:46:8F:4D:3D:40:31:64
Certificate issuer:       /CN=E48FED76038496AD2AB1972D13468F4D3D403164
Certificate serial:       1278
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5I_tdgOElq0qsZctE0aPTT1AMWQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/190/5I_tdgOElq0qsZctE0aPTT1AMWQ.mft
Manifest number:          1274
Signing time:             Fri 31 Jan 2025 15:25:56 +0000
Manifest this update:     Fri 31 Jan 2025 15:25:56 +0000
Manifest next update:     Fri 31 Jan 2025 21:25:56 +0000
Files and hashes:         1: 5I_tdgOElq0qsZctE0aPTT1AMWQ.crl (hash: wWI0NMBOC2b5+I/Oekm0k783pw8EJZ16ZcpELFI40ac=)
                          2: dSfgXR4p_9gvuk0R-z1DH_0beIQ.roa (hash: Rug/afJ44sf50pFNZEJ7qI/vEjNphvTGB+ltAJVCr3I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4728 (0x1278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E48FED76038496AD2AB1972D13468F4D3D403164
        Validity
            Not Before: Jan 31 15:25:56 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=FA158920CE27D0A4A1BDBDC6CCB5B69B3C193B3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d0:04:c0:e6:19:c9:d5:b1:4f:8f:bb:85:a5:
                    3e:06:f2:96:79:90:fc:38:83:8f:79:bf:06:01:8a:
                    d2:8e:01:13:c0:e9:82:83:48:bf:44:69:57:c2:6a:
                    ac:0c:86:16:d3:79:68:3f:ac:26:a6:39:c9:65:d8:
                    1a:68:ab:67:e4:f3:20:5f:5b:de:98:0a:62:d2:12:
                    96:27:73:41:e4:2e:d1:3c:92:da:9d:31:2a:57:91:
                    0a:8c:ed:99:0e:da:3f:b7:69:b0:c0:16:7f:4c:3e:
                    ee:ca:8e:29:74:54:f2:03:a8:a3:f8:05:f0:48:8d:
                    0a:c7:71:39:04:c7:fa:47:ee:05:a4:3c:32:39:cc:
                    7a:14:f5:f1:aa:fc:e7:59:6d:5d:d3:be:3f:27:d6:
                    75:76:c7:bf:43:b8:5a:8c:83:ad:ff:94:e4:2d:20:
                    42:2c:12:ef:39:75:5a:79:a1:04:da:c5:d2:54:f3:
                    53:86:e8:63:78:74:de:5f:62:41:e8:4a:1b:56:09:
                    8e:bc:5a:e9:8a:3b:f9:1f:a7:f1:03:61:c2:d3:0a:
                    20:c0:03:b0:48:7e:80:76:57:97:9f:29:72:3c:02:
                    0a:89:8c:b8:78:b3:7e:f3:84:f0:65:3b:9e:ab:3e:
                    a1:23:9d:83:67:a6:f5:83:83:3b:c8:cf:52:22:a2:
                    97:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:15:89:20:CE:27:D0:A4:A1:BD:BD:C6:CC:B5:B6:9B:3C:19:3B:3E
            X509v3 Authority Key Identifier:
                keyid:E4:8F:ED:76:03:84:96:AD:2A:B1:97:2D:13:46:8F:4D:3D:40:31:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/190/5I_tdgOElq0qsZctE0aPTT1AMWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5I_tdgOElq0qsZctE0aPTT1AMWQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/190/5I_tdgOElq0qsZctE0aPTT1AMWQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:fb:90:60:16:e7:96:ab:c9:0a:53:ff:cd:70:10:50:1b:52:
         32:3d:7e:6b:38:d9:f1:db:5d:bc:63:cb:23:39:f0:42:17:c8:
         85:85:e1:74:ff:58:42:1f:c1:c5:14:86:0b:7f:df:0b:56:55:
         c5:6c:2d:d8:4b:8a:83:6f:4c:f3:11:28:12:98:09:7f:52:ff:
         93:d2:0e:64:a0:76:62:41:52:ce:ae:fa:cd:1c:eb:99:84:8c:
         7f:17:8e:5a:92:96:c4:5e:66:81:43:35:7f:0d:6c:40:01:72:
         6b:bf:1a:5c:64:d0:79:ad:26:6b:b5:3c:e7:81:80:e0:36:b2:
         d7:11:de:12:2d:73:a6:99:dd:f2:27:02:8c:9d:59:11:57:24:
         02:19:8b:73:ea:5e:5e:e2:cd:5a:80:17:f9:ac:eb:be:9b:9d:
         3f:01:37:00:8c:b0:82:93:a4:7e:fb:2b:0b:46:66:6f:9f:70:
         65:91:f5:ce:9c:98:ee:72:c6:5e:c5:11:fe:b0:eb:b9:db:c5:
         89:50:1f:84:44:a3:13:99:4b:a7:c7:05:6f:73:80:29:18:74:
         2f:b7:97:5c:ce:ed:64:58:5c:82:9e:42:0c:8d:87:3b:5b:6d:
         2b:84:27:a1:fc:db:91:c5:dd:f3:40:62:44:71:94:94:46:d1:
         1e:4c:6d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:53:37 2025 by rpki-client