Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft
File:                     Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft (raw, json)
Hash identifier:          G9SZopDGWZMfY9uLUd+3Pqwi0bI38U43e8RGl9l3ots=
Subject key identifier:   DB:D8:04:EC:B5:B5:B7:C6:D3:5D:78:64:95:7A:B3:0C:B3:75:69:59
Authority key identifier: 45:CF:5B:26:2A:56:F8:51:34:C8:FE:95:D6:4D:F0:89:F1:B7:62:E7
Certificate issuer:       /CN=45CF5B262A56F85134C8FE95D64DF089F1B762E7
Certificate serial:       03CF
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rc9bJipW-FE0yP6V1k3wifG3Yuc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft
Manifest number:          03CE
Signing time:             Fri 31 Jan 2025 15:27:40 +0000
Manifest this update:     Fri 31 Jan 2025 15:27:40 +0000
Manifest next update:     Fri 31 Jan 2025 21:27:40 +0000
Files and hashes:         1: Rc9bJipW-FE0yP6V1k3wifG3Yuc.crl (hash: jPQPIpM3r3u5MsZFCwqSMFChwp8vmmpif4lL4YJFew8=)
                          2: rGX-jlWmT5UXNDCJbyr29sYL8j0.roa (hash: SC8327IqDeIkUpm5PLMYz5uE5ihFgGUKeXxDbb+NB5c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 975 (0x3cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45CF5B262A56F85134C8FE95D64DF089F1B762E7
        Validity
            Not Before: Jan 31 15:27:40 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=DBD804ECB5B5B7C6D35D7864957AB30CB3756959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1e:90:4d:ec:7d:11:9a:79:e8:9d:22:fa:8b:
                    ee:d3:e5:be:21:46:76:b6:55:d3:66:c2:01:85:63:
                    97:ea:fc:c6:b8:d8:cf:30:9e:6a:c4:00:2d:e6:99:
                    a0:21:9f:ab:b6:ca:03:c6:56:32:70:12:32:1a:db:
                    8a:8e:7c:91:8f:9e:1f:c8:e7:9b:e4:c7:8c:a7:69:
                    3f:9a:9a:7f:bc:69:81:2f:ad:0c:4f:94:86:70:62:
                    d7:8b:2e:f5:88:46:f1:19:4f:0c:49:40:05:9d:47:
                    2e:d3:22:b6:f4:2c:b3:4c:8e:5e:d9:18:af:ad:81:
                    75:33:0a:9c:8a:df:16:8b:99:6c:7d:cb:19:07:80:
                    45:79:33:28:f5:b6:2f:10:2c:da:d9:8f:80:8e:05:
                    cb:79:40:88:fd:d5:3a:2b:62:68:eb:bc:87:88:e3:
                    fa:bf:a2:76:f1:38:63:2e:c0:3f:e7:b1:82:db:52:
                    cf:68:db:56:0c:92:7a:95:a3:9a:69:f9:90:45:f9:
                    8c:3f:8b:88:61:7e:40:fa:55:5b:57:b5:71:7c:d6:
                    4a:05:bd:c1:85:42:b3:69:74:6f:d8:e6:da:14:fb:
                    f8:41:67:3f:1d:1b:4c:b4:bc:66:2e:88:85:63:ba:
                    36:ae:bd:1f:a9:03:8b:8e:d2:08:cf:35:3d:80:3c:
                    55:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D8:04:EC:B5:B5:B7:C6:D3:5D:78:64:95:7A:B3:0C:B3:75:69:59
            X509v3 Authority Key Identifier:
                keyid:45:CF:5B:26:2A:56:F8:51:34:C8:FE:95:D6:4D:F0:89:F1:B7:62:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rc9bJipW-FE0yP6V1k3wifG3Yuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:75:a4:94:a8:0e:88:36:b0:ba:a9:d8:70:01:77:3e:8c:92:
         07:f1:4b:ec:a8:8a:71:02:ae:73:06:c5:da:55:35:ba:90:19:
         f2:03:d7:cf:81:59:ba:62:9b:29:fb:f9:69:4a:74:08:55:97:
         98:9c:ef:6d:b9:ed:24:2a:d0:fa:c7:bd:fb:2f:ee:20:a3:b8:
         20:f2:20:81:9a:c9:f6:13:5d:51:6c:f6:16:be:d2:ce:dd:6d:
         a8:3a:2b:32:d6:d5:60:9f:62:96:a5:fd:6e:01:0a:7f:07:cc:
         fb:5a:40:54:c5:5f:f7:7b:cb:dd:4d:2c:cb:a6:68:3e:27:2e:
         ec:27:f9:dc:4e:60:d2:ea:24:7f:5c:52:e3:84:40:7a:10:d5:
         d2:46:0f:83:e3:f1:fb:2b:61:ce:7d:01:ff:2d:6d:c4:b5:31:
         cb:0d:6d:e0:85:9b:f0:a5:13:84:d8:1a:b0:60:b9:ec:db:be:
         d5:c2:7a:97:49:b2:ff:44:b9:bf:04:54:4c:7a:90:de:bb:e8:
         8b:d5:ec:ea:47:da:5f:b0:82:47:4e:c8:99:f1:a4:a9:21:a3:
         65:af:7c:80:b2:fc:7e:01:49:34:32:2c:1f:93:93:bb:ed:63:
         df:90:5a:92:15:c8:f9:23:c2:82:ae:04:34:f7:9a:7d:a0:0c:
         86:57:8a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:54:55 2025 by rpki-client