Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft
File:                     dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft (raw, json)
Hash identifier:          hK+LL545jWAJqAYtG30GrPCgaVfjbvEUHVaNRIo+Mt0=
Subject key identifier:   83:28:8C:B5:1A:D8:48:93:92:64:6B:FC:3F:9B:EF:4C:7A:18:CD:33
Authority key identifier: 75:63:7B:AD:D8:37:B6:71:50:E8:0F:9C:8E:2F:0C:5A:E5:51:B7:91
Certificate issuer:       /CN=75637BADD837B67150E80F9C8E2F0C5AE551B791
Certificate serial:       1C1C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft
Manifest number:          1C17
Signing time:             Fri 31 Jan 2025 15:29:59 +0000
Manifest this update:     Fri 31 Jan 2025 15:29:59 +0000
Manifest next update:     Fri 31 Jan 2025 21:29:59 +0000
Files and hashes:         1: Chccgovtr4Jxu9Y1IiEwZLNPEww.roa (hash: 4ivezYEeXqevm8aBYlTI2iZFxUZ10Xr3aU92Qwnct7Y=)
                          2: dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl (hash: lF0P4U4LYPntjdMihB/efvRKal+q/sK3hBRPkau3+zo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7196 (0x1c1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75637BADD837B67150E80F9C8E2F0C5AE551B791
        Validity
            Not Before: Jan 31 15:29:59 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=83288CB51AD8489392646BFC3F9BEF4C7A18CD33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3d:88:f8:df:ca:bf:f9:ae:84:b1:d5:3d:50:
                    3a:f4:7e:f5:fc:03:71:95:8a:65:1c:a1:4a:6f:0a:
                    cd:b1:59:a2:69:70:cf:8d:8a:53:42:ff:3d:ab:7b:
                    24:8a:48:9f:8e:7f:c5:6e:c1:a9:1e:de:13:09:7e:
                    b2:8e:7d:78:21:aa:d2:05:e1:1c:1c:ca:02:6b:60:
                    80:b7:fd:ca:97:72:cd:c6:e7:de:b4:d0:39:fa:8e:
                    29:8d:f9:05:72:99:e7:2d:f8:52:5f:93:af:34:d3:
                    44:93:70:fd:ac:70:22:0a:9c:2b:e2:cd:3b:33:20:
                    1a:b7:fe:fe:be:50:b6:57:7f:fb:0f:59:1c:e6:f1:
                    8a:ca:44:13:3d:22:92:4b:84:a4:11:ac:8e:89:30:
                    bf:c7:4e:9e:ce:45:be:3b:c6:c6:c8:a8:a3:e7:02:
                    34:54:2c:ea:0b:85:c9:18:8c:be:a1:59:4e:f9:fb:
                    41:d1:a1:c8:be:6b:49:47:c6:5e:49:a3:64:9f:33:
                    23:ce:fe:15:da:df:45:3c:e2:a6:78:e5:a0:55:0e:
                    23:9c:54:94:da:77:56:47:61:5e:88:34:91:c9:b2:
                    d6:85:17:cc:65:88:9c:47:05:e8:4d:fc:6b:f2:bd:
                    82:58:2f:87:2e:22:61:bb:c2:af:d5:3e:1a:b2:da:
                    e6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:28:8C:B5:1A:D8:48:93:92:64:6B:FC:3F:9B:EF:4C:7A:18:CD:33
            X509v3 Authority Key Identifier:
                keyid:75:63:7B:AD:D8:37:B6:71:50:E8:0F:9C:8E:2F:0C:5A:E5:51:B7:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:10:ac:9a:d7:14:4d:bd:61:5d:80:1a:3a:10:d0:2c:b7:1b:
         72:2b:f8:19:86:04:a7:f0:d3:0a:38:a1:47:f6:d5:b8:fc:e4:
         ea:76:6c:32:00:31:ec:96:95:17:c6:b9:58:c2:06:6d:81:ad:
         a7:9e:66:09:f6:3b:af:3e:2a:a8:eb:4d:e4:3b:19:5a:9f:87:
         c4:38:57:68:63:8f:c3:12:f8:d1:d1:85:cd:3c:c5:39:0f:c0:
         00:43:e8:11:22:7a:2d:d1:12:0d:d7:54:31:17:36:f6:5f:22:
         5d:76:7c:e8:9b:de:c6:4d:8d:4b:a5:74:41:52:ed:8f:88:d7:
         1f:c2:e5:c7:f1:fa:9a:da:78:87:98:4a:37:22:4b:a6:a1:f6:
         f8:ab:72:43:09:91:71:9c:d5:4e:50:af:c0:0c:30:b3:cd:0d:
         d8:48:be:01:6a:dd:62:05:61:55:4d:56:2a:cb:89:98:f4:41:
         1a:31:77:99:4c:63:b4:71:e2:42:7b:5b:1a:ea:33:fe:f6:98:
         e2:7d:c1:e5:5f:c4:6f:1a:5c:fd:d9:99:14:0f:fe:ef:94:a0:
         e9:8c:29:1c:51:50:53:50:bf:80:78:db:a5:4d:35:53:1b:ac:
         fe:4c:07:a3:4c:72:4b:cf:6b:72:06:bf:00:7c:69:5b:2d:90:
         9a:b4:42:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:01:11 2025 by rpki-client