Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft
File:                     1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft (raw, json)
Hash identifier:          FpjK+vXX/bZnHGdeCb5vXcugxMAZnfnHcRn0TntDqKM=
Subject key identifier:   20:78:E0:15:44:2F:C6:5D:BF:74:11:83:58:79:23:57:14:E2:26:A4
Authority key identifier: D6:C5:C1:8C:CE:60:30:73:0B:C2:22:AB:17:F4:E3:D8:F1:60:30:33
Certificate issuer:       /CN=D6C5C18CCE6030730BC222AB17F4E3D8F1603033
Certificate serial:       1C08
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft
Manifest number:          1C03
Signing time:             Fri 31 Jan 2025 15:30:10 +0000
Manifest this update:     Fri 31 Jan 2025 15:30:10 +0000
Manifest next update:     Fri 31 Jan 2025 21:30:10 +0000
Files and hashes:         1: 1sXBjM5gMHMLwiKrF_Tj2PFgMDM.crl (hash: HZnlpZ5r2oC1riE0IYAtM9PBHaQ7UbPbLMAsbRUtCmY=)
                          2: bu1io0YGUyVGXJmlBFXCkqNhHzU.roa (hash: yjvnS6F+0OxhpQIQ3KjhJ2RFbPyMa6dRGhAGQNbL7Y4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7176 (0x1c08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6C5C18CCE6030730BC222AB17F4E3D8F1603033
        Validity
            Not Before: Jan 31 15:30:10 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=2078E015442FC65DBF7411835879235714E226A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:8e:cb:cb:20:1c:31:43:d5:f5:45:64:c6:
                    5e:b6:58:91:f9:8c:ba:6a:21:5f:21:5e:da:59:33:
                    2e:09:1f:ab:cf:a2:2f:d2:7b:ea:f1:5b:8d:e5:c5:
                    c2:9e:bb:2b:6b:2b:56:54:cf:97:a6:95:ae:4e:0a:
                    25:45:6c:01:80:e4:09:cd:12:e7:b5:1b:d2:3f:3f:
                    78:08:d6:5d:62:54:b2:e9:7c:42:b8:2b:20:f5:10:
                    64:49:87:10:22:09:f8:5c:5c:fc:92:4d:71:0e:25:
                    19:dc:dc:78:58:35:36:74:12:13:bc:12:89:14:81:
                    0e:23:8e:b6:be:1e:15:2b:b1:36:77:d1:34:34:9a:
                    c9:22:e8:34:e6:fd:ec:f5:9d:d0:9d:89:e9:7a:28:
                    db:fa:21:54:9e:4e:eb:b1:db:7c:b2:27:b6:2b:3f:
                    36:0c:d8:c1:d6:b3:c4:39:fc:45:34:c9:18:75:1d:
                    16:2c:8d:d1:f8:da:a4:be:73:78:42:fa:6a:fa:b5:
                    49:8f:1c:9e:a1:39:85:67:61:a6:7e:9f:33:ba:e1:
                    26:a0:78:ed:bb:d1:49:eb:80:cf:a9:87:1c:15:f7:
                    be:8d:7d:c6:46:1f:82:4a:99:8c:c5:5a:bf:97:df:
                    09:f9:ba:1c:d3:4d:a8:36:9d:a9:85:c3:89:73:ca:
                    5f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:78:E0:15:44:2F:C6:5D:BF:74:11:83:58:79:23:57:14:E2:26:A4
            X509v3 Authority Key Identifier:
                keyid:D6:C5:C1:8C:CE:60:30:73:0B:C2:22:AB:17:F4:E3:D8:F1:60:30:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:6c:e6:b6:a0:76:36:3f:4c:ad:ff:7a:6b:9d:84:84:8b:07:
         d6:80:d1:d1:21:07:cb:1e:ba:14:87:84:ce:91:c8:e3:bf:d3:
         99:d4:ab:86:4f:28:f8:2b:b8:1b:e5:60:20:0b:c5:85:51:1c:
         29:04:ed:69:9c:76:ea:2e:4e:f2:28:d9:4b:41:c8:8d:79:8c:
         46:b3:a7:c3:0d:a1:85:e9:62:1c:31:87:ba:04:9a:3f:98:9b:
         6e:20:b5:85:11:43:36:aa:bb:05:ac:57:06:6b:df:8a:ac:07:
         7f:13:4b:3b:fa:29:5a:a2:cc:16:81:e6:72:45:aa:ee:b1:53:
         ed:54:9a:eb:72:82:71:da:73:58:2b:3a:fc:d7:8b:1a:a3:ac:
         15:76:55:ac:7d:99:2b:bf:99:82:97:e5:11:38:93:e6:87:50:
         f3:99:e5:c6:43:82:29:f8:a6:d0:5d:1a:79:c8:7a:22:c0:59:
         fc:cf:49:c6:2d:1f:2e:71:1f:9c:8f:dc:08:f9:8d:48:3e:4e:
         47:26:bd:13:98:08:d5:cf:2e:0e:72:28:9d:82:c0:5f:8c:c6:
         97:21:98:97:2a:b6:be:51:83:5f:34:58:6e:25:50:7f:74:d5:
         a7:80:57:fa:3b:01:8a:e5:5c:52:a7:86:b1:6a:b6:93:3a:97:
         ca:a7:ca:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:32:30 2025 by rpki-client