Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft
File:                     gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft (raw, json)
Hash identifier:          qjqpTZXd8yu6pllHL5ZEgLiB8Pe0sozwow7xTow4mMk=
Subject key identifier:   DD:62:A6:BE:3E:2F:11:89:37:96:CB:45:53:25:70:6C:C7:E6:E2:0F
Authority key identifier: 80:05:36:27:8B:DF:A4:59:9F:E0:66:67:27:0C:57:D4:85:68:05:F1
Certificate issuer:       /CN=800536278BDFA4599FE06667270C57D4856805F1
Certificate serial:       0AD5
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gAU2J4vfpFmf4GZnJwxX1IVoBfE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft
Manifest number:          0AD5
Signing time:             Fri 31 Jan 2025 18:24:16 +0000
Manifest this update:     Fri 31 Jan 2025 18:24:16 +0000
Manifest next update:     Sat 01 Feb 2025 00:24:16 +0000
Files and hashes:         1: gAU2J4vfpFmf4GZnJwxX1IVoBfE.crl (hash: WsFYyxItuhT/YMfAp5AIx2UV1cZknR3fAVz4pyz9KjA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2773 (0xad5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=800536278BDFA4599FE06667270C57D4856805F1
        Validity
            Not Before: Jan 31 18:24:16 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=DD62A6BE3E2F11893796CB455325706CC7E6E20F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f3:a8:ff:f6:9c:9d:87:48:ca:a9:48:dd:72:
                    c7:f5:e6:f4:45:8b:25:5e:8d:ab:f7:f7:db:fd:bd:
                    d0:b3:43:09:01:46:d1:da:78:31:e1:c0:ab:16:7c:
                    a6:ad:67:65:11:fe:38:06:ba:fc:ea:2c:ce:e3:74:
                    dd:9f:29:c6:45:36:2d:f7:bb:56:c3:bd:a1:04:aa:
                    14:ba:34:68:a7:68:d4:8b:fc:af:83:89:07:d5:32:
                    42:33:c3:78:f3:80:7c:c0:f7:85:88:ba:b7:42:5f:
                    15:84:0f:4a:0a:75:5c:d1:cb:08:14:47:a6:ab:8c:
                    e6:93:ce:ed:30:cd:02:df:4c:bd:fd:a9:a5:c4:5e:
                    ba:51:22:4d:6b:6c:f6:06:f7:73:b5:ed:e3:9f:a9:
                    bc:27:a5:a0:f9:3f:36:b5:4c:cd:50:a6:61:c1:0d:
                    1f:17:75:db:0b:e4:58:bd:33:13:97:08:77:12:f1:
                    c4:d4:76:94:d5:e8:7a:b0:39:cb:1d:4a:c2:c3:f4:
                    1b:30:20:6f:b6:1a:92:89:56:7b:cc:b7:7a:4f:47:
                    4c:b7:a3:3e:bd:d5:2a:75:45:07:ba:92:59:d6:14:
                    11:d5:ec:bc:4d:e7:0c:26:21:1b:cc:0f:53:d4:25:
                    e2:28:5b:cd:a3:83:c6:51:1b:2a:d3:97:ad:6d:b1:
                    4b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:62:A6:BE:3E:2F:11:89:37:96:CB:45:53:25:70:6C:C7:E6:E2:0F
            X509v3 Authority Key Identifier:
                keyid:80:05:36:27:8B:DF:A4:59:9F:E0:66:67:27:0C:57:D4:85:68:05:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gAU2J4vfpFmf4GZnJwxX1IVoBfE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:85:9e:0d:d3:c7:99:3b:ac:de:5e:cd:c1:6e:5f:db:0f:48:
         2f:07:8b:fa:c5:ca:e0:d4:db:5c:48:2b:d5:2c:d9:fe:c7:bf:
         f9:7f:d3:43:5c:af:a0:58:85:f2:e7:0f:f7:b9:dd:84:57:b3:
         fa:ef:90:a9:8d:99:b5:61:09:47:81:38:64:8a:9a:d4:90:25:
         ab:93:9b:ab:5b:11:d2:0f:20:d3:23:47:27:19:02:7d:d9:f8:
         a5:cd:51:b3:c2:2f:cb:6b:18:4d:df:ff:a7:80:e1:8a:07:91:
         b5:03:a4:02:17:12:ee:e8:43:e0:27:ec:03:1b:08:35:89:f5:
         74:a5:dc:ff:a4:2f:08:36:89:13:53:40:ef:be:e8:c4:73:f5:
         8f:52:21:91:e7:77:5e:7e:6b:0d:ec:3b:e3:e3:b0:d6:67:eb:
         bf:95:60:6c:5a:49:db:f5:5b:6f:1c:0b:a2:c4:87:12:af:c4:
         c3:29:cd:23:ce:1f:ce:ff:d2:9c:42:82:e4:d4:ec:37:77:76:
         7c:63:35:6d:ae:0a:15:42:8b:84:46:d2:db:58:f1:b1:dc:c7:
         72:04:3c:27:f1:19:a1:ba:7e:be:6a:de:5b:b1:7c:70:bb:63:
         84:5a:1d:0b:bb:27:94:6a:40:d0:18:9d:3d:61:a3:0a:d1:ff:
         c5:89:af:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:32:45 2025 by rpki-client