Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3249/vJA-IGAC4WXCtlKh9td7d9hy4io.mft
File:                     vJA-IGAC4WXCtlKh9td7d9hy4io.mft (raw, json)
Hash identifier:          Wl3uC5iloCuojrCtu6LbxGSKejC3mMY9XMtK4FmeqoQ=
Subject key identifier:   B4:6C:C3:3E:2B:B3:08:6B:36:EA:A0:CD:93:40:F8:0E:57:98:D7:4A
Authority key identifier: BC:90:3E:20:60:02:E1:65:C2:B6:52:A1:F6:D7:7B:77:D8:72:E2:2A
Certificate issuer:       /CN=BC903E206002E165C2B652A1F6D77B77D872E22A
Certificate serial:       07EF
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vJA-IGAC4WXCtlKh9td7d9hy4io.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/vJA-IGAC4WXCtlKh9td7d9hy4io.mft
Manifest number:          07EF
Signing time:             Fri 31 Jan 2025 15:28:13 +0000
Manifest this update:     Fri 31 Jan 2025 15:28:13 +0000
Manifest next update:     Fri 31 Jan 2025 21:28:13 +0000
Files and hashes:         1: vJA-IGAC4WXCtlKh9td7d9hy4io.crl (hash: qdDrSMNzp131/nH86mWB+7KAopVAyg5LhyjEigxuEWk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2031 (0x7ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC903E206002E165C2B652A1F6D77B77D872E22A
        Validity
            Not Before: Jan 31 15:28:13 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=B46CC33E2BB3086B36EAA0CD9340F80E5798D74A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b3:ba:9f:68:94:97:00:a8:47:df:40:87:c4:
                    74:e6:9c:46:5d:a1:e8:c7:9d:f7:17:a2:f1:d3:3a:
                    be:53:a2:cb:d8:bc:77:80:a1:c0:b6:7d:7d:e4:ad:
                    f2:68:cb:07:cc:88:2d:cc:05:0a:66:3e:3a:32:bc:
                    7b:92:a2:c2:cc:f1:bc:1e:c0:7b:e2:5c:13:59:34:
                    93:da:2a:3c:57:36:20:09:fc:93:38:08:53:19:b0:
                    98:1d:21:1a:a6:86:95:25:9c:5a:60:c1:95:05:d5:
                    be:c3:ba:64:21:fc:b6:dd:a8:6d:4f:52:5f:aa:c9:
                    d1:0b:37:ae:b1:5e:12:36:5b:97:6c:f6:19:5a:1f:
                    01:d6:bc:ec:d7:e5:eb:fd:a8:f0:26:f7:64:3f:37:
                    f3:9b:d7:43:35:f1:2d:b3:13:2f:4f:38:69:03:fd:
                    5c:47:bb:39:a3:5a:e0:bc:df:45:ee:e8:35:43:99:
                    94:13:70:17:d2:81:91:8b:6d:fd:b5:75:f5:56:2d:
                    50:ad:13:1e:b0:90:a4:0d:77:57:bd:96:b8:d8:ba:
                    57:d3:c2:68:08:0a:87:5b:4f:9f:ba:d1:e4:90:77:
                    d9:f8:1b:e5:70:33:44:7d:13:39:f5:04:97:fd:48:
                    cd:f1:0b:eb:7a:4e:d0:e0:93:d3:a9:7f:1e:24:4a:
                    4b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6C:C3:3E:2B:B3:08:6B:36:EA:A0:CD:93:40:F8:0E:57:98:D7:4A
            X509v3 Authority Key Identifier:
                keyid:BC:90:3E:20:60:02:E1:65:C2:B6:52:A1:F6:D7:7B:77:D8:72:E2:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/vJA-IGAC4WXCtlKh9td7d9hy4io.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vJA-IGAC4WXCtlKh9td7d9hy4io.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/vJA-IGAC4WXCtlKh9td7d9hy4io.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:86:a0:c7:b1:21:c2:91:46:8e:ba:b8:cb:99:b7:b8:bd:0a:
         46:f3:35:2a:99:86:3a:c6:8d:c8:4a:76:93:ec:68:fb:70:e4:
         fe:24:e5:d8:72:91:55:7f:1d:1c:3c:3b:7a:10:2d:27:46:47:
         41:ae:11:90:43:cd:09:7d:a9:5e:75:7a:8e:8c:f7:24:ab:78:
         3a:ec:37:bf:54:44:1c:d6:50:2d:2b:a9:18:c3:b0:ec:64:36:
         76:8c:51:d9:8e:e5:eb:75:c8:e8:ff:25:99:4c:84:93:32:8c:
         f5:dc:c7:5b:c0:27:ac:c1:84:ef:ef:a1:66:0b:3b:d2:6a:5f:
         26:64:af:5c:ff:06:cc:12:9e:3a:1d:3a:30:fc:13:d3:10:f1:
         bd:08:b7:d7:c1:68:db:14:2f:2f:69:05:8d:5d:be:4f:05:95:
         75:8c:c2:4b:63:a7:80:5e:9f:24:8d:e4:99:b3:45:b3:a2:3e:
         14:07:66:38:25:f8:68:43:4c:68:50:97:a4:26:ca:6f:3b:0e:
         1f:cc:b9:fc:8e:f2:65:96:5b:2f:0d:b9:4b:20:40:33:64:0a:
         4e:70:56:0c:77:95:9c:e7:1f:58:b3:33:da:e9:27:71:b9:e7:
         c2:6a:86:49:c4:f3:23:a8:b0:e1:5d:5c:61:6f:5c:f2:53:85:
         4d:45:86:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:46:24 2025 by rpki-client