Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3259/8eEYZjFmXucC71BAp9J-rFDMXf0.mft
File:                     8eEYZjFmXucC71BAp9J-rFDMXf0.mft (raw, json)
Hash identifier:          9KF2DN9F0ps9EzaC91MMl+EIUHptEVYLJ5W3Ilkp5T4=
Subject key identifier:   44:1D:06:ED:58:98:E6:7B:A8:50:97:32:05:8F:AA:61:00:17:59:E6
Authority key identifier: F1:E1:18:66:31:66:5E:E7:02:EF:50:40:A7:D2:7E:AC:50:CC:5D:FD
Certificate issuer:       /CN=F1E1186631665EE702EF5040A7D27EAC50CC5DFD
Certificate serial:       074A
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8eEYZjFmXucC71BAp9J-rFDMXf0.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/8eEYZjFmXucC71BAp9J-rFDMXf0.mft
Manifest number:          074A
Signing time:             Fri 31 Jan 2025 15:26:51 +0000
Manifest this update:     Fri 31 Jan 2025 15:26:51 +0000
Manifest next update:     Fri 31 Jan 2025 21:26:51 +0000
Files and hashes:         1: 8eEYZjFmXucC71BAp9J-rFDMXf0.crl (hash: jGidpyuVb2nXt98PnE/dSxwEC+67GAH0HqpRSsMfPdM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1866 (0x74a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1E1186631665EE702EF5040A7D27EAC50CC5DFD
        Validity
            Not Before: Jan 31 15:26:51 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=441D06ED5898E67BA8509732058FAA61001759E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6e:69:f8:34:1d:a0:6b:4c:31:03:bd:7c:9e:
                    18:b4:a9:5b:c1:53:e1:54:37:f8:f4:5e:7c:b0:10:
                    8b:7a:a1:a8:d2:f9:31:f1:1b:c6:dd:36:cf:fe:04:
                    bb:d5:7f:cd:39:84:c9:f8:58:a4:4b:d1:06:45:84:
                    82:3a:b8:e6:d0:6f:9b:d1:3c:f4:46:ed:8f:5a:90:
                    6c:5e:c5:20:22:23:a2:e7:4e:fc:3b:1a:da:7b:20:
                    10:9f:b2:d9:92:c0:8c:49:21:63:43:fc:7a:d3:97:
                    4c:68:ea:b9:5f:53:eb:71:fd:ce:9c:a1:ac:57:3c:
                    ad:46:37:74:57:32:a8:38:d7:de:52:05:cf:20:c2:
                    88:72:cb:4b:3a:85:96:5d:e9:49:fe:d8:eb:4c:19:
                    b9:0b:68:d5:d9:03:6a:e9:d8:b0:6f:de:7b:7c:77:
                    db:2c:aa:49:b3:b1:1a:46:e5:e9:de:89:5c:26:4c:
                    dd:12:cd:f4:22:d5:17:30:88:99:6d:c0:8c:d5:6d:
                    88:c0:1a:21:f2:b5:24:29:b6:4b:8e:92:0d:6e:91:
                    98:0e:40:42:78:da:77:02:5f:a8:93:8c:31:71:7b:
                    1a:3a:fb:df:f6:42:ba:95:66:9c:2c:82:65:d5:8c:
                    a8:2a:92:35:d7:f2:2d:a9:50:a2:30:1a:90:88:a9:
                    31:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1D:06:ED:58:98:E6:7B:A8:50:97:32:05:8F:AA:61:00:17:59:E6
            X509v3 Authority Key Identifier:
                keyid:F1:E1:18:66:31:66:5E:E7:02:EF:50:40:A7:D2:7E:AC:50:CC:5D:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/8eEYZjFmXucC71BAp9J-rFDMXf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8eEYZjFmXucC71BAp9J-rFDMXf0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/8eEYZjFmXucC71BAp9J-rFDMXf0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:9d:f4:17:62:9e:aa:02:f1:e7:c2:93:a4:52:87:68:36:fd:
         e5:be:19:f5:e5:a5:a6:5d:c3:95:8e:db:d9:fa:2c:80:b5:d8:
         b2:a0:9b:38:de:47:3e:64:2b:98:71:8c:2c:c9:7f:60:e4:57:
         6b:f4:f8:d9:69:bf:0e:f3:7e:6c:8c:f3:f0:d8:42:09:59:69:
         05:98:f7:83:95:1c:8a:b7:08:fd:89:0f:b5:1c:34:63:5a:8f:
         8e:e2:59:1e:31:aa:75:22:e2:a0:a9:21:93:7d:57:8d:3a:03:
         9d:1b:b3:e6:ea:ed:6f:46:2f:c4:9c:f9:dd:04:27:4a:39:53:
         b7:37:1d:8e:f5:8d:9f:29:7e:0f:e1:d4:27:9a:69:c0:0d:e5:
         8a:54:ca:60:d2:b6:5b:07:9f:a3:1e:65:df:69:7a:f1:1c:59:
         3b:d1:f9:47:53:fe:ea:b0:34:52:1c:04:0d:13:89:cf:b8:51:
         66:4f:4e:bc:ef:76:5c:7e:f4:54:f6:e1:ba:78:fb:8c:23:16:
         05:b9:46:36:4b:42:c6:14:7e:29:c5:be:c7:27:4c:71:bc:6a:
         64:79:16:1b:f4:25:94:5e:01:a3:06:44:8e:e3:26:3a:de:f8:
         54:54:e3:70:d3:ac:dd:b6:83:19:4e:d8:69:ed:33:44:0c:dd:
         8e:78:98:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:30:14 2025 by rpki-client