Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3264/siBZMMmnzLPKhy8QeQqwa2_acHI.mft
File:                     siBZMMmnzLPKhy8QeQqwa2_acHI.mft (raw, json)
Hash identifier:          FyvObuIrSvqt8MtqYD6XmqRn73xa2ZEy2iQ+HCUkzTU=
Subject key identifier:   35:B1:A6:FD:B2:A5:7B:24:92:AF:9E:83:B4:24:7A:63:10:82:7B:B1
Authority key identifier: B2:20:59:30:C9:A7:CC:B3:CA:87:2F:10:79:0A:B0:6B:6F:DA:70:72
Certificate issuer:       /CN=B2205930C9A7CCB3CA872F10790AB06B6FDA7072
Certificate serial:       0600
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/siBZMMmnzLPKhy8QeQqwa2_acHI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/siBZMMmnzLPKhy8QeQqwa2_acHI.mft
Manifest number:          0600
Signing time:             Fri 31 Jan 2025 15:26:16 +0000
Manifest this update:     Fri 31 Jan 2025 15:26:16 +0000
Manifest next update:     Fri 31 Jan 2025 21:26:16 +0000
Files and hashes:         1: siBZMMmnzLPKhy8QeQqwa2_acHI.crl (hash: UYQh9biSUsB4PAEPdG72Nr4maqkhwGy1iVnAoLZH3mI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1536 (0x600)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2205930C9A7CCB3CA872F10790AB06B6FDA7072
        Validity
            Not Before: Jan 31 15:26:16 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=35B1A6FDB2A57B2492AF9E83B4247A6310827BB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:55:cb:58:88:9a:53:9a:3e:03:72:a9:1d:03:
                    b9:05:0d:34:3e:fa:84:e2:5f:cd:d8:92:bc:06:95:
                    e0:27:7a:48:23:00:2a:c0:84:6f:f3:5e:fc:d1:6b:
                    16:5a:56:86:3d:a6:b7:e6:68:a6:f1:39:47:6b:ae:
                    bc:1b:b9:5c:88:c7:3e:69:a4:77:0d:4b:68:09:fe:
                    e4:f4:24:32:74:05:6e:04:76:55:5b:76:9b:24:00:
                    53:a8:94:cc:dc:62:ef:28:ad:b5:bd:77:c2:28:68:
                    c8:e4:34:aa:dc:ab:17:85:e1:1c:67:cf:0c:b4:e0:
                    48:95:fc:b3:0f:b9:0c:d1:d1:f4:bd:ea:a4:49:d4:
                    b4:0d:d4:30:8b:80:9b:eb:25:98:ca:ae:30:27:6b:
                    58:1d:65:af:80:e2:dd:82:99:bf:9c:7a:20:ec:d6:
                    52:52:85:00:f6:0f:20:99:3c:d0:40:f5:86:4e:b7:
                    d8:59:72:d3:72:47:0a:3c:fd:32:23:f1:47:e3:e1:
                    00:a1:bc:98:ce:b8:63:c7:90:0c:b5:8b:f0:c3:c8:
                    96:66:f7:7e:cc:0c:4f:4c:25:77:13:c5:ab:96:df:
                    e0:14:42:24:6e:d3:14:de:98:76:91:6d:2e:a9:6b:
                    d2:c9:47:86:33:95:58:f2:2c:2b:a1:b2:d3:08:9c:
                    8d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B1:A6:FD:B2:A5:7B:24:92:AF:9E:83:B4:24:7A:63:10:82:7B:B1
            X509v3 Authority Key Identifier:
                keyid:B2:20:59:30:C9:A7:CC:B3:CA:87:2F:10:79:0A:B0:6B:6F:DA:70:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/siBZMMmnzLPKhy8QeQqwa2_acHI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/siBZMMmnzLPKhy8QeQqwa2_acHI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/siBZMMmnzLPKhy8QeQqwa2_acHI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:87:7f:80:e1:3c:92:38:33:c3:e7:5d:7a:69:09:4e:7c:4e:
         80:26:a2:55:7d:31:d7:fa:e7:bf:48:51:80:06:57:ab:73:eb:
         e8:d6:a1:ef:9e:0e:96:f3:37:8e:7f:27:d2:5f:40:77:99:b5:
         e1:31:e5:39:85:61:df:95:1c:0f:6d:b7:27:b9:24:af:98:fc:
         f7:ec:e4:27:8b:63:a5:55:e0:be:01:15:d9:72:79:ad:65:f7:
         51:a7:01:b4:3c:d9:ac:4a:db:26:7e:8d:f3:75:60:f4:fc:8c:
         29:97:30:f6:ae:63:97:6b:49:0e:9f:80:ce:3c:66:7c:72:ad:
         ec:bc:69:44:e0:d3:8d:74:fb:f1:74:c3:dd:63:11:0f:04:10:
         4e:6e:d6:4d:35:58:ab:58:cf:6d:cd:fa:d2:c5:aa:ab:a2:9c:
         c0:e7:96:ae:87:9f:e9:a0:7b:6f:9f:2c:ed:f5:c1:15:30:7e:
         ef:82:43:fc:e3:a0:4a:1e:21:f5:0a:5e:32:3f:48:fc:22:d0:
         be:d0:79:c1:44:fd:af:af:7c:ba:04:26:25:15:81:6a:91:92:
         29:e7:23:88:85:64:12:56:a4:06:8a:d8:6d:8f:bf:30:0f:96:
         6c:72:69:d3:d1:f5:9a:78:87:1d:13:b7:c5:84:3c:62:71:56:
         4f:60:75:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:34:33 2025 by rpki-client