Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3269/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.mft
File:                     WCQO-Tq-mV-XYbQhUzb_qpcFnqc.mft (raw, json)
Hash identifier:          mIyPQJVif84sNc+O9y02GjJ3Ka4rG9VkEmvVMAXmdI4=
Subject key identifier:   58:89:77:2F:20:9A:16:EE:13:8C:78:F5:75:71:7F:7A:4B:6B:47:43
Authority key identifier: 58:24:0E:F9:3A:BE:99:5F:97:61:B4:21:53:36:FF:AA:97:05:9E:A7
Certificate issuer:       /CN=58240EF93ABE995F9761B4215336FFAA97059EA7
Certificate serial:       0667
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.mft
Manifest number:          0667
Signing time:             Fri 31 Jan 2025 15:24:46 +0000
Manifest this update:     Fri 31 Jan 2025 15:24:46 +0000
Manifest next update:     Fri 31 Jan 2025 21:24:46 +0000
Files and hashes:         1: WCQO-Tq-mV-XYbQhUzb_qpcFnqc.crl (hash: yhADEoEJXsLPiiSeSYUJ5ZaL410cD4IJaEaATILA4MY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1639 (0x667)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58240EF93ABE995F9761B4215336FFAA97059EA7
        Validity
            Not Before: Jan 31 15:24:46 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=5889772F209A16EE138C78F575717F7A4B6B4743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:3c:7c:92:20:65:7d:db:8c:fb:8c:18:57:
                    8c:77:cc:cf:0e:9a:66:9c:1c:59:1e:cd:ce:cf:63:
                    89:d6:04:93:e7:68:a7:88:4a:6e:51:df:c9:18:c3:
                    3b:4e:34:b8:88:47:0c:55:39:f4:f7:48:db:29:5b:
                    03:15:0a:d5:86:3f:d9:3c:70:db:85:4d:29:25:3a:
                    43:a1:ea:fb:63:cb:3b:86:8b:d4:2c:75:d7:93:e2:
                    f6:69:90:dd:0a:b2:85:47:35:80:95:1c:b2:6b:71:
                    4d:7d:03:fc:54:7e:6f:ba:ff:04:6d:c3:20:f1:05:
                    8c:f3:c6:6b:19:3c:30:37:2e:e0:b9:b4:f1:a8:df:
                    47:29:0f:4a:e7:06:d5:62:d7:9b:64:b0:17:8f:f6:
                    6a:e1:f8:79:96:7b:bc:33:1f:8d:04:38:74:93:50:
                    a8:22:f7:14:be:6b:a4:e1:5f:85:b4:6c:34:7d:50:
                    9c:d7:e1:8d:94:3a:77:02:4a:b8:8d:16:69:2c:79:
                    c0:a1:7c:5f:0c:8e:e4:48:74:a3:42:f4:5e:a3:f5:
                    de:22:be:cd:64:28:be:c8:74:27:49:6c:f6:9a:59:
                    49:b2:da:f5:d0:a4:1b:61:cc:36:83:fc:89:fa:8c:
                    61:1f:2d:58:84:e6:f9:2e:84:7c:7c:20:91:0f:33:
                    ce:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:89:77:2F:20:9A:16:EE:13:8C:78:F5:75:71:7F:7A:4B:6B:47:43
            X509v3 Authority Key Identifier:
                keyid:58:24:0E:F9:3A:BE:99:5F:97:61:B4:21:53:36:FF:AA:97:05:9E:A7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:05:40:af:dc:bd:0e:93:2a:04:d5:98:8d:d7:36:6d:df:29:
         2a:9d:58:9c:ab:60:14:47:56:ab:2d:52:61:53:48:b8:84:a6:
         cf:14:a3:6c:76:75:42:e9:ab:99:40:61:25:c9:87:91:23:79:
         d7:11:c4:c8:75:28:22:2c:57:95:23:7c:ca:ed:4f:c9:a6:1a:
         73:a6:67:65:8d:ce:be:f2:12:71:0f:ed:31:1b:73:42:30:c9:
         10:65:68:a5:e3:84:1e:0d:26:87:0c:15:b4:89:b3:23:1a:10:
         8d:ec:86:32:66:d1:d8:6b:7e:07:36:5c:d0:1d:69:3f:6f:93:
         46:84:e0:13:a6:eb:2b:cd:ef:ef:63:e2:ce:31:ed:bd:b0:41:
         d0:35:81:47:c4:15:9a:ed:60:37:2b:d3:d5:50:b0:35:53:be:
         11:e8:07:2a:92:00:e6:3d:27:18:f8:5c:63:47:aa:de:81:7e:
         4e:e7:29:59:49:c1:dc:8b:fe:68:05:9f:57:a6:5e:95:08:80:
         01:fe:91:60:82:44:52:47:c9:bb:22:de:33:f9:94:77:6b:49:
         4b:76:72:3f:d9:dc:81:49:7c:d3:1f:c9:59:2a:70:ff:36:3f:
         ec:b2:0d:88:2a:05:ea:7d:41:36:f0:6e:f5:10:17:26:da:5a:
         12:65:7d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:54:42 2025 by rpki-client