Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft
File:                     VyVNn31j60IRhMWNAuBBlwWaag4.mft (raw, json)
Hash identifier:          KwJW0TjATk0jbBuJsYz8YkZAV56lXU70iTYHgUgMfKQ=
Subject key identifier:   8C:09:73:12:7E:8D:45:EB:CE:C8:F7:DE:B6:1F:DB:F6:1C:D5:E2:AB
Authority key identifier: 57:25:4D:9F:7D:63:EB:42:11:84:C5:8D:02:E0:41:97:05:9A:6A:0E
Certificate issuer:       /CN=57254D9F7D63EB421184C58D02E04197059A6A0E
Certificate serial:       0652
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VyVNn31j60IRhMWNAuBBlwWaag4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft
Manifest number:          0652
Signing time:             Fri 31 Jan 2025 15:24:32 +0000
Manifest this update:     Fri 31 Jan 2025 15:24:32 +0000
Manifest next update:     Fri 31 Jan 2025 21:24:32 +0000
Files and hashes:         1: VyVNn31j60IRhMWNAuBBlwWaag4.crl (hash: Rh/5Wb/RvL3sZsvSDGaklLoA074TXBi/BK/p5uRGxH8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1618 (0x652)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57254D9F7D63EB421184C58D02E04197059A6A0E
        Validity
            Not Before: Jan 31 15:24:32 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=8C0973127E8D45EBCEC8F7DEB61FDBF61CD5E2AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:86:a3:56:2e:72:20:0b:b8:87:bc:20:2a:f8:
                    e5:6a:81:f5:dc:d9:16:77:cd:f1:1d:03:a8:a6:59:
                    1f:7c:4c:0c:9e:1e:dc:9b:47:ef:a3:69:b4:8e:16:
                    2a:db:ab:2f:da:c9:f5:3a:8a:a9:43:f8:d7:59:76:
                    5d:0b:e5:83:af:e0:08:04:9a:51:ff:2e:78:64:cc:
                    12:f4:7f:f7:d8:01:11:8b:51:87:8a:5c:ca:a9:41:
                    5c:f2:36:ce:07:4a:2d:88:1d:64:d6:53:6d:0f:4d:
                    fb:70:e9:17:c4:e9:b6:ac:39:77:b0:64:45:53:66:
                    25:19:f8:c5:35:83:2c:7b:4b:83:ea:98:74:03:a0:
                    a9:cf:08:ba:47:6d:17:fa:56:a8:eb:f8:fd:2d:e6:
                    cf:18:49:fa:7f:2e:1b:74:23:74:37:44:a7:61:77:
                    55:91:7a:1c:41:f1:df:61:c1:1d:47:9f:21:18:6f:
                    ca:77:44:06:8f:0e:89:d2:67:12:e8:d0:b2:b2:62:
                    8f:49:21:65:cc:64:3f:8c:1f:79:f0:6f:8b:dd:94:
                    63:e2:d9:04:bc:42:fb:5a:38:c6:dd:33:00:b9:30:
                    07:15:70:5f:4a:0a:a8:d9:a6:dc:a5:98:5e:32:d1:
                    45:3a:96:e9:2e:d0:63:af:66:ca:3e:83:d0:53:86:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:09:73:12:7E:8D:45:EB:CE:C8:F7:DE:B6:1F:DB:F6:1C:D5:E2:AB
            X509v3 Authority Key Identifier:
                keyid:57:25:4D:9F:7D:63:EB:42:11:84:C5:8D:02:E0:41:97:05:9A:6A:0E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VyVNn31j60IRhMWNAuBBlwWaag4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:94:b5:5e:ea:27:60:03:b6:ef:15:10:26:6c:95:e6:60:ec:
         7a:f9:4d:cb:79:5b:c5:b6:73:21:8b:37:c0:cf:0f:70:4a:33:
         55:79:fb:d3:9f:91:28:52:52:42:50:97:0e:b1:2b:5e:e5:3f:
         77:52:68:75:e0:3a:ce:11:9b:8b:d6:31:2b:ff:ff:0a:5a:2b:
         b8:e7:9c:d8:67:4b:ce:74:88:bb:41:83:b3:52:f3:b2:27:da:
         b5:10:47:90:e1:d3:82:4f:ae:d9:0b:33:bd:60:25:9c:af:34:
         d5:db:aa:d4:0d:4c:78:3c:58:da:de:17:fc:5a:1c:13:83:55:
         73:89:4b:14:f8:ac:55:97:5c:6d:40:58:52:01:f2:16:67:b1:
         04:1e:85:db:e3:1b:f6:72:9e:94:43:22:06:33:43:03:21:68:
         05:b9:26:52:21:c5:b0:86:dd:fd:be:8d:a8:40:46:2b:a1:fb:
         23:2d:14:6b:af:6c:d9:00:f2:68:a8:7e:5c:cc:bd:73:f2:42:
         38:c4:35:f7:e8:41:fc:cd:16:7f:aa:8b:30:31:f1:65:c4:c2:
         1a:bd:1a:77:cf:a9:b1:bc:c3:79:71:a1:a7:06:53:7b:49:9b:
         9f:87:73:79:d1:ee:fd:9f:22:10:2d:a6:37:73:0b:9d:3e:2b:
         f5:0a:97:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:01:31 2025 by rpki-client