Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3290/xWg5B3F2O7YxSEuxvd-uSFlvXOI.mft
File:                     xWg5B3F2O7YxSEuxvd-uSFlvXOI.mft (raw, json)
Hash identifier:          psqX1Wg5wzwwnva5+bBhZ5LKzVyNmpgI/QElOoe+nsk=
Subject key identifier:   3A:6B:64:A2:57:5F:AD:47:2E:90:7F:75:1C:F0:18:E7:97:46:1F:16
Authority key identifier: C5:68:39:07:71:76:3B:B6:31:48:4B:B1:BD:DF:AE:48:59:6F:5C:E2
Certificate issuer:       /CN=C568390771763BB631484BB1BDDFAE48596F5CE2
Certificate serial:       04A1
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xWg5B3F2O7YxSEuxvd-uSFlvXOI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/xWg5B3F2O7YxSEuxvd-uSFlvXOI.mft
Manifest number:          04A1
Signing time:             Fri 31 Jan 2025 15:27:35 +0000
Manifest this update:     Fri 31 Jan 2025 15:27:35 +0000
Manifest next update:     Fri 31 Jan 2025 21:27:35 +0000
Files and hashes:         1: xWg5B3F2O7YxSEuxvd-uSFlvXOI.crl (hash: VI492tYrx8wWl3jNgYeMMXtoo5nRtW+6/D0MbZz/EFs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1185 (0x4a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C568390771763BB631484BB1BDDFAE48596F5CE2
        Validity
            Not Before: Jan 31 15:27:35 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=3A6B64A2575FAD472E907F751CF018E797461F16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:63:38:19:15:71:2a:01:f8:db:f8:41:8c:
                    70:db:35:07:d3:25:7a:d2:3b:a7:99:52:c3:81:06:
                    31:60:61:58:c0:40:62:21:80:8c:69:4b:1b:46:16:
                    b5:c6:3a:86:08:84:b0:2e:74:ad:d6:9b:ce:36:8a:
                    bb:de:8d:da:66:33:12:9a:e7:f3:a2:d0:15:8c:02:
                    52:26:ea:0a:c5:f0:ba:c7:ed:82:e1:20:39:67:73:
                    55:77:41:65:7c:73:79:77:f7:cc:c0:5d:e9:f0:c1:
                    00:ae:d3:4f:58:49:31:f3:3d:29:ff:c4:a5:eb:8f:
                    ec:65:13:74:6a:81:6a:ce:9b:ec:32:d4:b9:b2:02:
                    9f:ed:5d:69:43:0a:1f:1b:eb:ee:46:72:f7:ed:38:
                    7a:be:39:64:5a:9c:96:b5:13:98:ac:25:a4:a0:07:
                    0a:66:63:80:be:a3:10:df:39:4d:c7:95:f9:d0:68:
                    6e:a2:05:f6:82:f3:6b:46:7f:2c:91:60:99:23:71:
                    66:79:62:df:7c:27:d9:c8:ef:7a:f4:dd:de:81:d9:
                    2e:29:a9:d7:e8:76:22:7d:af:3c:63:e8:b1:05:42:
                    48:bd:8f:85:5a:a6:32:4c:d7:49:66:dd:7c:4e:a1:
                    70:09:90:8a:00:ef:e7:e2:c1:ce:a3:7c:03:7f:90:
                    20:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6B:64:A2:57:5F:AD:47:2E:90:7F:75:1C:F0:18:E7:97:46:1F:16
            X509v3 Authority Key Identifier:
                keyid:C5:68:39:07:71:76:3B:B6:31:48:4B:B1:BD:DF:AE:48:59:6F:5C:E2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/xWg5B3F2O7YxSEuxvd-uSFlvXOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xWg5B3F2O7YxSEuxvd-uSFlvXOI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/xWg5B3F2O7YxSEuxvd-uSFlvXOI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:20:6b:cb:c2:78:58:e0:d5:c8:99:99:d4:5b:6d:1f:52:cd:
         c7:cf:e6:38:34:75:07:fd:6a:1b:2f:41:db:78:d5:59:75:aa:
         65:c9:f9:a3:2c:98:8f:04:70:1c:b3:30:1a:3a:71:d4:ed:a8:
         e7:76:e0:4d:3b:51:45:8a:b9:23:bd:e8:6a:a5:9f:da:ee:56:
         c9:fe:56:6b:bd:51:f4:90:26:c7:ed:5c:1f:21:dd:cc:79:bf:
         7f:e7:56:28:ac:19:a1:d7:e2:a8:89:81:0a:36:12:fe:c6:18:
         4b:d1:c8:57:e9:d9:9f:65:c3:56:0e:28:6e:92:72:22:04:8d:
         c7:d7:f5:43:d9:71:93:43:04:42:1a:7e:5c:53:6e:89:b9:b2:
         88:79:a9:c1:d6:d8:53:d2:32:32:47:b6:17:8a:f6:92:ff:8b:
         93:e5:1d:76:3a:a7:e3:32:24:a7:fb:90:4b:53:cb:d4:1c:88:
         57:c9:bd:9d:f5:69:69:6c:54:8e:6e:99:d6:4c:4f:12:0b:9c:
         30:01:c5:3f:37:65:60:3f:d4:8e:e4:9f:99:86:29:87:52:38:
         a4:a9:32:47:3c:06:98:54:ed:13:2e:84:c1:56:c9:79:34:f7:
         1f:dc:2c:ef:20:cb:e5:39:fd:e8:26:5b:7e:03:c4:24:cb:18:
         61:fa:30:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:48:50 2025 by rpki-client