Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3303/YUdo14zf1NPTMMvhK6DxuTJ6rM8.mft
File:                     YUdo14zf1NPTMMvhK6DxuTJ6rM8.mft (raw, json)
Hash identifier:          KGsIe2AD3TeaI71xigOWdvdtM0tqezCyN9lh7Uqi7oc=
Subject key identifier:   38:4F:8B:57:F3:79:2E:F1:89:B3:64:DA:F5:EE:B9:E9:6F:11:34:A2
Authority key identifier: 61:47:68:D7:8C:DF:D4:D3:D3:30:CB:E1:2B:A0:F1:B9:32:7A:AC:CF
Certificate issuer:       /CN=614768D78CDFD4D3D330CBE12BA0F1B9327AACCF
Certificate serial:       03FB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YUdo14zf1NPTMMvhK6DxuTJ6rM8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3303/YUdo14zf1NPTMMvhK6DxuTJ6rM8.mft
Manifest number:          03FB
Signing time:             Fri 31 Jan 2025 15:26:01 +0000
Manifest this update:     Fri 31 Jan 2025 15:26:01 +0000
Manifest next update:     Fri 31 Jan 2025 21:26:01 +0000
Files and hashes:         1: YUdo14zf1NPTMMvhK6DxuTJ6rM8.crl (hash: WpnSV9kGtlORLaI3QpK2uTxDuBpVT1DyQEOzR3alW80=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1019 (0x3fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614768D78CDFD4D3D330CBE12BA0F1B9327AACCF
        Validity
            Not Before: Jan 31 15:26:01 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=384F8B57F3792EF189B364DAF5EEB9E96F1134A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e2:a9:c8:bf:c8:78:3b:7d:72:48:78:c7:b6:
                    6c:ee:be:74:85:cd:33:19:8c:69:40:3f:d5:5e:c5:
                    09:58:80:55:2b:55:72:aa:1f:3d:99:3a:27:1c:9f:
                    cd:bb:2b:50:6b:e4:ad:c4:c3:fb:79:f3:97:5f:43:
                    4b:d0:ce:e1:40:a1:ea:2e:25:76:16:85:3b:2f:64:
                    e7:9e:52:55:03:d6:0c:2d:71:98:91:67:bc:2b:50:
                    1e:f0:d3:f5:5e:dd:ce:f5:2f:20:34:5d:b2:4d:66:
                    eb:db:54:d0:9c:ca:99:d8:dd:2f:72:bb:0f:cc:16:
                    8e:bb:3c:33:7f:ff:99:82:d2:86:a5:55:ee:ff:08:
                    f2:91:f3:fb:08:91:60:de:ae:6e:bd:3d:91:dd:01:
                    ac:d5:fd:dc:b3:2c:04:b1:d5:e2:64:1e:e3:13:72:
                    89:4a:ef:3a:51:08:37:8e:8b:19:d9:3f:99:e8:aa:
                    1d:a2:1d:93:84:c9:46:b2:51:e6:5c:13:d9:9e:e8:
                    51:18:90:c8:a8:fa:96:57:84:e4:40:5b:88:2c:9b:
                    84:4d:85:31:44:73:32:94:5f:94:90:87:28:1c:4a:
                    2d:10:a2:be:9c:32:5e:47:08:1a:05:9b:ea:5f:ac:
                    49:b9:19:c0:7a:c9:e9:62:e4:14:e8:4a:ad:7b:aa:
                    8b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4F:8B:57:F3:79:2E:F1:89:B3:64:DA:F5:EE:B9:E9:6F:11:34:A2
            X509v3 Authority Key Identifier:
                keyid:61:47:68:D7:8C:DF:D4:D3:D3:30:CB:E1:2B:A0:F1:B9:32:7A:AC:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3303/YUdo14zf1NPTMMvhK6DxuTJ6rM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YUdo14zf1NPTMMvhK6DxuTJ6rM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3303/YUdo14zf1NPTMMvhK6DxuTJ6rM8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:75:d7:8a:cb:c9:ac:df:6a:0c:c1:80:97:b5:82:91:73:ba:
         f0:0a:40:a1:84:d1:c6:4d:56:af:43:53:29:26:02:c1:4a:4d:
         1a:e9:50:e1:5f:15:a0:18:5e:1e:4c:e1:1f:e3:5d:ed:2d:88:
         20:3d:39:e3:5b:20:82:e9:cd:6a:0f:30:dd:00:05:97:4f:23:
         e3:00:3b:25:4c:31:ae:15:c9:3c:14:05:32:f5:c0:c8:e7:98:
         75:7e:80:66:a0:55:ae:f0:f6:79:af:6f:c8:f3:f4:87:68:33:
         43:81:33:68:56:69:50:ff:3b:bb:b8:17:6b:6c:b0:1c:74:df:
         48:56:0c:9c:9a:62:47:6f:f2:8f:23:00:74:c9:33:f2:f8:12:
         9c:e0:76:79:06:1f:bb:d7:83:8d:fc:e2:78:33:19:dd:3b:48:
         fa:39:b4:39:a4:4b:28:6c:bf:fa:d3:c5:0b:12:e7:3b:0e:0c:
         51:9b:04:df:23:c2:77:f7:56:5b:ff:87:25:df:19:0e:57:e6:
         74:a3:2e:e3:b9:9c:16:1e:92:96:19:91:43:4e:11:e0:bb:45:
         ed:03:8b:69:09:a0:2e:53:a6:0f:97:4c:18:4d:8e:1b:3e:98:
         61:21:23:da:63:f4:0f:48:72:cc:bc:b2:06:11:ea:d3:b5:28:
         a6:88:39:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:30:49 2025 by rpki-client