Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3312/5NFB-TO2ocZem2mg8wQuJNaNEyg.mft
File:                     5NFB-TO2ocZem2mg8wQuJNaNEyg.mft (raw, json)
Hash identifier:          aVUvpnvOea8P2N2/AlpsGAyKLhIJaUMcR1b0eZzxnpw=
Subject key identifier:   20:07:C9:B5:5B:15:A5:70:2F:4C:39:D3:DE:70:96:D7:45:24:AE:F6
Authority key identifier: E4:D1:41:F9:33:B6:A1:C6:5E:9B:69:A0:F3:04:2E:24:D6:8D:13:28
Certificate issuer:       /CN=E4D141F933B6A1C65E9B69A0F3042E24D68D1328
Certificate serial:       030B
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5NFB-TO2ocZem2mg8wQuJNaNEyg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/5NFB-TO2ocZem2mg8wQuJNaNEyg.mft
Manifest number:          030B
Signing time:             Fri 31 Jan 2025 15:28:18 +0000
Manifest this update:     Fri 31 Jan 2025 15:28:18 +0000
Manifest next update:     Fri 31 Jan 2025 21:28:18 +0000
Files and hashes:         1: 5NFB-TO2ocZem2mg8wQuJNaNEyg.crl (hash: I1/JHkbIFb1eOn9FQP+ScONH0uwo15M8QXNcNObRaGA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 779 (0x30b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D141F933B6A1C65E9B69A0F3042E24D68D1328
        Validity
            Not Before: Jan 31 15:28:18 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=2007C9B55B15A5702F4C39D3DE7096D74524AEF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:1e:33:03:86:cc:95:e0:a3:1b:25:5f:1f:
                    b9:21:7a:2c:f0:45:fb:a6:20:05:8c:2a:4f:92:18:
                    16:b1:12:50:25:22:a8:35:a7:e1:fb:09:9e:02:ed:
                    12:6e:5d:28:20:a4:56:65:93:c0:ad:ad:35:ef:ef:
                    05:4b:35:e2:1d:fc:27:13:5c:b6:73:8d:19:c4:a5:
                    af:64:cf:8e:db:52:b6:ad:21:95:55:ff:0a:0a:28:
                    7a:99:f0:57:14:e4:a3:e8:45:60:a2:5c:64:e1:79:
                    e3:fa:47:f2:cb:9e:42:05:38:be:f6:d1:bb:ef:2b:
                    14:87:4c:08:89:85:c2:bc:b0:7e:08:47:a5:c9:63:
                    39:6e:20:3b:1c:bd:ac:c8:d8:6d:f3:8e:a8:17:4e:
                    57:a6:ed:b3:6e:6c:ed:55:93:03:60:4c:c2:4a:54:
                    5a:ec:71:cb:94:4d:f9:a2:be:2a:8b:01:e3:30:22:
                    68:56:13:31:3d:db:e7:f2:d9:5b:a5:99:17:35:f5:
                    87:b5:5c:2b:ae:0c:f0:6a:4d:6e:5a:34:11:55:78:
                    65:9a:96:a8:49:71:d8:fc:97:ba:d6:f8:89:52:ea:
                    54:ca:d7:16:dc:75:86:3b:af:ae:66:42:cb:e6:22:
                    06:45:0c:79:fc:74:39:82:0c:ee:59:ca:63:6b:ce:
                    93:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:07:C9:B5:5B:15:A5:70:2F:4C:39:D3:DE:70:96:D7:45:24:AE:F6
            X509v3 Authority Key Identifier:
                keyid:E4:D1:41:F9:33:B6:A1:C6:5E:9B:69:A0:F3:04:2E:24:D6:8D:13:28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/5NFB-TO2ocZem2mg8wQuJNaNEyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5NFB-TO2ocZem2mg8wQuJNaNEyg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/5NFB-TO2ocZem2mg8wQuJNaNEyg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:dd:52:9d:57:0a:bc:39:75:cb:9b:5f:a1:57:e8:88:68:1c:
         76:45:62:f6:c7:ee:f3:24:c8:9d:34:22:78:67:53:ac:9d:18:
         45:b0:74:f1:e5:ea:32:6f:80:67:20:26:e3:d8:48:44:eb:7e:
         5e:78:3f:84:7c:ed:9d:98:cd:2e:b6:76:ed:99:08:27:54:af:
         6e:fd:b0:11:1a:0b:a0:33:cc:da:ac:5c:ba:95:42:f7:0c:0e:
         b3:2f:84:30:8b:3b:ea:bf:27:8b:94:74:95:13:3c:ae:5e:10:
         f3:6f:a5:74:1e:3c:c7:28:b7:25:80:39:d1:b0:ef:ed:c8:6c:
         95:ec:f3:5b:14:5d:26:1d:4c:3b:02:1b:72:7a:7e:82:7f:d7:
         73:37:f9:b5:e6:7a:45:21:a6:0a:8c:e8:ad:ef:77:18:8f:fd:
         4d:4d:6f:98:da:e9:b6:82:e3:da:70:08:41:ad:69:9c:46:d2:
         22:85:7f:ae:9f:02:d2:54:08:dd:2f:3f:b3:40:e0:49:ea:89:
         4f:6a:02:5f:96:1c:86:e6:dd:88:51:e6:80:48:fa:f3:9d:99:
         f0:d7:81:e4:3d:f4:d4:a9:0e:79:b2:92:c3:c8:5f:54:f5:01:
         26:9f:d7:c5:d5:5a:44:f9:d0:4f:27:5a:0b:4b:e3:a4:24:7a:
         26:4c:13:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:46:20 2025 by rpki-client