Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3338/Ecx0P_pgKFVeC5k8550d_TD1MSU.mft
File:                     Ecx0P_pgKFVeC5k8550d_TD1MSU.mft (raw, json)
Hash identifier:          YIUIdE6OfNQdhG36YaD0nbFfTLQ0gvUSukUduvcclSM=
Subject key identifier:   56:E1:40:C8:49:05:DC:87:D1:6E:10:6E:6A:5A:AA:A5:1B:99:6D:FE
Authority key identifier: 11:CC:74:3F:FA:60:28:55:5E:0B:99:3C:E7:9D:1D:FD:30:F5:31:25
Certificate issuer:       /CN=11CC743FFA6028555E0B993CE79D1DFD30F53125
Certificate serial:       FD
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Ecx0P_pgKFVeC5k8550d_TD1MSU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/Ecx0P_pgKFVeC5k8550d_TD1MSU.mft
Manifest number:          FD
Signing time:             Fri 31 Jan 2025 15:28:41 +0000
Manifest this update:     Fri 31 Jan 2025 15:28:41 +0000
Manifest next update:     Fri 31 Jan 2025 21:28:41 +0000
Files and hashes:         1: Ecx0P_pgKFVeC5k8550d_TD1MSU.crl (hash: xPlUbW8dn/ecI4NvU0sVnq+tKpO4wFis2tc+cQ8iILo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11CC743FFA6028555E0B993CE79D1DFD30F53125
        Validity
            Not Before: Jan 31 15:28:41 2025 GMT
            Not After : Dec 10 08:49:25 2025 GMT
        Subject: CN=56E140C84905DC87D16E106E6A5AAAA51B996DFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fa:eb:87:5d:c6:d2:5b:8c:27:b5:5d:cf:fa:
                    5d:ae:21:6f:e3:5c:5f:50:55:c9:8f:a2:60:52:05:
                    16:4d:a2:47:59:f4:88:12:b4:01:e3:f7:86:70:3b:
                    b8:11:21:98:bd:74:af:34:95:e3:6a:5d:b1:88:72:
                    6e:25:12:73:d6:41:7c:78:86:e2:6d:64:92:97:fe:
                    5d:26:97:01:66:96:30:f8:e2:66:d6:ee:27:c5:5d:
                    a7:d8:a7:18:35:4c:8f:34:42:a5:d2:f2:99:40:4e:
                    71:5a:cc:ff:dc:94:5c:82:c3:55:90:ce:78:09:83:
                    e7:00:d5:e9:df:f3:92:b6:7a:65:71:ea:63:09:d8:
                    84:4c:cd:d8:71:b9:b3:0f:84:f7:17:c3:96:3d:f7:
                    3f:d8:f9:6f:88:a0:dc:96:36:76:bb:ee:a4:dd:2d:
                    4f:17:bc:79:15:2d:f6:fd:f8:6b:c6:15:38:39:cb:
                    6f:98:b3:71:46:af:30:a2:53:62:9f:13:f6:1c:37:
                    ff:e2:a4:ca:ad:66:d9:e7:6a:17:8e:56:18:8f:38:
                    97:20:2b:7d:28:d7:67:b6:3f:ee:cb:16:71:b5:c2:
                    e4:d2:f1:47:3e:b3:2f:4f:9e:05:27:4f:c9:33:a8:
                    6e:44:59:bc:e2:34:b1:85:64:12:74:67:e7:79:28:
                    08:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E1:40:C8:49:05:DC:87:D1:6E:10:6E:6A:5A:AA:A5:1B:99:6D:FE
            X509v3 Authority Key Identifier:
                keyid:11:CC:74:3F:FA:60:28:55:5E:0B:99:3C:E7:9D:1D:FD:30:F5:31:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/Ecx0P_pgKFVeC5k8550d_TD1MSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Ecx0P_pgKFVeC5k8550d_TD1MSU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/Ecx0P_pgKFVeC5k8550d_TD1MSU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b2:86:b4:29:4f:23:4a:39:da:ce:1d:05:d3:ae:d5:4f:eb:
         5f:9f:d4:d0:d8:b4:a8:ff:2f:ad:16:b9:94:08:00:11:d5:ce:
         98:db:12:3f:c0:5e:09:7e:14:55:28:c2:b8:dd:c6:a0:a3:00:
         49:ab:44:e2:c7:00:a6:fe:c0:b8:35:74:fe:ae:d2:65:d9:8f:
         5a:9e:c6:18:76:6a:bf:06:07:9f:84:71:60:41:db:df:9e:92:
         85:68:d3:e3:b5:fa:b0:45:87:d4:24:9c:ed:45:ce:5e:51:0c:
         e9:63:2c:6d:38:66:8c:9e:9b:c0:6b:ba:a6:84:b2:58:2c:49:
         89:d5:b8:fd:40:65:16:5a:56:f2:24:f7:14:14:1e:e0:f6:73:
         57:d6:04:f3:b0:bf:14:81:01:d8:5a:4b:8f:1b:ff:1b:86:48:
         b5:8f:fb:76:02:7d:47:bc:ec:81:ad:81:1f:73:93:e9:f1:e2:
         9e:02:74:fe:b6:9b:c5:22:9e:45:a0:d3:47:3d:7e:a8:1a:d6:
         0d:fc:9c:7d:cb:b5:6a:22:8d:d1:3e:a7:29:26:f6:1d:84:87:
         71:92:76:27:60:29:b3:e0:2a:81:f5:6c:c1:57:1b:48:81:bb:
         8a:6c:c8:09:d8:83:fd:3d:d3:70:8a:0d:72:75:32:83:74:b6:
         9f:44:df:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:50:03 2025 by rpki-client