Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3338/h5M3g18FYrKaaQsbUBKsbiS66D8.mft
File:                     h5M3g18FYrKaaQsbUBKsbiS66D8.mft (raw, json)
Hash identifier:          I/IxZqRJB05EE/4HRlqSMfERSNPe6irYHVr+i0lLLl4=
Subject key identifier:   90:AC:03:B2:DE:2A:2F:15:4B:B4:10:D6:6C:6D:B7:82:3C:CD:1C:FF
Authority key identifier: 87:93:37:83:5F:05:62:B2:9A:69:0B:1B:50:12:AC:6E:24:BA:E8:3F
Certificate issuer:       /CN=879337835F0562B29A690B1B5012AC6E24BAE83F
Certificate serial:       011A
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h5M3g18FYrKaaQsbUBKsbiS66D8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/h5M3g18FYrKaaQsbUBKsbiS66D8.mft
Manifest number:          011A
Signing time:             Fri 31 Jan 2025 15:28:41 +0000
Manifest this update:     Fri 31 Jan 2025 15:28:41 +0000
Manifest next update:     Fri 31 Jan 2025 21:28:41 +0000
Files and hashes:         1: h5M3g18FYrKaaQsbUBKsbiS66D8.crl (hash: /sqtIPfbfcBu0uja/Exuq8EPYnfdQKahMePASrjiv3k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=879337835F0562B29A690B1B5012AC6E24BAE83F
        Validity
            Not Before: Jan 31 15:28:41 2025 GMT
            Not After : Dec 10 08:49:25 2025 GMT
        Subject: CN=90AC03B2DE2A2F154BB410D66C6DB7823CCD1CFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:75:ba:1a:42:41:3f:5b:52:14:f1:99:a4:e3:
                    a1:8f:a8:c1:dc:5d:25:0a:96:d6:d7:f3:4f:64:c7:
                    89:bd:76:69:99:0f:cd:0f:0a:42:62:87:88:6a:61:
                    42:dc:bc:e8:64:30:61:ce:49:a9:d8:88:ab:d1:a8:
                    c5:9c:dd:0a:b1:76:56:44:88:a1:29:f7:cf:bb:3f:
                    e1:6c:ba:a1:d2:44:44:fd:87:dc:8e:38:33:47:52:
                    5d:71:45:3d:1f:a5:2d:cb:14:3c:ca:be:7f:02:10:
                    ec:44:d1:61:f6:de:5d:0d:57:56:59:0e:43:87:61:
                    41:ee:f7:dd:99:40:75:b3:60:94:c6:86:62:d7:f3:
                    b2:6a:b8:52:bc:21:10:3a:c9:0b:dd:67:10:44:d4:
                    ff:3f:cc:c8:92:58:fb:b9:82:db:38:af:77:ad:47:
                    b9:19:89:4e:c0:33:f9:ba:27:11:f9:08:ad:fc:cf:
                    b3:88:c9:aa:48:32:4b:83:67:52:f3:0d:b3:e9:6e:
                    f6:4d:21:ec:49:33:42:32:e7:1e:10:ff:e4:57:46:
                    fa:74:39:b9:bd:08:39:2a:35:97:f8:46:bc:95:22:
                    90:10:97:ce:17:96:77:3b:59:8c:3a:82:ef:55:b6:
                    0c:17:27:ff:87:1f:43:75:28:c8:1c:16:e9:58:b7:
                    cd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AC:03:B2:DE:2A:2F:15:4B:B4:10:D6:6C:6D:B7:82:3C:CD:1C:FF
            X509v3 Authority Key Identifier:
                keyid:87:93:37:83:5F:05:62:B2:9A:69:0B:1B:50:12:AC:6E:24:BA:E8:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/h5M3g18FYrKaaQsbUBKsbiS66D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h5M3g18FYrKaaQsbUBKsbiS66D8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/h5M3g18FYrKaaQsbUBKsbiS66D8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:25:6e:8b:19:28:ad:1e:7d:15:c0:6b:98:2c:03:9d:96:1f:
         79:a1:60:96:0e:b8:02:01:dc:bd:d2:c8:29:47:b7:a7:94:62:
         1c:44:bd:88:f7:f6:73:69:c1:28:00:83:83:12:33:32:fc:c0:
         5f:32:86:ec:1b:3f:59:45:26:c2:e1:a2:ec:25:a8:89:75:f5:
         66:b1:ae:a1:f2:44:0f:4f:5f:8b:df:e2:c7:2e:cf:1b:0f:91:
         0e:3a:3b:51:30:a0:75:09:c4:9d:fc:62:ca:a3:f6:c0:88:e6:
         91:39:57:60:4d:e8:84:06:e1:7f:fa:7f:75:da:e7:67:7c:80:
         ab:26:f1:e5:7c:e4:79:a4:f4:2e:6b:a5:5f:44:df:80:35:0e:
         fd:62:10:39:da:0d:80:bf:71:8a:4e:d9:49:10:5d:26:1d:50:
         ec:8b:1d:fb:85:10:a7:9d:57:a7:34:06:f9:eb:a5:f1:56:fb:
         a0:a0:ba:e4:4f:6b:e8:70:8c:b4:a3:1d:3b:8b:17:d4:30:f1:
         01:66:28:30:85:55:35:ee:20:26:05:f5:aa:52:1b:cd:f3:4a:
         f0:26:96:fc:54:9a:7c:9c:c9:51:42:ca:4e:99:22:2a:82:6d:
         ef:e0:3a:ec:4e:10:aa:2f:31:3c:b7:98:03:21:33:0f:24:09:
         e9:52:7d:e5
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICARowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODc5
MzM3ODM1RjA1NjJCMjlBNjkwQjFCNTAxMkFDNkUyNEJBRTgzRjAeFw0yNTAxMzEx
NTI4NDFaFw0yNTEyMTAwODQ5MjVaMDMxMTAvBgNVBAMTKDkwQUMwM0IyREUyQTJG
MTU0QkI0MTBENjZDNkRCNzgyM0NDRDFDRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCldboaQkE/W1IU8Zmk46GPqMHcXSUKltbX809kx4m9dmmZD80P
CkJih4hqYULcvOhkMGHOSanYiKvRqMWc3QqxdlZEiKEp98+7P+FsuqHSRET9h9yO
ODNHUl1xRT0fpS3LFDzKvn8CEOxE0WH23l0NV1ZZDkOHYUHu992ZQHWzYJTGhmLX
87JquFK8IRA6yQvdZxBE1P8/zMiSWPu5gts4r3etR7kZiU7AM/m6JxH5CK38z7OI
yapIMkuDZ1LzDbPpbvZNIexJM0Iy5x4Q/+RXRvp0Obm9CDkqNZf4RryVIpAQl84X
lnc7WYw6gu9VtgwXJ/+HH0N1KMgcFulYt83RAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUkKwDst4qLxVLtBDWbG23gjzNHP8wHwYDVR0jBBgwFoAUh5M3g18FYrKaaQsb
UBKsbiS66D8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz
OC9oNU0zZzE4RllyS2FhUXNiVUJLc2JpUzY2RDguY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2g1TTNnMThGWXJLYWFRc2JVQktzYmlTNjZEOC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzgvaDVNM2cxOEZZckth
YVFzYlVCS3NiaVM2NkQ4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAE0lbosZKK0efRXAa5gsA52WH3mhYJYOuAIB3L3SyClHt6eUYhxEvYj39nNp
wSgAg4MSMzL8wF8yhuwbP1lFJsLhouwlqIl19WaxrqHyRA9PX4vf4scuzxsPkQ46
O1EwoHUJxJ38Ysqj9sCI5pE5V2BN6IQG4X/6f3Xa52d8gKsm8eV85Hmk9C5rpV9E
34A1Dv1iEDnaDYC/cYpO2UkQXSYdUOyLHfuFEKedV6c0BvnrpfFW+6CguuRPa+hw
jLSjHTuLF9Qw8QFmKDCFVTXuICYF9apSG83zSvAmlvxUmnycyVFCyk6ZIiqCbe/g
OuxOEKovMTy3mAMhMw8kCelSfeU=
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:26:09 2025 by rpki-client