Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3347/gyrC5LJ2In0pPQ4_x08P9pYVPZU.mft
File:                     gyrC5LJ2In0pPQ4_x08P9pYVPZU.mft (raw, json)
Hash identifier:          5nB4wxbUl1x3b/v/u83aHCpo0tDrZNKrtO7CvltCFrc=
Subject key identifier:   8F:49:43:E1:8F:EF:7E:CE:59:72:9D:08:AB:00:53:15:D9:BA:18:76
Authority key identifier: 83:2A:C2:E4:B2:76:22:7D:29:3D:0E:3F:C7:4F:0F:F6:96:15:3D:95
Certificate issuer:       /CN=832AC2E4B276227D293D0E3FC74F0FF696153D95
Certificate serial:       7B
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gyrC5LJ2In0pPQ4_x08P9pYVPZU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3347/gyrC5LJ2In0pPQ4_x08P9pYVPZU.mft
Manifest number:          7B
Signing time:             Fri 31 Jan 2025 15:29:44 +0000
Manifest this update:     Fri 31 Jan 2025 15:29:44 +0000
Manifest next update:     Fri 31 Jan 2025 21:29:44 +0000
Files and hashes:         1: gyrC5LJ2In0pPQ4_x08P9pYVPZU.crl (hash: 5qqC+4KCTIrhXp+XHy2zJaBXekstySBHZwGh7Vn+r78=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832AC2E4B276227D293D0E3FC74F0FF696153D95
        Validity
            Not Before: Jan 31 15:29:44 2025 GMT
            Not After : Jan  7 02:58:23 2026 GMT
        Subject: CN=8F4943E18FEF7ECE59729D08AB005315D9BA1876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c3:a5:cc:b0:52:60:69:ad:e0:1e:01:d9:6b:
                    ef:50:67:4e:5a:f6:d5:78:85:db:56:50:54:2c:f2:
                    86:f9:80:42:30:63:e6:b7:9b:7b:20:d7:45:29:dd:
                    57:f9:9d:74:ac:c3:6b:cc:79:22:3d:e3:25:3e:21:
                    63:ce:84:ae:91:da:1e:b8:44:aa:50:f6:16:9d:88:
                    4a:de:65:24:ef:a6:e8:58:3f:f6:f2:01:ff:d7:a5:
                    51:83:b0:03:ac:35:df:7a:d9:01:d2:0a:29:ba:52:
                    38:c4:d2:1c:eb:e8:e4:8c:f7:18:9f:70:5c:fa:b6:
                    19:50:08:39:40:9b:8b:c6:54:cf:1e:c8:88:b9:bf:
                    fa:62:50:0c:73:03:3b:18:26:34:d9:0c:3b:78:64:
                    15:94:30:02:a1:6c:65:d8:4e:6f:7d:3d:5e:00:28:
                    e2:27:f3:eb:b5:b8:3c:40:1c:95:14:7a:95:c2:cf:
                    de:8a:42:93:ce:ef:55:30:b0:d6:02:45:01:25:e2:
                    34:c7:26:3a:99:ff:48:f5:4f:9e:fc:f6:0e:50:ce:
                    9f:79:37:a5:00:59:ea:6d:6a:23:83:01:a3:2b:94:
                    0a:f5:ca:c8:51:59:3b:5c:18:3d:df:f3:c5:ba:e2:
                    9c:15:e6:af:f0:30:5a:cc:3d:77:df:6a:bf:a2:1b:
                    4d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:49:43:E1:8F:EF:7E:CE:59:72:9D:08:AB:00:53:15:D9:BA:18:76
            X509v3 Authority Key Identifier:
                keyid:83:2A:C2:E4:B2:76:22:7D:29:3D:0E:3F:C7:4F:0F:F6:96:15:3D:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3347/gyrC5LJ2In0pPQ4_x08P9pYVPZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gyrC5LJ2In0pPQ4_x08P9pYVPZU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3347/gyrC5LJ2In0pPQ4_x08P9pYVPZU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:1d:8c:2e:3f:26:a5:79:bb:e3:1a:00:0f:35:33:80:a2:2b:
         d0:68:73:b5:8d:36:40:56:23:c4:06:0a:91:6a:1c:7b:e2:e2:
         5b:d5:90:4a:08:06:64:10:d0:3c:b2:54:ce:21:e9:4a:cc:91:
         3a:2b:bd:31:c8:cd:0a:c5:fe:82:75:90:4a:26:d0:a9:a3:5e:
         2b:8e:c5:bb:6c:e5:f9:99:7c:98:ec:e2:35:ba:ee:a8:fe:c8:
         07:52:7d:e8:d5:46:00:28:cb:fc:f6:3e:67:22:76:ea:7d:f2:
         aa:14:57:5b:f1:ba:2c:20:ca:62:a4:75:5d:1c:19:1c:bb:4e:
         39:b4:d5:ee:85:9e:bb:d0:89:63:10:b5:49:3f:77:59:9d:59:
         ca:cb:c7:8a:77:61:a6:f3:db:8e:6b:b2:81:59:c0:92:d4:da:
         43:fd:ec:ba:d1:b4:f8:af:fa:a8:69:72:98:a6:38:0f:d8:5a:
         b4:83:5e:84:0b:f2:30:55:0e:5f:01:ae:88:c4:3d:d9:03:06:
         4a:cc:ea:42:0f:ce:ec:c8:7b:15:79:ab:c1:7d:2b:58:00:65:
         bd:99:a8:17:5b:ba:0e:3f:49:af:a2:64:c8:43:e3:67:75:e9:
         a8:ab:9c:76:ae:c9:17:b6:bd:2a:65:b7:68:74:b4:5c:a9:38:
         b6:3c:27:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:10:13 2025 by rpki-client