Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/73/w2lZ9ie_P5SuFVwQLnPbHAf73Xg.mft
File:                     w2lZ9ie_P5SuFVwQLnPbHAf73Xg.mft (raw, json)
Hash identifier:          a+9w5McXG1YjhFzORj4dD6ytcxxkC35D45X1Lj8sZAQ=
Subject key identifier:   08:2F:6C:DB:C8:26:3E:CD:3E:1C:F5:31:ED:9B:03:05:04:4E:E0:47
Authority key identifier: C3:69:59:F6:27:BF:3F:94:AE:15:5C:10:2E:73:DB:1C:07:FB:DD:78
Certificate issuer:       /CN=C36959F627BF3F94AE155C102E73DB1C07FBDD78
Certificate serial:       43E2
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/w2lZ9ie_P5SuFVwQLnPbHAf73Xg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/w2lZ9ie_P5SuFVwQLnPbHAf73Xg.mft
Manifest number:          43E2
Signing time:             Fri 31 Jan 2025 15:27:37 +0000
Manifest this update:     Fri 31 Jan 2025 15:27:37 +0000
Manifest next update:     Fri 31 Jan 2025 21:27:37 +0000
Files and hashes:         1: w2lZ9ie_P5SuFVwQLnPbHAf73Xg.crl (hash: xBPbsOPNL5qdVY5BKrKPiHQUjaEtx5xmh+CBaEdWcA0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17378 (0x43e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C36959F627BF3F94AE155C102E73DB1C07FBDD78
        Validity
            Not Before: Jan 31 15:27:37 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=082F6CDBC8263ECD3E1CF531ED9B0305044EE047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d4:60:c5:b6:29:37:32:7f:68:0e:8f:d2:f0:
                    a2:e8:2d:7e:22:15:da:3a:ef:2c:ce:5a:81:07:35:
                    35:4b:4b:16:a4:de:a1:2d:a4:f4:23:09:5f:43:db:
                    a5:9b:78:35:cc:ab:97:0c:52:d1:81:26:73:3e:af:
                    b2:59:71:71:bc:8b:56:9c:57:b2:ed:ca:05:d0:b9:
                    78:1a:c5:e0:89:53:30:9d:8f:e9:e7:a7:d1:c9:9a:
                    b6:8d:a9:8c:09:a2:29:ea:1c:77:e4:7e:02:01:4c:
                    90:0a:06:31:c5:2a:c2:ec:a2:b8:32:93:0b:b4:78:
                    58:7f:94:ce:3c:b7:1b:a9:50:78:a0:2e:24:88:77:
                    03:3f:64:34:32:9d:05:ab:77:f2:3c:57:6e:e1:95:
                    3f:2f:19:db:27:5a:b5:eb:90:a0:9a:5f:55:a5:d2:
                    53:bb:db:21:c8:c8:55:ba:95:7d:7a:c0:9a:fe:63:
                    35:d7:0d:92:1b:9c:5e:82:3e:a0:56:bb:4c:e3:19:
                    76:ec:00:95:46:30:b4:f1:d8:9b:a7:b9:90:34:38:
                    3f:3a:e9:63:40:81:8d:52:2e:00:ee:5b:f4:b1:12:
                    c5:2c:5d:42:02:7d:a1:56:4b:45:a5:e4:f3:ce:30:
                    d9:1f:e9:d7:69:48:92:db:3f:07:51:c9:f3:ed:72:
                    db:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2F:6C:DB:C8:26:3E:CD:3E:1C:F5:31:ED:9B:03:05:04:4E:E0:47
            X509v3 Authority Key Identifier:
                keyid:C3:69:59:F6:27:BF:3F:94:AE:15:5C:10:2E:73:DB:1C:07:FB:DD:78

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/w2lZ9ie_P5SuFVwQLnPbHAf73Xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/w2lZ9ie_P5SuFVwQLnPbHAf73Xg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/w2lZ9ie_P5SuFVwQLnPbHAf73Xg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:8c:af:75:67:c8:b3:be:a0:aa:b0:f2:59:18:51:95:cc:e7:
         5b:68:ec:2d:6f:cc:09:7e:80:bf:e4:9f:e0:97:18:40:ae:36:
         f5:fb:d3:30:0a:63:4a:a7:e6:71:af:ce:0a:48:19:17:25:52:
         af:0b:ff:5a:4a:9c:99:43:2d:bf:5f:a1:e8:36:18:66:f7:ec:
         67:dc:fc:c3:c3:0f:73:c7:da:91:de:fa:be:69:48:df:1f:b0:
         5a:3f:24:58:4a:fd:d4:5a:64:ec:44:ad:1c:16:83:76:5b:39:
         9b:e1:00:f5:41:e0:1f:af:72:6c:1e:b2:d9:ce:93:c8:d2:e6:
         c4:b5:18:e4:94:82:f6:be:2b:90:94:11:c4:4a:f5:8d:8c:e3:
         2e:c2:04:3e:e1:ba:8e:95:d6:b2:c0:f9:0c:f3:ca:95:d5:6b:
         ea:73:6d:9d:f6:49:bf:36:11:e9:0e:86:0a:00:be:d3:a8:e6:
         00:40:2e:1d:70:bd:2f:c0:bc:9b:44:6f:7e:34:4f:9f:57:22:
         18:49:a6:64:6f:20:fd:23:a8:69:57:24:bb:a8:e4:d4:db:de:
         17:ec:5d:bd:65:09:80:62:95:9d:67:23:0f:a0:86:66:2f:21:
         e7:4a:11:2d:9a:6b:95:60:ea:ec:ee:36:5c:eb:8d:06:75:0f:
         3e:1c:c0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:47:17 2025 by rpki-client