Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/98/yiG6irdU_NZK2pljjW_l5HJTtME.mft
File:                     yiG6irdU_NZK2pljjW_l5HJTtME.mft (raw, json)
Hash identifier:          eAoNsbkr/oFJcO6qhGhoGcdw2Qzectp8mxEoH/QPCeg=
Subject key identifier:   68:C2:4A:13:88:FC:9D:03:DD:D1:06:4E:2D:28:66:14:B9:9B:94:34
Authority key identifier: CA:21:BA:8A:B7:54:FC:D6:4A:DA:99:63:8D:6F:E5:E4:72:53:B4:C1
Certificate issuer:       /CN=CA21BA8AB754FCD64ADA99638D6FE5E47253B4C1
Certificate serial:       1BFB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yiG6irdU_NZK2pljjW_l5HJTtME.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/98/yiG6irdU_NZK2pljjW_l5HJTtME.mft
Manifest number:          1BFB
Signing time:             Fri 31 Jan 2025 00:25:59 +0000
Manifest this update:     Fri 31 Jan 2025 00:25:59 +0000
Manifest next update:     Fri 31 Jan 2025 06:25:59 +0000
Files and hashes:         1: yiG6irdU_NZK2pljjW_l5HJTtME.crl (hash: ZZNtaSCKb8M2XtUj5Jd/vnn1xDn0GTRNaD2t5wLsk1E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7163 (0x1bfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA21BA8AB754FCD64ADA99638D6FE5E47253B4C1
        Validity
            Not Before: Jan 31 00:25:59 2025 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=68C24A1388FC9D03DDD1064E2D286614B99B9434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:35:45:84:0d:f7:9c:a7:65:94:83:6d:ed:a4:
                    ef:0e:58:34:52:71:ae:b9:fc:eb:af:f2:19:7c:fa:
                    68:fd:76:de:aa:43:e7:01:5f:f2:a7:a7:18:11:ec:
                    70:de:c2:50:21:52:73:aa:4d:79:8a:20:5b:b8:6d:
                    8a:6b:59:68:28:7c:ee:84:19:8d:5e:88:82:df:2e:
                    3e:6f:e9:bf:95:65:32:57:49:c1:74:64:c8:64:44:
                    38:5e:32:9c:a4:34:b0:55:6b:e3:60:9c:a4:b2:a0:
                    e4:74:71:87:d2:f4:73:d7:31:61:cc:55:e1:06:eb:
                    2d:06:5d:b5:d0:7d:a7:b4:95:2b:db:63:f6:24:35:
                    82:6f:1a:4d:96:b3:95:c3:f5:88:8b:81:44:bf:08:
                    8d:b2:b9:73:8e:47:26:16:fa:e9:be:36:09:a2:fc:
                    2b:ad:76:9e:20:5f:89:4e:7e:06:3c:b9:70:38:55:
                    44:ad:5b:b1:8c:75:45:f2:ae:35:12:62:1f:98:16:
                    4c:96:a6:83:1d:48:2e:e2:3f:3c:df:7e:dd:44:17:
                    7f:eb:30:b1:a8:ae:e8:a5:40:ef:a9:ae:af:00:80:
                    84:a1:68:96:2f:48:08:fd:e2:fc:bc:ec:74:3c:bb:
                    16:27:13:a3:8b:fc:38:0e:ac:af:fe:16:67:3a:36:
                    2d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C2:4A:13:88:FC:9D:03:DD:D1:06:4E:2D:28:66:14:B9:9B:94:34
            X509v3 Authority Key Identifier:
                keyid:CA:21:BA:8A:B7:54:FC:D6:4A:DA:99:63:8D:6F:E5:E4:72:53:B4:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/98/yiG6irdU_NZK2pljjW_l5HJTtME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yiG6irdU_NZK2pljjW_l5HJTtME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/98/yiG6irdU_NZK2pljjW_l5HJTtME.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:b7:48:b5:9e:c3:13:53:9e:5f:ca:01:38:b3:be:71:7f:be:
         8d:b8:4f:11:dc:5b:52:14:7b:96:21:cc:15:31:32:a4:35:c7:
         c4:7a:f9:e9:3a:ca:46:e2:0f:43:dd:92:39:67:a2:db:f2:e2:
         5e:0a:96:ac:e2:16:83:2f:73:d0:4e:ef:ee:07:b3:3e:97:cc:
         cf:df:ee:75:cc:6b:9d:bd:1c:d5:42:34:84:64:94:52:ad:8c:
         11:a0:a2:24:36:c6:53:f2:0e:b2:6c:78:9c:75:be:cf:1f:05:
         3e:90:b9:0f:06:a5:66:bd:62:91:a8:be:9a:5a:dc:c2:67:5b:
         f2:4c:15:4d:d4:eb:31:5f:b1:ac:d9:fc:45:4a:ba:48:eb:08:
         5a:ac:34:42:18:af:f0:36:1c:4a:61:cf:2f:6e:ef:1d:a9:cc:
         9a:4e:f4:18:2e:28:b6:72:fb:9d:af:d3:18:32:43:14:17:ba:
         82:68:c1:4d:18:df:33:4a:ea:fc:03:f8:d5:8c:bd:35:89:a7:
         2e:e1:1b:00:fc:77:68:cc:78:4f:91:02:f4:8b:16:4e:97:3a:
         75:7d:ff:5a:7b:4c:4f:77:87:9f:21:81:39:88:06:6a:bd:3c:
         8a:6c:95:8f:ad:62:2c:2a:44:c8:e3:ec:0e:21:81:a1:08:27:
         a7:97:e6:ae
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgICG/swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ey
MUJBOEFCNzU0RkNENjRBREE5OTYzOEQ2RkU1RTQ3MjUzQjRDMTAeFw0yNTAxMzEw
MDI1NTlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDY4QzI0QTEzODhGQzlE
MDNEREQxMDY0RTJEMjg2NjE0Qjk5Qjk0MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpNUWEDfecp2WUg23tpO8OWDRSca65/Ouv8hl8+mj9dt6qQ+cB
X/KnpxgR7HDewlAhUnOqTXmKIFu4bYprWWgofO6EGY1eiILfLj5v6b+VZTJXScF0
ZMhkRDheMpykNLBVa+NgnKSyoOR0cYfS9HPXMWHMVeEG6y0GXbXQfae0lSvbY/Yk
NYJvGk2Ws5XD9YiLgUS/CI2yuXOORyYW+um+Ngmi/Cutdp4gX4lOfgY8uXA4VUSt
W7GMdUXyrjUSYh+YFkyWpoMdSC7iPzzfft1EF3/rMLGoruilQO+prq8AgIShaJYv
SAj94vy87HQ8uxYnE6OL/DgOrK/+Fmc6Ni3hAgMBAAGjggIIMIICBDAdBgNVHQ4E
FgQUaMJKE4j8nQPd0QZOLShmFLmblDQwHwYDVR0jBBgwFoAUyiG6irdU/NZK2plj
jW/l5HJTtMEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvOTgv
eWlHNmlyZFVfTlpLMnBsampXX2w1SEpUdE1FLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC95aUc2aXJkVV9OWksycGxqaldfbDVISlR0TUUuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC85OC95aUc2aXJkVV9OWksycGxq
aldfbDVISlR0TUUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
ardItZ7DE1OeX8oBOLO+cX++jbhPEdxbUhR7liHMFTEypDXHxHr56TrKRuIPQ92S
OWei2/LiXgqWrOIWgy9z0E7v7gezPpfMz9/udcxrnb0c1UI0hGSUUq2MEaCiJDbG
U/IOsmx4nHW+zx8FPpC5DwalZr1ikai+mlrcwmdb8kwVTdTrMV+xrNn8RUq6SOsI
Wqw0Qhiv8DYcSmHPL27vHanMmk70GC4otnL7na/TGDJDFBe6gmjBTRjfM0rq/AP4
1Yy9NYmnLuEbAPx3aMx4T5EC9IsWTpc6dX3/WntMT3eHnyGBOYgGar08imyVj61i
LCpEyOPsDiGBoQgnp5fmrg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:57:49 2025 by rpki-client