Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft
File:                     JAmH9ApgMM36M97R7ufPTcfDAJQ.mft (raw, json)
Hash identifier:          whQwKiEPN7D9MKHL+wwup2ierV+WSU2zKsftg4wNvLg=
Subject key identifier:   17:0C:E6:C7:40:73:A2:91:18:53:FE:B3:DA:43:24:26:D3:81:23:16
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Certificate issuer:       /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial:       1558
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft
Manifest number:          1511
Signing time:             Sun 20 Jul 2025 16:40:40 +0000
Manifest this update:     Sun 20 Jul 2025 16:40:40 +0000
Manifest next update:     Sun 20 Jul 2025 22:40:40 +0000
Files and hashes:         1: -_Po0agHkbGS0Ttm0WTWcg6zpNU.roa (hash: cHHjiakk8jCkGL3XpKV91MHxeMtMGSDpHsPjGi4cEd8=)
                          2: 4Juy5ozvGMAEdMuewe0ZYAaF3-Q.roa (hash: 6O+UHQ1w/r9hPNtKHCNIWWQQwAn1B2EigSJynFXs6YQ=)
                          3: 6WUQ5B5vun0CoK_vLAyUdcYhk0Y.roa (hash: 9SnwaZ1aA/kOcSBtXH6cQmmrvzUJK8pB6FbTGh869ws=)
                          4: HUw23TFXmjpD_e2Klj8O1aJOuLI.roa (hash: LVhArJyw5UUv/lJaYkde8UdSAWT1VmmRAoWb0c+KHGM=)
                          5: JAmH9ApgMM36M97R7ufPTcfDAJQ.crl (hash: pz90GFgX6039tFPNX9/wwxATV0CPrNYlqZMPBdR1thU=)
                          6: LAGXNa5EniBKRH4vtqRQfPHsuuE.roa (hash: V/pBdiKaEEjm9ZPK16Mcjv0Q0tMM1EnGcY7x7LKGG+Q=)
                          7: M7Yoo7vS0g74dllE5jwaeJ8GkI8.roa (hash: 0dPkxQQKUEzWy8So4dP//PRsJgFZGxnW9RSLGUN8yLE=)
                          8: XpgCFDOq2Q9LyDlqBE5KH2xQpHw.roa (hash: HgLWNCoewgztXDMInYU1fjL5uUjEdzctKTT+Bg59jgo=)
                          9: bILqsSSMjV6zsB2V4XNyhR98QMI.roa (hash: 0ol/AMXvdewcuTmyh5mPtnYJSlqD+56hLkiVj3HPlhI=)
                          10: cXiSf5yZyj3VPYYCKSaNq56a2rg.roa (hash: Rt6GnFaeomDApDENIxrkjqoB1bSFUS0qhjpljRCPndU=)
                          11: cem23VMayzPVk_oygGN95UFNjHU.roa (hash: RvRmb3ElbI6rsB4sSekzArDgJBSB1WqpLErPkGqAqDI=)
                          12: ctezbMQLxP8Ykqi0UusJ9kXRp0k.roa (hash: qmGjFwU1FD4xG4EaFpCqvHDShMmhH7y5AEXm712oYWo=)
                          13: f_86r3mhQo4FIwhvOxaFBP8lRCM.roa (hash: dIhiVvOoXJKFM98+UYutMzUt/A8Mf0xha9hSgGrHSnQ=)
                          14: iuW7OASYxTbyLYOF3CjyalJ_5oM.roa (hash: k9Or3BQMtCIUl4N8wxLUc62+5EDuHRziekJOqB1/coI=)
                          15: zXwbjbUVcIuVuYfJVeJLi_WhVSc.roa (hash: 70rweTSg6yEMOACB21IW3jvSfvtQwhiUyA/SCVlY8cE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5464 (0x1558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
        Validity
            Not Before: Jul 20 16:40:40 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=170CE6C74073A2911853FEB3DA432426D3812316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a8:13:68:09:e5:6c:1e:f1:16:d9:57:10:e8:
                    55:fa:72:11:4e:e3:89:c4:3d:e5:4b:3e:30:d0:74:
                    de:6f:f2:cd:bb:76:00:75:99:cf:42:d6:fb:16:01:
                    7c:5d:01:69:bb:fc:ef:74:f0:49:b4:3b:ea:57:fd:
                    53:4b:8b:79:53:e0:e4:cc:e0:e3:5b:a8:ce:e8:d8:
                    72:b4:1c:68:78:49:ec:c8:98:8b:22:75:6b:87:5a:
                    64:f6:14:b2:bd:04:9b:5e:dc:21:3b:87:7c:ea:75:
                    22:ba:3a:4e:b2:2e:07:44:a7:f2:f2:a5:45:b5:6f:
                    41:9e:ba:92:c5:74:02:3d:80:a2:5f:2e:5d:73:ec:
                    ac:c9:3b:89:7b:e7:6e:35:94:db:4e:64:13:56:72:
                    e7:c6:88:c9:f7:7c:3d:76:91:a7:63:1d:8f:3c:df:
                    98:67:71:1d:ba:bb:48:f6:7d:55:26:3f:89:a9:a7:
                    d3:fa:c2:ac:67:d8:c6:d1:2e:7e:e9:e1:f6:e7:c9:
                    2b:b1:44:12:bd:01:c5:43:a2:3c:c9:51:bd:69:ff:
                    0a:3d:f8:0d:bb:48:62:ca:58:01:99:de:19:6c:ea:
                    71:5c:fa:93:48:6f:51:0b:24:c7:de:ad:5d:09:56:
                    56:92:40:39:f4:0b:1c:4c:a5:63:94:84:4a:7c:55:
                    fa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0C:E6:C7:40:73:A2:91:18:53:FE:B3:DA:43:24:26:D3:81:23:16
            X509v3 Authority Key Identifier:
                keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:c7:8b:88:c0:16:e6:c4:24:f5:a6:5a:2f:c6:2f:14:7c:fa:
         ee:a6:f7:91:13:ce:6a:c0:e0:7b:30:d4:97:18:29:1b:db:76:
         fb:19:44:b0:cd:b3:75:5b:c4:5e:59:a0:89:ee:34:4a:ad:55:
         44:0d:a0:e3:b3:22:ac:56:70:a8:a8:9f:e0:0e:e0:26:41:32:
         75:58:8d:18:ce:28:af:72:21:8b:b2:bb:b7:c1:10:70:8b:c2:
         35:91:52:8c:f4:4b:78:aa:22:c3:13:c5:af:9e:62:7b:ee:44:
         14:a3:f7:9b:04:01:76:f2:bc:14:15:d9:4c:ca:38:76:87:b0:
         28:5f:2e:7c:6e:d9:60:bb:99:6c:93:45:59:62:01:4f:9f:f7:
         f4:b4:b6:2d:ae:8f:8d:15:91:c5:5f:42:24:50:b8:0b:dd:ed:
         cf:2d:4f:91:0a:2a:29:da:23:99:62:44:6c:9f:c2:63:c7:58:
         a7:8e:34:b1:ea:3c:e9:4e:f1:66:59:8d:cf:46:a9:70:cf:2a:
         04:bf:3d:b5:83:5b:91:58:29:fa:c1:b9:80:3f:88:58:45:05:
         06:10:e7:ff:2b:0d:5e:28:5f:24:0a:0b:84:5f:76:80:02:59:
         17:25:aa:b1:e6:60:86:0b:e9:24:08:1c:f1:85:3c:3f:d0:ad:
         f0:a7:57:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:03:17 2025 by rpki-client