Manifest

$ rpki-client -vvvf rpki.cnnic.cn/rpki/A9162E3D0000/104/4LWzbEhxQqoAYPpbVHULJsXPW9w.mft
File:                     4LWzbEhxQqoAYPpbVHULJsXPW9w.mft (raw, json)
Hash identifier:          es7mXjEgHXkOSpJacy1bFl3vj24SWyoDfgjrWQ5xPJw=
Subject key identifier:   E6:0A:2E:E9:38:6F:8C:B4:CC:5F:D5:51:C6:B6:7F:AE:A7:E4:C3:1A
Authority key identifier: E0:B5:B3:6C:48:71:42:AA:00:60:FA:5B:54:75:0B:26:C5:CF:5B:DC
Certificate issuer:       /CN=E0B5B36C487142AA0060FA5B54750B26C5CF5BDC
Certificate serial:       05B2
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4LWzbEhxQqoAYPpbVHULJsXPW9w.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/104/4LWzbEhxQqoAYPpbVHULJsXPW9w.mft
Manifest number:          05B1
Signing time:             Wed 18 Mar 2026 04:59:52 +0000
Manifest this update:     Wed 18 Mar 2026 04:59:52 +0000
Manifest next update:     Wed 18 Mar 2026 10:59:52 +0000
Files and hashes:         1: 4LWzbEhxQqoAYPpbVHULJsXPW9w.crl (hash: oifr/dKSkQpVQumAu/j+6c1iBf4KAsut5K6hH8rwHvQ=)
                          2: nQe8cqEREUIsJzuFPvvw2A1_6e4.roa (hash: M7HEBLqrcF9Cc43K//Uhar4sJlCkmK82tTZ8yw7MBD8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1458 (0x5b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0B5B36C487142AA0060FA5B54750B26C5CF5BDC
        Validity
            Not Before: Mar 18 04:59:52 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=E60A2EE9386F8CB4CC5FD551C6B67FAEA7E4C31A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:59:56:da:d2:cb:7f:a2:3b:9e:7f:2b:fe:7e:
                    d2:68:1a:40:3f:d8:ee:3b:2e:46:d9:c9:8f:5a:e2:
                    63:fe:f3:1c:a1:6d:e2:eb:70:e6:93:e2:35:18:24:
                    72:e8:30:84:77:c9:53:90:39:26:13:0c:4a:5b:24:
                    2f:70:dd:15:22:2f:c0:92:eb:56:4c:25:bb:26:29:
                    67:82:6d:e2:86:ad:de:8a:79:8a:69:2c:ea:ec:50:
                    40:90:c8:f4:9f:33:af:d2:2a:e9:0b:40:2e:39:c9:
                    bb:3f:75:9d:ef:7d:b8:3c:98:23:8e:21:f1:e3:a3:
                    2c:a7:fa:2f:b8:95:6c:d9:bd:a5:dc:85:0a:f2:c8:
                    58:6e:76:c9:33:d1:a1:cc:22:49:1e:3c:fe:cf:a6:
                    82:1d:78:7b:29:78:07:19:98:40:e0:3e:7d:8c:c5:
                    0c:00:4f:f3:e9:b3:42:29:7e:2e:4b:30:f1:e2:bf:
                    1d:39:85:78:33:e5:4f:bf:f6:db:2f:1d:64:5f:f6:
                    de:1f:14:c7:d2:89:33:b5:d3:04:e6:74:f4:dd:03:
                    39:d7:8d:3d:cf:02:34:de:f0:18:66:7c:b0:a5:04:
                    03:58:6d:5a:88:c9:5b:09:a7:52:0d:c1:2f:e8:a0:
                    e4:c4:c8:9b:6c:f9:f3:2f:38:5c:e9:aa:21:8b:b4:
                    c6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0A:2E:E9:38:6F:8C:B4:CC:5F:D5:51:C6:B6:7F:AE:A7:E4:C3:1A
            X509v3 Authority Key Identifier:
                keyid:E0:B5:B3:6C:48:71:42:AA:00:60:FA:5B:54:75:0B:26:C5:CF:5B:DC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/104/4LWzbEhxQqoAYPpbVHULJsXPW9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4LWzbEhxQqoAYPpbVHULJsXPW9w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/104/4LWzbEhxQqoAYPpbVHULJsXPW9w.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:6a:33:b2:27:d9:32:13:5e:07:04:42:0c:20:9f:fc:25:c7:
         1d:4c:12:8a:a8:5f:34:96:95:2c:f8:cf:24:3f:eb:6a:91:3a:
         71:ba:95:cc:3d:97:82:70:c6:82:1b:f6:a8:ba:b0:9f:d7:b1:
         77:02:89:07:0d:c8:2c:5a:8f:67:3a:36:be:17:5c:3d:ce:f6:
         40:bf:3e:ca:4b:f3:7c:a7:12:ec:6d:59:ae:d9:f9:a3:44:ac:
         7b:a7:19:1e:e1:41:f7:bf:1c:bd:0e:28:07:82:1d:bc:3b:b7:
         7e:b6:bf:32:b6:88:f9:bb:51:0e:9d:c5:65:3c:86:dc:85:6f:
         12:6c:c6:1d:a2:4d:ea:3f:09:89:c6:ac:0d:38:39:20:07:99:
         a7:ab:c9:21:74:ec:57:a3:d6:6e:33:42:d8:23:fd:e1:44:b9:
         70:df:0c:0e:05:93:14:8a:aa:70:52:33:64:ae:f3:63:d1:69:
         cb:97:c9:43:33:13:bc:15:62:91:e7:01:ab:e1:46:14:92:ee:
         12:d7:ba:28:fb:f6:ed:10:56:6f:e1:37:de:1b:a0:3e:93:5c:
         c3:54:f3:a7:90:a6:9c:59:e6:22:dc:ba:95:05:36:9e:74:f2:
         0f:20:94:50:ea:52:ad:78:e5:c6:fd:e6:5b:17:f9:3d:78:35:
         1f:36:42:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----