Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.mft
File:                     sTLT4KDPHu-UWlZnFbFefhSl_uM.mft (raw, json)
Hash identifier:          6o+IZdo8OS3/lzgvJrKflzhsI3wC77dmyb+DsHP82jE=
Subject key identifier:   81:77:49:B7:8C:B6:64:C2:72:97:78:AD:52:61:9F:A8:5B:0D:4A:8D
Authority key identifier: B1:32:D3:E0:A0:CF:1E:EF:94:5A:56:67:15:B1:5E:7E:14:A5:FE:E3
Certificate issuer:       /CN=B132D3E0A0CF1EEF945A566715B15E7E14A5FEE3
Certificate serial:       55F2
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sTLT4KDPHu-UWlZnFbFefhSl_uM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.mft
Manifest number:          55F2
Signing time:             Sat 29 Mar 2025 10:30:40 +0000
Manifest this update:     Sat 29 Mar 2025 10:30:40 +0000
Manifest next update:     Sat 29 Mar 2025 16:30:40 +0000
Files and hashes:         1: sTLT4KDPHu-UWlZnFbFefhSl_uM.crl (hash: 9GnTDYgdWU3pXfbyiJd13N5UctOLzloBmZyZbN9Whj8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22002 (0x55f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B132D3E0A0CF1EEF945A566715B15E7E14A5FEE3
        Validity
            Not Before: Mar 29 10:30:40 2025 GMT
            Not After : Sep 27 02:44:05 2025 GMT
        Subject: CN=817749B78CB664C2729778AD52619FA85B0D4A8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f6:3f:d0:5c:58:c7:63:5f:e8:41:7c:4b:80:
                    fd:3c:22:b2:05:64:94:a6:6e:a6:e5:52:ff:13:b0:
                    77:35:5b:f7:41:33:60:c3:2c:00:d1:fa:04:ee:79:
                    49:31:f3:f6:27:ae:e2:8b:a0:51:51:e6:e0:06:1e:
                    77:09:2c:85:19:8d:36:c6:0d:8b:a6:f7:74:6c:fb:
                    61:ba:13:41:54:cd:27:f2:75:6f:77:ae:e3:85:97:
                    40:d8:ae:dd:f1:fc:b9:f1:99:41:08:1f:a8:d6:1b:
                    37:8b:e7:d2:8e:78:5e:f6:10:cc:8e:e4:48:47:c3:
                    cc:9a:09:9d:80:ee:ce:db:e3:ad:ac:30:b2:7f:ea:
                    03:d7:cd:ab:27:c4:92:15:f0:05:f1:a3:c9:2c:ec:
                    a1:5f:bd:a8:22:fb:9b:8a:6d:73:15:84:5a:b7:79:
                    0d:94:5c:86:8d:4f:df:67:8b:e5:dc:5c:f1:52:d5:
                    4a:07:46:4c:04:17:a9:82:54:3e:f0:ca:0a:2c:f1:
                    4b:91:38:f7:30:55:b4:4e:20:98:64:9f:8f:87:f4:
                    cf:f4:74:c8:2b:11:e2:e3:df:80:fe:c1:98:20:56:
                    77:ac:b4:26:8a:90:13:4b:49:55:4c:97:40:77:3a:
                    93:6a:13:a7:95:f9:73:6f:c2:75:f5:d5:11:fa:dc:
                    ec:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:77:49:B7:8C:B6:64:C2:72:97:78:AD:52:61:9F:A8:5B:0D:4A:8D
            X509v3 Authority Key Identifier:
                keyid:B1:32:D3:E0:A0:CF:1E:EF:94:5A:56:67:15:B1:5E:7E:14:A5:FE:E3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sTLT4KDPHu-UWlZnFbFefhSl_uM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9e:93:c7:18:45:7d:68:23:f8:45:06:a7:a7:17:94:e4:dc:
         30:03:ce:ff:c3:68:ae:1a:4d:91:3b:d8:44:d5:c9:32:ec:77:
         29:31:aa:e6:b0:29:78:48:cb:62:5d:48:89:2c:af:64:b0:b0:
         75:f2:31:64:8c:d2:f8:5e:9b:cc:b7:db:0d:e4:af:b9:31:6a:
         75:7d:13:1f:c5:2c:72:48:4f:07:93:bd:e5:a5:16:40:45:d1:
         59:4e:6a:90:97:4c:a7:c8:36:80:55:22:e1:05:92:61:4c:f1:
         ff:17:a4:30:f1:12:8f:ea:3e:98:fb:e6:3d:41:b4:6a:30:f2:
         c3:f2:fb:78:16:a0:2f:65:b1:53:e8:8c:a3:46:0a:06:72:76:
         7e:31:3d:8e:be:95:24:6e:7a:97:7f:0c:c4:2c:d2:2b:cb:f3:
         a2:f1:34:f2:8d:4b:00:ab:e7:90:46:fe:4d:c0:0c:4a:9a:be:
         d6:dd:1a:33:ea:e3:f2:b2:26:8f:36:77:a2:06:2f:6a:07:3c:
         da:f7:89:08:2e:cc:0a:01:6c:b0:38:68:d2:43:fb:7a:38:3d:
         6f:75:f1:fc:3c:66:a2:0a:80:c3:89:eb:75:df:57:05:49:37:
         38:a0:6c:42:8d:a3:5c:02:7d:51:91:51:d4:ca:a0:ab:5f:93:
         de:55:cb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:35:19 2025 by rpki-client