Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1842/Xo14MK3O_WYKGdfr-bRmxrl8UFU.mft
File:                     Xo14MK3O_WYKGdfr-bRmxrl8UFU.mft (raw, json)
Hash identifier:          tDx4WNTPLmBCSXMXSb5YQ5C2FwSfM+hkurl6oD80PAY=
Subject key identifier:   58:7A:8F:2E:52:FB:7A:5F:E5:43:A8:8C:2C:F6:C3:F7:83:A3:74:10
Authority key identifier: 5E:8D:78:30:AD:CE:FD:66:0A:19:D7:EB:F9:B4:66:C6:B9:7C:50:55
Certificate issuer:       /CN=5E8D7830ADCEFD660A19D7EBF9B466C6B97C5055
Certificate serial:       1841
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Xo14MK3O_WYKGdfr-bRmxrl8UFU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1842/Xo14MK3O_WYKGdfr-bRmxrl8UFU.mft
Manifest number:          1841
Signing time:             Tue 31 Dec 2024 00:27:55 +0000
Manifest this update:     Tue 31 Dec 2024 00:27:55 +0000
Manifest next update:     Tue 31 Dec 2024 06:27:55 +0000
Files and hashes:         1: Xo14MK3O_WYKGdfr-bRmxrl8UFU.crl (hash: ojLaOrTezVkoU83peU8jCEY7mplqAjpH8E+erGUeQTs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6209 (0x1841)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E8D7830ADCEFD660A19D7EBF9B466C6B97C5055
        Validity
            Not Before: Dec 31 00:27:55 2024 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=587A8F2E52FB7A5FE543A88C2CF6C3F783A37410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:11:7d:fe:20:3d:e8:fc:b5:81:59:5a:ae:7c:
                    35:17:aa:c3:1d:7d:43:c6:ae:8b:44:3f:a2:36:a7:
                    a8:46:d2:21:5c:e4:55:58:af:55:3d:fb:36:92:8c:
                    74:ad:d9:41:b8:53:89:d8:aa:e4:48:30:78:9b:9d:
                    ba:9e:53:d1:7a:7c:5e:86:6a:15:69:69:c2:98:19:
                    78:3b:fb:24:df:5b:82:83:d6:4d:06:e8:1b:80:60:
                    98:c8:47:eb:25:1e:f2:17:39:8f:81:4a:98:52:5e:
                    5a:6e:25:75:00:da:e2:f3:0e:fc:e7:88:db:da:28:
                    83:ab:31:13:e8:89:33:98:1b:dc:f1:e4:2a:ff:cb:
                    9b:dd:66:95:a7:e6:13:86:1d:f5:5f:e6:94:0a:f1:
                    51:a4:2f:dd:54:ba:dd:df:4c:ea:a3:e2:f0:1b:73:
                    d1:66:a3:c3:b7:77:30:b4:19:25:8b:bb:14:04:94:
                    9c:4d:a5:03:7f:02:60:67:5d:64:1d:a1:cd:56:ef:
                    31:39:94:dd:26:a2:a1:95:00:1a:74:a9:48:45:7d:
                    ca:c6:5e:63:e3:97:e3:79:6a:0d:3c:ef:f5:bf:48:
                    00:c2:1a:97:87:12:88:1e:a0:84:a7:98:b9:29:14:
                    6a:d7:f7:dc:29:7a:7b:e6:dc:49:e1:05:20:eb:f3:
                    b7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7A:8F:2E:52:FB:7A:5F:E5:43:A8:8C:2C:F6:C3:F7:83:A3:74:10
            X509v3 Authority Key Identifier:
                keyid:5E:8D:78:30:AD:CE:FD:66:0A:19:D7:EB:F9:B4:66:C6:B9:7C:50:55

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1842/Xo14MK3O_WYKGdfr-bRmxrl8UFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Xo14MK3O_WYKGdfr-bRmxrl8UFU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1842/Xo14MK3O_WYKGdfr-bRmxrl8UFU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:18:c3:0f:54:3a:89:10:85:8d:28:c8:31:c3:40:fd:86:39:
         1a:1b:3b:2d:95:2f:d3:99:fc:d9:aa:66:9f:bd:c7:2a:7f:f4:
         d8:59:ae:1f:3f:6a:73:17:df:7b:e7:6a:a4:42:52:54:8f:a5:
         96:5e:ef:c4:5a:bd:df:68:61:30:23:17:cd:20:99:05:7d:3a:
         20:52:cc:c1:92:81:44:62:04:11:70:70:f8:f9:71:23:bc:dc:
         30:6d:1a:5d:f7:73:5f:29:19:c6:28:83:d3:c5:4e:03:e4:a8:
         9f:9f:03:ba:7c:c6:a6:bb:77:67:e3:5a:59:38:51:a2:4f:10:
         9e:e8:50:01:f4:86:2d:28:70:2c:c6:d8:94:91:f2:73:31:7b:
         8f:83:c5:04:57:af:13:f6:01:f5:6c:e1:62:4d:a6:37:fd:ab:
         c8:00:30:78:62:54:d3:0a:44:22:62:a3:72:3c:ad:e4:f6:bd:
         cf:f2:30:a9:67:30:3c:8e:36:5f:dc:7b:f2:2e:52:7f:3f:c7:
         82:fe:2e:51:2d:62:b0:dd:dc:32:07:fe:48:cc:1d:91:3e:86:
         8f:ad:2d:b8:49:7d:5f:95:24:a9:13:e1:18:1e:5c:3f:76:e3:
         63:ab:e0:6b:81:22:ca:d1:be:37:c4:75:7c:b1:e8:5e:bd:8a:
         46:c5:82:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:26 2025 by rpki-client