Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.mft
File:                     MJKoL3qXmI6MCVRjrbtR4JNZKMg.mft (raw, json)
Hash identifier:          b9Rvc1b1K9mI8lgEGo4Qu9FRthgdnjKXvd0DLhK0etk=
Subject key identifier:   8B:D1:49:FA:A3:45:06:BA:EA:3C:D7:B0:DD:6C:D5:55:D5:41:37:D3
Authority key identifier: 30:92:A8:2F:7A:97:98:8E:8C:09:54:63:AD:BB:51:E0:93:59:28:C8
Certificate issuer:       /CN=3092A82F7A97988E8C095463ADBB51E0935928C8
Certificate serial:       1D85
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJKoL3qXmI6MCVRjrbtR4JNZKMg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.mft
Manifest number:          1D85
Signing time:             Fri 04 Apr 2025 19:06:28 +0000
Manifest this update:     Fri 04 Apr 2025 19:06:28 +0000
Manifest next update:     Sat 05 Apr 2025 01:06:28 +0000
Files and hashes:         1: MJKoL3qXmI6MCVRjrbtR4JNZKMg.crl (hash: JRvD6nB5m8ONjbLWD5C1Ig3dyBRQv01G8COeoHB7RTM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7557 (0x1d85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3092A82F7A97988E8C095463ADBB51E0935928C8
        Validity
            Not Before: Apr  4 19:06:28 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=8BD149FAA34506BAEA3CD7B0DD6CD555D54137D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a2:a4:79:8d:d5:c4:67:68:c9:c0:3a:e0:58:
                    96:cf:25:3e:4b:cc:36:e5:71:33:1f:56:80:9d:56:
                    51:9a:7a:7c:22:fd:44:62:ba:94:b1:91:1a:88:ac:
                    d0:2d:dd:e1:ee:da:44:90:65:f3:cf:eb:63:68:29:
                    14:fb:fa:d5:fb:c8:d8:29:86:41:fa:06:66:7c:9b:
                    d5:3f:88:10:5f:c0:b4:51:66:07:29:ea:63:11:77:
                    90:0c:ce:4b:05:fe:2d:6f:c6:e3:ca:aa:e3:91:3c:
                    a4:cf:09:0d:a3:f0:d1:03:18:f1:1c:d7:33:69:e4:
                    6a:54:be:9a:74:b8:da:97:28:0a:5b:60:7e:ae:0d:
                    4f:fb:52:89:d0:83:9a:5b:db:1b:2f:f9:6c:83:a3:
                    d4:eb:48:b5:bd:6d:b9:40:0b:17:65:5d:42:a1:c5:
                    c1:97:72:79:58:98:25:43:7e:5a:99:99:8d:03:67:
                    99:a9:0c:49:2f:82:3e:3c:ef:2d:1f:e7:7d:01:13:
                    49:2a:c1:d1:e5:e6:f5:3b:97:f1:0c:49:9a:fe:4d:
                    cc:d5:2e:74:ab:e5:f7:5b:63:06:86:df:c8:75:98:
                    6e:7a:ee:a1:aa:0b:65:e7:8c:78:83:60:07:32:4a:
                    a3:ce:13:65:12:a4:d5:6a:a2:4a:f4:e1:35:3f:d5:
                    0d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D1:49:FA:A3:45:06:BA:EA:3C:D7:B0:DD:6C:D5:55:D5:41:37:D3
            X509v3 Authority Key Identifier:
                keyid:30:92:A8:2F:7A:97:98:8E:8C:09:54:63:AD:BB:51:E0:93:59:28:C8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJKoL3qXmI6MCVRjrbtR4JNZKMg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:13:b3:c0:e2:5c:4f:e0:d4:d8:d3:a1:39:4f:a5:b2:0c:27:
         d1:79:1b:98:7f:53:b5:0c:78:7e:b6:a3:67:1d:c2:13:8b:9a:
         de:32:85:37:0f:08:9f:4f:d6:ca:4f:29:d0:86:d1:5d:00:62:
         d9:e2:fe:4a:fa:94:2e:f5:f7:95:26:7a:6d:a2:65:c3:d2:d4:
         57:09:ec:0f:e5:86:e9:46:9e:8d:87:f0:f8:d6:be:5e:9e:c0:
         8e:70:b3:cd:a4:c8:72:36:4f:78:aa:8a:d5:8a:9c:f0:f6:6d:
         87:b3:20:cf:bc:7d:c3:c9:e4:b2:d0:3b:6d:02:a6:99:2a:59:
         35:26:7b:59:04:5a:a1:e2:98:c3:c8:dd:ed:3a:b2:fd:36:d3:
         0d:53:d0:98:22:70:85:f7:14:9c:2e:cc:6f:e8:1b:bf:fb:0b:
         3d:5a:65:39:8a:34:98:63:43:26:fc:7f:28:aa:85:67:cf:77:
         5c:7c:7e:d0:d4:61:e1:d7:0c:8a:8e:17:cc:71:cc:ad:d1:1d:
         d5:ef:ba:be:4b:c8:20:ed:ed:c2:92:1a:57:86:d8:05:af:5d:
         e5:a0:65:7f:ec:98:6d:26:e0:1a:e0:92:b4:42:af:b1:bf:91:
         81:cf:31:6d:e7:58:07:e2:84:71:a3:41:ab:a9:dd:fa:99:24:
         ca:4a:3d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:20 2025 by rpki-client