Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft
File:                     Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft (raw, json)
Hash identifier:          Kfo6eUURUvMIn22+3cLDwKCksvKcJOynRmQeVxXvgCY=
Subject key identifier:   DB:D8:04:EC:B5:B5:B7:C6:D3:5D:78:64:95:7A:B3:0C:B3:75:69:59
Authority key identifier: 45:CF:5B:26:2A:56:F8:51:34:C8:FE:95:D6:4D:F0:89:F1:B7:62:E7
Certificate issuer:       /CN=45CF5B262A56F85134C8FE95D64DF089F1B762E7
Certificate serial:       04E7
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rc9bJipW-FE0yP6V1k3wifG3Yuc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft
Manifest number:          04E6
Signing time:             Sat 29 Mar 2025 08:28:03 +0000
Manifest this update:     Sat 29 Mar 2025 08:28:03 +0000
Manifest next update:     Sat 29 Mar 2025 14:28:03 +0000
Files and hashes:         1: Rc9bJipW-FE0yP6V1k3wifG3Yuc.crl (hash: hOmi0v03aZK3rag0X7MGHv5FqsP9nK7wAdTHPrsS/OU=)
                          2: rGX-jlWmT5UXNDCJbyr29sYL8j0.roa (hash: SC8327IqDeIkUpm5PLMYz5uE5ihFgGUKeXxDbb+NB5c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1255 (0x4e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45CF5B262A56F85134C8FE95D64DF089F1B762E7
        Validity
            Not Before: Mar 29 08:28:03 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=DBD804ECB5B5B7C6D35D7864957AB30CB3756959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1e:90:4d:ec:7d:11:9a:79:e8:9d:22:fa:8b:
                    ee:d3:e5:be:21:46:76:b6:55:d3:66:c2:01:85:63:
                    97:ea:fc:c6:b8:d8:cf:30:9e:6a:c4:00:2d:e6:99:
                    a0:21:9f:ab:b6:ca:03:c6:56:32:70:12:32:1a:db:
                    8a:8e:7c:91:8f:9e:1f:c8:e7:9b:e4:c7:8c:a7:69:
                    3f:9a:9a:7f:bc:69:81:2f:ad:0c:4f:94:86:70:62:
                    d7:8b:2e:f5:88:46:f1:19:4f:0c:49:40:05:9d:47:
                    2e:d3:22:b6:f4:2c:b3:4c:8e:5e:d9:18:af:ad:81:
                    75:33:0a:9c:8a:df:16:8b:99:6c:7d:cb:19:07:80:
                    45:79:33:28:f5:b6:2f:10:2c:da:d9:8f:80:8e:05:
                    cb:79:40:88:fd:d5:3a:2b:62:68:eb:bc:87:88:e3:
                    fa:bf:a2:76:f1:38:63:2e:c0:3f:e7:b1:82:db:52:
                    cf:68:db:56:0c:92:7a:95:a3:9a:69:f9:90:45:f9:
                    8c:3f:8b:88:61:7e:40:fa:55:5b:57:b5:71:7c:d6:
                    4a:05:bd:c1:85:42:b3:69:74:6f:d8:e6:da:14:fb:
                    f8:41:67:3f:1d:1b:4c:b4:bc:66:2e:88:85:63:ba:
                    36:ae:bd:1f:a9:03:8b:8e:d2:08:cf:35:3d:80:3c:
                    55:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D8:04:EC:B5:B5:B7:C6:D3:5D:78:64:95:7A:B3:0C:B3:75:69:59
            X509v3 Authority Key Identifier:
                keyid:45:CF:5B:26:2A:56:F8:51:34:C8:FE:95:D6:4D:F0:89:F1:B7:62:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rc9bJipW-FE0yP6V1k3wifG3Yuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:68:63:59:1c:93:d5:76:78:33:d5:44:46:4f:6c:17:7f:d3:
         46:a6:b0:3c:bd:df:d9:fd:9c:b5:37:1a:8e:6d:77:6c:42:c1:
         59:58:35:e2:56:07:1b:3d:b5:4d:13:78:b7:05:21:e5:ae:83:
         01:b7:73:28:34:50:19:05:17:8d:4c:d9:ba:43:a2:3a:e4:bb:
         af:42:51:0d:1c:98:dc:15:fa:ef:eb:ad:2b:70:a0:0a:62:34:
         5e:e1:8f:f5:02:ed:ca:4f:46:21:63:a3:1d:83:c2:1a:d5:3f:
         32:63:46:23:a0:40:31:1f:a2:7f:3e:d6:49:74:16:c6:0e:38:
         3b:4d:e2:d4:1a:8b:cd:a8:54:f1:e9:86:14:32:34:08:77:d7:
         cd:11:00:2f:ff:24:cf:ef:3e:c2:1f:1e:81:20:db:59:59:26:
         8c:67:f6:8c:3b:37:63:d7:ce:59:b9:b4:21:5a:98:4f:49:45:
         c0:6d:55:6d:d4:43:51:d0:b2:04:23:f2:d4:b3:ea:fb:82:84:
         67:a3:de:8d:19:0e:c7:44:b0:e9:41:e0:42:14:60:25:89:27:
         56:e1:5b:80:9c:8e:08:86:69:87:e4:cc:59:e8:5d:30:c7:64:
         5c:27:8f:19:d2:de:50:37:9f:c8:22:1f:14:f5:cd:a5:03:93:
         75:a3:e4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:24 2025 by rpki-client