Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.mft
File:                     6CKHu1b6yOZ1Or3jaztqk5y1mlM.mft (raw, json)
Hash identifier:          lCq3+MTiycRXbwRsGUnJIOMfaoRoDi/N/U1GdHCq7KQ=
Subject key identifier:   95:04:C6:72:57:F7:D1:E8:BD:CA:CE:86:67:6A:E2:6E:D0:1C:E8:D0
Authority key identifier: E8:22:87:BB:56:FA:C8:E6:75:3A:BD:E3:6B:3B:6A:93:9C:B5:9A:53
Certificate issuer:       /CN=E82287BB56FAC8E6753ABDE36B3B6A939CB59A53
Certificate serial:       1EF3
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6CKHu1b6yOZ1Or3jaztqk5y1mlM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.mft
Manifest number:          1EED
Signing time:             Fri 04 Apr 2025 19:08:03 +0000
Manifest this update:     Fri 04 Apr 2025 19:08:03 +0000
Manifest next update:     Sat 05 Apr 2025 01:08:03 +0000
Files and hashes:         1: 6CKHu1b6yOZ1Or3jaztqk5y1mlM.crl (hash: IcW/oK2PMQvpLr5+5g5WC8CcHCbWxzwzJ3GWwUC/EXY=)
                          2: S2bjNQej-REqHgT0YrR_t7OF0FY.roa (hash: JxMODKuWSwr6iH8TL8EdeU0qcY/yfLIHP/GxfzV8PUw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7923 (0x1ef3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E82287BB56FAC8E6753ABDE36B3B6A939CB59A53
        Validity
            Not Before: Apr  4 19:08:03 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=9504C67257F7D1E8BDCACE86676AE26ED01CE8D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a3:c2:38:5d:ef:6d:62:88:61:35:41:9f:07:
                    3c:dd:f7:29:98:e8:22:b1:85:65:c7:87:ef:98:d6:
                    59:a4:a2:d1:21:11:87:29:f4:f8:94:fe:f5:63:c9:
                    ba:43:50:68:2d:ea:38:3d:15:9d:a2:52:09:7d:50:
                    a2:d4:89:9a:f5:42:a9:d0:6d:7a:3d:eb:89:cb:b9:
                    27:4e:c8:3e:2b:31:d3:e0:d8:94:68:29:ec:45:e9:
                    e3:26:33:6b:4b:14:c2:4e:81:27:e4:60:ea:24:23:
                    bb:40:cc:6d:b5:fa:cd:db:53:06:64:ae:92:40:04:
                    6f:68:c3:58:f5:be:50:a4:af:63:e7:97:ea:60:34:
                    10:e3:36:45:10:98:a2:d0:08:6c:d5:e7:1c:2d:b3:
                    77:d0:40:6e:e8:91:2a:c4:f8:71:ae:21:f4:39:25:
                    2a:91:f2:18:31:7c:04:cf:5a:19:09:50:6d:50:22:
                    9b:9d:d5:93:01:74:a3:51:c8:90:00:2d:87:9f:0c:
                    66:34:c8:33:bf:6c:1f:a6:fd:4e:fb:29:9c:7c:26:
                    9b:80:71:75:05:a8:ea:90:ce:fb:32:37:f2:16:34:
                    b0:aa:db:2a:a7:a9:ab:f5:6c:a4:10:4f:80:45:1b:
                    64:e3:8b:78:18:0d:03:ba:58:e2:cc:be:b7:c6:42:
                    e1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:04:C6:72:57:F7:D1:E8:BD:CA:CE:86:67:6A:E2:6E:D0:1C:E8:D0
            X509v3 Authority Key Identifier:
                keyid:E8:22:87:BB:56:FA:C8:E6:75:3A:BD:E3:6B:3B:6A:93:9C:B5:9A:53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6CKHu1b6yOZ1Or3jaztqk5y1mlM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:0d:60:06:40:e3:dd:86:92:98:4f:d6:90:a8:f5:be:63:d5:
         cf:ab:f5:ec:64:8c:ea:48:83:26:a4:55:39:7e:f5:e4:76:50:
         b1:c3:f2:4b:bc:04:8c:0b:42:25:4a:0a:44:41:5e:c3:15:a4:
         8a:2e:61:76:0e:f1:09:a1:31:46:ce:2a:8c:de:ee:b2:78:16:
         53:89:8f:0f:5f:80:66:a7:d8:e6:e9:32:76:36:d1:81:1f:fc:
         11:4c:95:3a:b9:4f:7e:df:f1:04:71:00:ec:af:33:15:10:c4:
         09:52:80:e5:db:6d:b6:51:38:ae:df:11:98:52:e2:e9:c2:5d:
         27:63:04:72:d8:8c:7c:dd:c6:2d:7a:14:34:d4:bb:02:e5:33:
         18:5f:ad:93:04:c9:97:67:01:5b:02:a7:4b:f0:f2:9d:63:83:
         8f:4d:b2:4c:90:46:bd:d2:bc:f1:24:2e:70:eb:2d:8b:37:c2:
         8d:e2:76:c0:dd:50:4d:3a:c9:41:d6:2c:1e:b9:0c:39:9a:53:
         11:08:91:a0:ba:14:dd:35:21:98:7e:83:04:7c:99:7c:c4:d7:
         32:b8:76:d2:b4:22:db:a8:c5:5e:07:79:b3:f4:0f:99:55:04:
         68:30:32:8b:92:11:c8:66:8d:f6:44:0f:26:b3:43:b9:55:86:
         bb:c4:34:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:36 2025 by rpki-client