Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2451/7N1zMsZabqPGQCPazgMgB9Tx1DQ.mft
File:                     7N1zMsZabqPGQCPazgMgB9Tx1DQ.mft (raw, json)
Hash identifier:          TrLxtdzvPGlmG/q9PZggLwCRA+fvGHECwMfUK/XKuBs=
Subject key identifier:   EF:FE:78:F8:DA:8B:C7:F7:9F:E6:D9:5F:45:68:97:E0:B7:15:86:B8
Authority key identifier: EC:DD:73:32:C6:5A:6E:A3:C6:40:23:DA:CE:03:20:07:D4:F1:D4:34
Certificate issuer:       /CN=ECDD7332C65A6EA3C64023DACE032007D4F1D434
Certificate serial:       198C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7N1zMsZabqPGQCPazgMgB9Tx1DQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2451/7N1zMsZabqPGQCPazgMgB9Tx1DQ.mft
Manifest number:          198C
Signing time:             Sun 22 Sep 2024 18:18:28 +0000
Manifest this update:     Sun 22 Sep 2024 18:18:28 +0000
Manifest next update:     Mon 23 Sep 2024 00:18:28 +0000
Files and hashes:         1: 7N1zMsZabqPGQCPazgMgB9Tx1DQ.crl (hash: j3Drch1lMC84UrnGWyfmv9rg+8VCfhQjFXW5S8Uo9Jg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6540 (0x198c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECDD7332C65A6EA3C64023DACE032007D4F1D434
        Validity
            Not Before: Sep 22 18:18:28 2024 GMT
            Not After : Sep 20 07:41:26 2025 GMT
        Subject: CN=EFFE78F8DA8BC7F79FE6D95F456897E0B71586B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:0a:7b:1f:52:5d:61:d5:9f:a9:82:5f:98:
                    56:34:14:40:02:09:89:96:45:c9:59:e7:59:41:9f:
                    08:6b:07:fe:0c:4b:e1:ab:60:27:b7:6b:30:29:e3:
                    4f:3e:dc:f2:20:d3:7e:7d:5f:15:16:98:65:3c:26:
                    4b:c7:2a:bd:d0:bb:e3:0d:b4:47:64:a1:da:ad:4c:
                    df:96:62:ba:7e:f2:55:47:99:63:1e:38:66:51:27:
                    55:ac:02:18:25:7c:3c:59:e2:f5:94:a3:85:d9:7c:
                    14:99:72:d3:f3:71:06:b0:9c:24:97:cf:97:3e:ef:
                    d6:bd:c8:23:d5:48:aa:8c:5b:56:90:67:79:bf:65:
                    97:56:49:01:2f:31:dd:da:5f:9d:ab:61:d7:02:3c:
                    3c:a9:03:6c:97:7c:4c:65:8b:c9:3a:4b:4c:ca:4c:
                    db:0c:7a:0e:42:2b:8a:cf:54:7f:7c:73:f8:69:f7:
                    c9:5e:21:3e:f4:04:d9:4a:ff:8d:ee:0f:0b:3e:c2:
                    82:dd:aa:f5:82:dc:97:4d:f3:bb:ec:b2:48:b6:c5:
                    13:51:b4:b6:c3:b1:79:04:f6:84:bc:35:9d:76:d5:
                    4b:76:d5:5c:35:ec:14:eb:d7:d4:70:b7:28:7b:8a:
                    95:11:28:c5:11:7f:6b:83:f6:c8:4c:b7:f5:a9:7e:
                    79:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FE:78:F8:DA:8B:C7:F7:9F:E6:D9:5F:45:68:97:E0:B7:15:86:B8
            X509v3 Authority Key Identifier:
                keyid:EC:DD:73:32:C6:5A:6E:A3:C6:40:23:DA:CE:03:20:07:D4:F1:D4:34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2451/7N1zMsZabqPGQCPazgMgB9Tx1DQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7N1zMsZabqPGQCPazgMgB9Tx1DQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2451/7N1zMsZabqPGQCPazgMgB9Tx1DQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:23:6a:c9:a5:aa:53:66:8b:d1:ca:38:1a:c2:86:9d:d0:af:
         ac:05:29:3b:70:73:7b:39:9a:56:0a:c8:63:56:47:74:9f:c1:
         59:22:c6:24:97:05:81:e0:3e:f2:5a:3c:d7:22:98:7c:6c:70:
         e1:ab:68:fb:28:bf:ec:96:72:20:1c:20:5e:0c:64:ec:1e:50:
         7b:f6:7b:f0:d6:8f:08:10:48:2e:4d:3a:2f:9d:b8:7e:45:26:
         16:5c:01:f3:d6:f4:33:b4:86:93:7d:01:25:a7:37:fd:8e:21:
         4e:76:c6:b0:73:be:e9:48:0f:5f:96:d6:95:a5:ab:4d:10:fc:
         40:51:9c:8d:06:8f:6d:40:06:9e:6e:47:71:a6:bb:2f:9c:fc:
         09:84:27:83:53:8f:c2:1c:5b:cc:d6:07:bb:7a:15:9d:e7:40:
         2a:4c:07:66:bb:9c:e1:f0:29:3e:8e:ef:3c:0e:5d:d2:4e:1c:
         6e:fa:73:25:e2:4b:61:22:92:21:dc:40:e5:4a:1e:47:50:ac:
         f1:c2:87:50:aa:01:e6:d1:f7:d2:c5:98:45:42:e5:a6:9d:63:
         f9:12:a2:47:30:09:17:39:d9:5b:89:b2:dc:1b:83:d8:c7:23:
         36:d0:ce:29:ba:61:81:b9:dc:da:ba:c7:3f:5b:1b:46:6e:f9:
         49:27:d3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:23 2025 by rpki-client