Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2590/cWgV4hPhAadE_JLy-1sSReSx0m8.mft
File:                     cWgV4hPhAadE_JLy-1sSReSx0m8.mft (raw, json)
Hash identifier:          Kd21C+cX/YkVC6/DObfT+wBir2EBLoKfmpiBUauZOg4=
Subject key identifier:   6A:90:33:A4:80:17:51:A3:A5:82:D7:9D:A3:E3:DB:9F:BA:68:C2:14
Authority key identifier: 71:68:15:E2:13:E1:01:A7:44:FC:92:F2:FB:5B:12:45:E4:B1:D2:6F
Certificate issuer:       /CN=716815E213E101A744FC92F2FB5B1245E4B1D26F
Certificate serial:       13F5
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cWgV4hPhAadE_JLy-1sSReSx0m8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/cWgV4hPhAadE_JLy-1sSReSx0m8.mft
Manifest number:          13F5
Signing time:             Sat 29 Mar 2025 10:29:40 +0000
Manifest this update:     Sat 29 Mar 2025 10:29:40 +0000
Manifest next update:     Sat 29 Mar 2025 16:29:40 +0000
Files and hashes:         1: cWgV4hPhAadE_JLy-1sSReSx0m8.crl (hash: J1Ashan747OpEjS7DgcIFKYMEUgPyZ2yxQnvbWqT+ks=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5109 (0x13f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716815E213E101A744FC92F2FB5B1245E4B1D26F
        Validity
            Not Before: Mar 29 10:29:40 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=6A9033A4801751A3A582D79DA3E3DB9FBA68C214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a6:c6:ff:5d:0c:7e:5f:74:a7:23:4e:af:3e:
                    50:55:5d:39:60:5c:ce:68:a9:c7:15:33:25:20:e3:
                    96:b8:ff:9c:6b:57:45:6d:f5:51:ce:d8:d5:1c:9e:
                    19:e1:c8:bc:5d:ba:1d:81:e3:7a:8b:13:a7:c1:79:
                    20:06:89:58:29:bf:a5:74:b2:a0:b7:20:0f:95:b7:
                    4c:51:2b:b4:7a:a9:7e:6a:46:27:57:84:b3:e2:14:
                    9c:e2:b4:d7:03:f3:4d:0b:56:fd:c3:0d:3a:ae:c3:
                    07:34:d9:12:9e:5d:b3:3b:75:c7:1f:e3:b6:c2:62:
                    fd:29:8c:b1:dd:44:8c:e1:86:c0:41:d7:38:87:d3:
                    82:d7:fc:9b:77:6f:b8:ea:64:79:25:f4:08:e1:ee:
                    82:07:d0:23:8b:27:63:df:10:60:71:4a:8b:df:48:
                    bb:08:5a:35:b8:02:d8:f0:d0:cd:da:c9:78:2d:92:
                    ea:cc:c8:93:21:1c:83:5f:53:3b:79:7e:41:2a:54:
                    d1:6b:b0:87:1b:5b:73:d3:2c:de:00:da:00:fe:46:
                    04:be:87:e5:14:2d:04:ba:d9:50:6d:56:1e:d7:47:
                    d5:b7:60:de:f4:c6:03:d7:be:2e:f7:19:cf:1a:82:
                    c3:fe:02:a1:19:01:fe:3e:c1:25:14:33:c9:2b:90:
                    28:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:90:33:A4:80:17:51:A3:A5:82:D7:9D:A3:E3:DB:9F:BA:68:C2:14
            X509v3 Authority Key Identifier:
                keyid:71:68:15:E2:13:E1:01:A7:44:FC:92:F2:FB:5B:12:45:E4:B1:D2:6F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/cWgV4hPhAadE_JLy-1sSReSx0m8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cWgV4hPhAadE_JLy-1sSReSx0m8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/cWgV4hPhAadE_JLy-1sSReSx0m8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:41:d6:c8:ca:55:6d:27:fe:5e:20:66:be:bd:86:90:05:54:
         a5:84:83:49:12:fd:5b:7f:03:99:83:08:93:90:43:69:be:6a:
         08:41:95:b0:1b:1d:6e:1c:bd:11:7e:b1:ca:53:64:4f:81:35:
         15:2d:17:b5:b3:88:01:6f:a9:eb:7b:d3:c3:37:18:1d:54:7b:
         6f:c3:3b:1f:79:51:39:a7:24:17:ca:a4:a5:3d:93:73:ab:6c:
         66:eb:84:a6:dd:b7:bc:e6:de:7a:9c:09:ab:50:17:6f:a8:ca:
         a5:c4:42:fa:e8:bb:b3:ec:19:48:84:21:35:38:96:af:7e:95:
         fd:f2:53:94:65:a1:ab:af:73:bb:16:2a:d4:28:99:79:cf:fb:
         21:24:ee:93:e6:75:39:d7:91:c2:1b:a6:64:38:78:02:72:ef:
         fd:18:3a:dd:5f:f2:78:6b:24:ba:f1:96:f5:ba:e6:a3:ce:35:
         60:7b:d0:07:54:4b:41:c9:3d:85:f7:01:e0:2b:39:d2:dc:18:
         2a:79:e9:33:43:4e:22:81:a8:4f:27:4b:47:5d:a3:ce:38:a1:
         a4:ae:30:a3:43:4e:cf:3f:e3:3a:b1:fd:88:f1:06:4d:7c:ea:
         81:85:ba:3f:02:08:34:f5:60:8b:2b:ea:0b:e1:e9:a4:01:c2:
         d0:3c:86:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:34:57 2025 by rpki-client