Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft
File:                     dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft (raw, json)
Hash identifier:          GSePcDfzgEDom+PLpSacjBp2EZHTvxfwcMITc7oijdU=
Subject key identifier:   83:28:8C:B5:1A:D8:48:93:92:64:6B:FC:3F:9B:EF:4C:7A:18:CD:33
Authority key identifier: 75:63:7B:AD:D8:37:B6:71:50:E8:0F:9C:8E:2F:0C:5A:E5:51:B7:91
Certificate issuer:       /CN=75637BADD837B67150E80F9C8E2F0C5AE551B791
Certificate serial:       1D34
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft
Manifest number:          1D2F
Signing time:             Sat 29 Mar 2025 08:27:20 +0000
Manifest this update:     Sat 29 Mar 2025 08:27:20 +0000
Manifest next update:     Sat 29 Mar 2025 14:27:20 +0000
Files and hashes:         1: Chccgovtr4Jxu9Y1IiEwZLNPEww.roa (hash: 4ivezYEeXqevm8aBYlTI2iZFxUZ10Xr3aU92Qwnct7Y=)
                          2: dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl (hash: ydkB/301IGmpIDp2EpF5Yjcu+SF4LP56ooA8yZKCPpE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7476 (0x1d34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75637BADD837B67150E80F9C8E2F0C5AE551B791
        Validity
            Not Before: Mar 29 08:27:20 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=83288CB51AD8489392646BFC3F9BEF4C7A18CD33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3d:88:f8:df:ca:bf:f9:ae:84:b1:d5:3d:50:
                    3a:f4:7e:f5:fc:03:71:95:8a:65:1c:a1:4a:6f:0a:
                    cd:b1:59:a2:69:70:cf:8d:8a:53:42:ff:3d:ab:7b:
                    24:8a:48:9f:8e:7f:c5:6e:c1:a9:1e:de:13:09:7e:
                    b2:8e:7d:78:21:aa:d2:05:e1:1c:1c:ca:02:6b:60:
                    80:b7:fd:ca:97:72:cd:c6:e7:de:b4:d0:39:fa:8e:
                    29:8d:f9:05:72:99:e7:2d:f8:52:5f:93:af:34:d3:
                    44:93:70:fd:ac:70:22:0a:9c:2b:e2:cd:3b:33:20:
                    1a:b7:fe:fe:be:50:b6:57:7f:fb:0f:59:1c:e6:f1:
                    8a:ca:44:13:3d:22:92:4b:84:a4:11:ac:8e:89:30:
                    bf:c7:4e:9e:ce:45:be:3b:c6:c6:c8:a8:a3:e7:02:
                    34:54:2c:ea:0b:85:c9:18:8c:be:a1:59:4e:f9:fb:
                    41:d1:a1:c8:be:6b:49:47:c6:5e:49:a3:64:9f:33:
                    23:ce:fe:15:da:df:45:3c:e2:a6:78:e5:a0:55:0e:
                    23:9c:54:94:da:77:56:47:61:5e:88:34:91:c9:b2:
                    d6:85:17:cc:65:88:9c:47:05:e8:4d:fc:6b:f2:bd:
                    82:58:2f:87:2e:22:61:bb:c2:af:d5:3e:1a:b2:da:
                    e6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:28:8C:B5:1A:D8:48:93:92:64:6B:FC:3F:9B:EF:4C:7A:18:CD:33
            X509v3 Authority Key Identifier:
                keyid:75:63:7B:AD:D8:37:B6:71:50:E8:0F:9C:8E:2F:0C:5A:E5:51:B7:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:fc:7f:72:87:be:08:bb:ec:ac:1d:6f:a8:a2:50:8e:7c:8b:
         00:2e:b9:03:3c:d8:24:30:4d:7d:45:5e:35:fc:43:64:fd:a9:
         ef:b5:d7:03:62:36:31:70:ca:d1:ac:37:40:e7:cd:54:d1:71:
         9e:49:4c:bc:1a:cc:0b:8d:70:44:73:38:ef:fa:7d:6d:14:d2:
         89:09:43:30:8d:62:ee:75:93:90:64:3d:06:24:db:94:f7:19:
         f2:4a:c4:2f:82:08:5b:31:f8:7d:34:3d:e8:b9:42:4f:19:87:
         be:ec:a5:ca:97:8c:76:1d:cb:dc:ca:7f:7d:4b:6e:a4:73:31:
         a9:10:ed:90:b9:73:c4:f4:c8:b0:19:00:08:60:b6:e4:fa:56:
         c1:97:d0:3d:ea:35:24:79:37:4d:e9:53:ea:c5:3b:25:06:a6:
         81:22:7e:3d:84:1f:3c:94:02:fa:df:cd:1d:20:6f:a5:73:a9:
         ee:00:ba:fd:0a:87:35:a1:5f:07:18:89:9d:a0:38:aa:74:08:
         5f:1d:b1:4f:88:c3:ef:15:f3:4f:d8:af:e5:eb:35:bb:fe:d7:
         6c:bb:a0:01:b4:80:07:fd:1a:93:67:5d:7d:af:bd:7a:69:57:
         5c:0b:7e:a4:6a:c2:58:db:05:29:34:d5:33:10:a5:27:74:b1:
         00:b8:4d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:42 2025 by rpki-client