Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft
File:                     dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft (raw, json)
Hash identifier:          vKT0sjnZLB6tdtwSvfJ4SmQa9kkBTQCPOSZvMGxAkT4=
Subject key identifier:   83:28:8C:B5:1A:D8:48:93:92:64:6B:FC:3F:9B:EF:4C:7A:18:CD:33
Authority key identifier: 75:63:7B:AD:D8:37:B6:71:50:E8:0F:9C:8E:2F:0C:5A:E5:51:B7:91
Certificate issuer:       /CN=75637BADD837B67150E80F9C8E2F0C5AE551B791
Certificate serial:       1E88
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft
Manifest number:          1E83
Signing time:             Thu 05 Jun 2025 14:08:43 +0000
Manifest this update:     Thu 05 Jun 2025 14:08:43 +0000
Manifest next update:     Thu 05 Jun 2025 20:08:43 +0000
Files and hashes:         1: Chccgovtr4Jxu9Y1IiEwZLNPEww.roa (hash: 4ivezYEeXqevm8aBYlTI2iZFxUZ10Xr3aU92Qwnct7Y=)
                          2: dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl (hash: 3QsXoRVuWMcKR2u6EmSZbx2EMzygp8CbWOaUM2kogGI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7816 (0x1e88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75637BADD837B67150E80F9C8E2F0C5AE551B791
        Validity
            Not Before: Jun  5 14:08:43 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=83288CB51AD8489392646BFC3F9BEF4C7A18CD33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3d:88:f8:df:ca:bf:f9:ae:84:b1:d5:3d:50:
                    3a:f4:7e:f5:fc:03:71:95:8a:65:1c:a1:4a:6f:0a:
                    cd:b1:59:a2:69:70:cf:8d:8a:53:42:ff:3d:ab:7b:
                    24:8a:48:9f:8e:7f:c5:6e:c1:a9:1e:de:13:09:7e:
                    b2:8e:7d:78:21:aa:d2:05:e1:1c:1c:ca:02:6b:60:
                    80:b7:fd:ca:97:72:cd:c6:e7:de:b4:d0:39:fa:8e:
                    29:8d:f9:05:72:99:e7:2d:f8:52:5f:93:af:34:d3:
                    44:93:70:fd:ac:70:22:0a:9c:2b:e2:cd:3b:33:20:
                    1a:b7:fe:fe:be:50:b6:57:7f:fb:0f:59:1c:e6:f1:
                    8a:ca:44:13:3d:22:92:4b:84:a4:11:ac:8e:89:30:
                    bf:c7:4e:9e:ce:45:be:3b:c6:c6:c8:a8:a3:e7:02:
                    34:54:2c:ea:0b:85:c9:18:8c:be:a1:59:4e:f9:fb:
                    41:d1:a1:c8:be:6b:49:47:c6:5e:49:a3:64:9f:33:
                    23:ce:fe:15:da:df:45:3c:e2:a6:78:e5:a0:55:0e:
                    23:9c:54:94:da:77:56:47:61:5e:88:34:91:c9:b2:
                    d6:85:17:cc:65:88:9c:47:05:e8:4d:fc:6b:f2:bd:
                    82:58:2f:87:2e:22:61:bb:c2:af:d5:3e:1a:b2:da:
                    e6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:28:8C:B5:1A:D8:48:93:92:64:6B:FC:3F:9B:EF:4C:7A:18:CD:33
            X509v3 Authority Key Identifier:
                keyid:75:63:7B:AD:D8:37:B6:71:50:E8:0F:9C:8E:2F:0C:5A:E5:51:B7:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:09:48:43:5a:83:40:9b:74:d3:45:ef:02:c1:ba:cd:6f:17:
         dc:29:56:74:23:98:a1:86:da:96:75:95:49:db:1c:96:bf:9a:
         a9:b1:ce:e6:30:c6:91:ba:82:f8:1a:b0:49:fb:91:fd:13:53:
         21:8b:08:f8:9b:c8:9f:e7:ba:bf:95:33:90:94:00:48:04:13:
         88:6c:93:6d:71:7e:56:30:d1:5a:b7:a8:aa:c6:a9:b4:f4:eb:
         43:d5:74:7a:2a:27:2b:f7:f0:9c:0e:15:54:3a:dd:31:6f:2f:
         a7:ec:c0:26:ca:0f:07:d8:9f:aa:f4:f0:13:86:f6:3f:8a:7a:
         a8:c2:b1:cb:d3:f4:d5:f8:08:08:fd:74:f9:ec:cf:d3:01:14:
         a1:df:56:8a:c0:03:f2:78:e0:22:42:13:36:3b:e5:d3:1b:10:
         a7:7f:70:02:2b:4c:69:65:2d:ec:24:f2:45:07:fa:a5:c8:8f:
         1f:1c:c5:45:2b:55:7e:82:23:7f:0f:97:7b:92:e9:2b:c0:45:
         a7:81:1a:5a:0a:fd:41:c5:ae:78:ca:fc:0f:a3:80:48:74:c2:
         89:7d:91:6d:fb:ac:1c:d3:cd:d2:3c:d5:8e:1c:58:d0:b9:9a:
         6f:49:1d:94:5e:85:98:69:bf:05:ba:96:b6:36:da:fe:6e:7b:
         67:5a:d1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:49:47 2025 by rpki-client