Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft
File:                     J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft (raw, json)
Hash identifier:          f+vABoP+wicAT12ycjJLDImXPkIPQIZq/yCFIckNTiU=
Subject key identifier:   7C:4E:C6:0D:45:C6:34:A4:4F:28:CF:25:93:60:4B:9F:0D:73:80:34
Authority key identifier: 27:B3:9B:01:8F:1A:D0:63:7E:30:72:7C:28:D9:2E:20:A6:3E:EF:55
Certificate issuer:       /CN=27B39B018F1AD0637E30727C28D92E20A63EEF55
Certificate serial:       1716
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/J7ObAY8a0GN-MHJ8KNkuIKY-71U.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft
Manifest number:          1716
Signing time:             Sat 29 Mar 2025 09:27:40 +0000
Manifest this update:     Sat 29 Mar 2025 09:27:40 +0000
Manifest next update:     Sat 29 Mar 2025 15:27:40 +0000
Files and hashes:         1: J7ObAY8a0GN-MHJ8KNkuIKY-71U.crl (hash: ubgziCzCoMCQXT5rcQXwwmwaWwHXDdsrdV/V1jeGO8s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5910 (0x1716)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B39B018F1AD0637E30727C28D92E20A63EEF55
        Validity
            Not Before: Mar 29 09:27:40 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=7C4EC60D45C634A44F28CF2593604B9F0D738034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:54:da:f3:3d:08:08:c8:93:a8:23:8f:30:1f:
                    9c:9a:c2:d7:4c:9f:66:f5:91:39:61:51:b0:a4:ac:
                    d5:d9:d9:93:de:c6:01:c6:64:60:c8:6f:c3:b3:2f:
                    10:98:36:9e:b4:24:8e:8f:f9:a2:bb:e8:dd:d3:32:
                    ad:a9:a2:f5:58:b8:be:6a:42:34:a4:9c:d6:8d:95:
                    28:4a:04:d3:ff:29:98:37:d0:2a:80:18:f6:74:26:
                    77:59:66:32:57:b5:ea:c6:44:c0:6e:c4:8b:4a:b9:
                    fc:9c:d3:46:96:d3:aa:69:03:aa:4a:e5:69:2b:a3:
                    d6:63:6c:f8:4f:10:a7:96:9d:e9:0f:7a:dd:a2:d0:
                    ce:00:39:a5:ae:26:0d:a3:0a:12:1b:bc:15:1a:82:
                    7e:66:57:41:3d:64:3a:6a:33:89:59:2f:87:e5:50:
                    17:08:85:a3:db:dd:11:05:42:bb:e9:55:60:cd:de:
                    d9:d0:ba:76:bb:5d:38:6e:1a:33:c4:c3:6b:d5:cb:
                    14:e3:83:4f:ce:be:e9:5a:2b:29:7c:34:56:85:89:
                    43:a5:d6:9c:6b:74:ba:b2:0f:32:0b:5c:de:66:27:
                    fa:5c:58:50:64:a2:2b:f2:6c:9f:6f:78:dc:a2:ad:
                    51:84:d0:94:42:47:1f:54:38:ac:31:2d:28:c0:13:
                    9c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4E:C6:0D:45:C6:34:A4:4F:28:CF:25:93:60:4B:9F:0D:73:80:34
            X509v3 Authority Key Identifier:
                keyid:27:B3:9B:01:8F:1A:D0:63:7E:30:72:7C:28:D9:2E:20:A6:3E:EF:55

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/J7ObAY8a0GN-MHJ8KNkuIKY-71U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5d:3e:66:e9:3b:3b:37:33:a5:29:ea:38:3d:93:9e:bd:58:
         1c:84:85:be:f3:c0:e6:7b:fa:6b:6b:d9:dc:a2:c9:b6:99:9f:
         f7:65:ad:b8:1c:b2:6e:92:33:6e:be:d9:5f:48:31:b7:e0:6e:
         32:70:1f:78:47:f0:e0:aa:38:10:ab:30:4b:43:2a:1f:d6:28:
         b7:cf:9c:7c:e8:47:65:eb:d1:15:e8:a9:21:bc:42:48:fa:e5:
         dc:32:3f:ac:1d:fe:5c:95:10:18:be:7e:67:92:f4:9b:c3:5f:
         f7:76:5d:aa:fc:82:46:c7:a1:9f:2d:9c:80:6a:61:81:92:cd:
         09:e3:65:ea:6c:86:04:aa:76:e9:6f:63:6b:43:df:c5:62:d4:
         ae:88:38:06:5c:e1:18:ab:f9:76:54:1a:16:fe:03:44:29:2f:
         28:00:ea:87:a9:9f:46:dc:f0:fc:63:14:cd:bc:b1:20:f4:5b:
         7a:5c:4a:36:5b:a4:9a:1e:18:56:d9:d0:91:a3:60:3c:6f:d9:
         25:b9:fd:40:16:4e:08:67:23:7f:71:e4:91:17:8c:d3:05:ff:
         5b:1d:dc:b8:0c:10:a2:b3:43:9b:ff:96:30:9b:0c:a8:0c:22:
         11:c2:58:80:16:6c:76:32:f9:8e:48:8d:9c:bd:ee:00:ce:dc:
         0d:11:c7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:52 2025 by rpki-client