Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.mft
File:                     A_B12cbxjcCb2mK3CH6oDcW3EcU.mft (raw, json)
Hash identifier:          yUQsWkHueTk+OGskctRBBs5mGKx5WmR4JUlODU73Jkk=
Subject key identifier:   59:BD:DE:EC:FF:BC:DF:DB:7F:B9:34:74:4B:91:BE:CE:0D:5E:F5:0C
Authority key identifier: 03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5
Certificate issuer:       /CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5
Certificate serial:       2249
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.mft
Manifest number:          222E
Signing time:             Thu 12 Jun 2025 02:43:41 +0000
Manifest this update:     Thu 12 Jun 2025 02:43:41 +0000
Manifest next update:     Thu 12 Jun 2025 08:43:41 +0000
Files and hashes:         1: A_B12cbxjcCb2mK3CH6oDcW3EcU.crl (hash: jTfnUjRiyosGweUJ1yFMVTmIf7f0hnlHO5a6cEXwCkM=)
                          2: UHs7DMQ_H9CDTFMP1-_R-IWYOGg.roa (hash: 3eM46AuPN34/3H+PAtO13yzvrocoZQiHE/YFD3X0T84=)
                          3: kpr8N22lFBXQx4xmoPUdJeValKw.roa (hash: /GYPVj31gOc9aq6C3mRrAk9GWyhvMG5Er50AiD6VIrU=)
                          4: v3P2a1Pa0DQP8E1DSBIGjv-ZBoU.roa (hash: /IT0ukCR0RQKPUiDl/F0eageakvuhpSm9Qj8BoZVK20=)
                          5: yKBP04h8aBmYOQTVHJ4Cs0uLu4E.roa (hash: di2H7lyXM4uJfb1VzsxNdbXEMP3hncixK4o6Lop/7EI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8777 (0x2249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5
        Validity
            Not Before: Jun 12 02:43:41 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=59BDDEECFFBCDFDB7FB934744B91BECE0D5EF50C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:0e:89:3e:40:82:0e:7a:8d:6d:a9:30:f4:
                    8d:d2:ed:71:78:21:45:90:ec:bc:89:e6:53:69:e9:
                    bb:5c:81:72:b6:6f:58:fe:09:2b:59:58:eb:d0:13:
                    ed:23:72:e8:4a:ff:14:b2:e3:5d:97:68:a3:60:c4:
                    8b:27:6a:60:6d:76:21:ab:1e:fa:d3:c1:ee:12:39:
                    d7:18:b2:15:27:38:48:3b:71:0a:6f:82:cb:f0:e9:
                    ac:33:24:69:04:19:6e:fb:d3:3b:12:58:41:42:55:
                    14:41:0a:b9:c2:0d:c8:68:85:bf:36:1f:d1:a2:e3:
                    9c:9b:c7:ba:51:96:3a:2d:c7:2d:29:f3:f3:08:45:
                    6f:0a:03:1a:ae:ed:d9:a5:b6:6e:7b:1a:58:1e:e5:
                    d6:a7:b0:ef:e0:48:8b:48:ad:c3:2c:70:90:a9:c9:
                    ba:4e:75:0c:65:01:15:7a:3f:6f:3b:89:a3:28:3b:
                    a9:79:ea:14:9a:d3:fb:11:9e:37:7f:c0:10:73:12:
                    36:eb:2f:e4:ee:cc:12:42:d7:16:39:73:8c:b8:9f:
                    c3:bf:be:5c:6f:ea:de:fc:ea:32:7d:17:85:f1:15:
                    ab:79:b7:af:13:59:3a:d8:23:2f:8b:d6:f9:c9:a4:
                    cc:30:d1:26:9d:2f:ee:e9:45:03:f6:59:35:55:bc:
                    ef:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BD:DE:EC:FF:BC:DF:DB:7F:B9:34:74:4B:91:BE:CE:0D:5E:F5:0C
            X509v3 Authority Key Identifier:
                keyid:03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:69:d8:42:af:63:3a:d4:ee:97:0a:df:b6:83:e9:c9:5b:44:
         a9:b0:ed:1b:cd:b4:66:01:c9:32:96:b2:06:3f:52:fe:da:5a:
         82:68:e5:66:46:2d:da:a1:cc:78:c0:6f:e2:4c:3f:a9:78:7b:
         12:1c:a2:32:13:9e:f2:08:c5:a6:2c:9a:a3:ec:93:1e:2c:13:
         62:e0:b4:fd:9f:74:88:d6:f4:26:54:06:6c:54:53:3d:bd:75:
         d5:1a:32:77:71:ad:cb:73:90:71:b1:b6:9b:83:89:3f:c5:df:
         34:f2:bb:a9:62:38:3d:2d:2b:fb:a5:28:73:8e:9b:b9:ca:ac:
         ac:c4:01:96:76:7e:9c:fb:18:9f:92:d4:a4:a4:28:26:06:e9:
         99:7f:0e:c1:40:ec:e7:f3:f0:35:74:f5:57:86:7c:e4:de:ca:
         5e:61:5f:87:b1:8c:00:6e:55:43:39:30:99:8a:4c:0e:da:a7:
         ce:10:e6:96:17:c7:b8:f5:ec:74:c0:2c:69:47:3f:54:ae:f4:
         f6:78:b6:a8:a8:1e:6f:ea:4c:f0:3c:d4:6a:52:d6:f7:9b:e8:
         90:3c:0a:dd:81:9d:da:9a:83:e1:3e:6a:fb:7c:55:7e:13:25:
         c8:ac:cf:fd:a4:02:b7:a4:e3:c4:fe:de:1b:73:71:7a:6c:82:
         a6:9c:f1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 05:32:57 2025 by rpki-client