Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft
File:                     _APy-Wb2K_3GawQVYum6QAMtoJ4.mft (raw, json)
Hash identifier:          jYNXuKcpkI6XoLd6VYtflkbnn6JRRDUtXR32iyuA8Og=
Subject key identifier:   6B:BB:76:49:DC:D7:DA:21:A0:7D:B3:A6:1B:5E:61:60:4A:AD:14:99
Authority key identifier: FC:03:F2:F9:66:F6:2B:FD:C6:6B:04:15:62:E9:BA:40:03:2D:A0:9E
Certificate issuer:       /CN=FC03F2F966F62BFDC66B041562E9BA40032DA09E
Certificate serial:       1EAE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_APy-Wb2K_3GawQVYum6QAMtoJ4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft
Manifest number:          1EA8
Signing time:             Fri 04 Apr 2025 19:05:35 +0000
Manifest this update:     Fri 04 Apr 2025 19:05:35 +0000
Manifest next update:     Sat 05 Apr 2025 01:05:35 +0000
Files and hashes:         1: _APy-Wb2K_3GawQVYum6QAMtoJ4.crl (hash: lf5hn9IGgNa7DVPV8yoOzZH7eEyi6n1ItJnQocD2LeY=)
                          2: uKdWCaEnVONu4fZr7N9srVNLqMU.roa (hash: bLAMgiyp/+z7wYa7NqzIhJJBnnzmKA4F9e4V4dRy4g4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7854 (0x1eae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC03F2F966F62BFDC66B041562E9BA40032DA09E
        Validity
            Not Before: Apr  4 19:05:35 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=6BBB7649DCD7DA21A07DB3A61B5E61604AAD1499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:1f:a3:40:9e:ad:bd:4a:db:7b:e9:45:00:
                    93:7e:81:b8:fe:f0:3b:18:64:0f:5d:24:a9:3e:c5:
                    e4:6f:72:06:04:ed:37:4e:0c:3f:10:7e:d7:6a:9e:
                    c3:c7:89:4e:82:d5:e2:bf:58:b0:12:e4:c9:4e:af:
                    e8:db:b5:fa:af:bc:47:f8:d9:ec:22:38:41:0d:ca:
                    65:97:c4:af:04:8b:30:54:a8:ce:63:4d:f5:74:cb:
                    77:7a:1b:ae:b7:11:38:8c:a4:80:70:4c:61:4f:38:
                    b3:07:03:91:9f:97:d9:83:ac:4d:e3:38:7e:99:11:
                    6c:2e:09:ba:c0:05:a6:43:7c:77:65:a9:78:05:63:
                    a2:83:88:9c:4f:4d:a3:aa:92:e0:5c:64:a4:2a:37:
                    c5:2f:60:cf:58:7a:92:01:ac:c4:18:37:13:4f:ba:
                    3e:5e:63:8e:aa:1d:2b:dc:83:74:24:df:4b:e6:cf:
                    60:ae:6b:64:f7:f0:45:b2:9d:b1:10:5c:89:78:a7:
                    f6:6b:f9:78:08:2e:06:e7:fa:8e:17:3c:5c:ac:1e:
                    99:1b:a4:cf:0b:6a:18:e5:a7:c7:72:0a:32:9c:e5:
                    ef:e6:cd:1b:b1:71:5b:2f:7c:ea:a7:bf:d3:0d:a1:
                    37:cd:b6:f0:8e:f4:0b:eb:8b:a5:f6:0e:59:34:5a:
                    30:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BB:76:49:DC:D7:DA:21:A0:7D:B3:A6:1B:5E:61:60:4A:AD:14:99
            X509v3 Authority Key Identifier:
                keyid:FC:03:F2:F9:66:F6:2B:FD:C6:6B:04:15:62:E9:BA:40:03:2D:A0:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_APy-Wb2K_3GawQVYum6QAMtoJ4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:e0:5e:10:14:c5:93:d5:8f:63:ed:28:d3:56:ed:75:46:94:
         c3:b1:f2:f4:ed:46:2e:22:e7:fc:5c:9b:d2:b8:1e:b4:cf:e3:
         08:fa:8c:76:24:92:7e:17:55:14:26:31:46:93:8c:2e:4e:49:
         4c:7b:36:49:2d:0e:ed:68:a3:3e:3e:7f:86:af:9c:9a:08:e4:
         1f:b8:e9:39:68:bf:f9:f0:1c:d9:ed:87:c1:2b:84:db:34:0b:
         7f:d5:7c:ca:e7:f4:64:e4:b1:9d:92:fd:36:21:11:cc:89:6a:
         4b:b3:64:16:fb:20:b0:70:b4:8e:c1:7f:70:a4:b8:6d:a2:45:
         2f:18:76:93:81:a6:6a:f6:6c:ac:7f:85:8d:49:01:fd:5f:a8:
         97:c2:ff:cd:fa:60:81:97:94:cc:3a:3f:d4:f1:42:c1:68:09:
         91:3f:24:7d:6c:7b:4e:e5:7a:ab:3d:65:54:fc:ae:a4:42:87:
         7e:d7:8a:08:90:d4:40:a9:ea:52:72:82:29:d5:b1:22:49:24:
         dc:74:bc:37:ec:50:dd:90:75:5c:2e:15:64:0e:c5:68:a5:3b:
         f3:c3:a0:c9:64:39:1d:a5:5e:eb:b1:75:50:d3:26:1e:92:78:
         a0:f0:80:f9:82:22:d8:64:6b:1b:51:46:aa:d4:7e:28:d6:b0:
         75:cd:41:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:35 2025 by rpki-client