Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3079/DPuANxoj3_3UCHqi5YyNldPvLjQ.mft
File:                     DPuANxoj3_3UCHqi5YyNldPvLjQ.mft (raw, json)
Hash identifier:          rq2csmFw5jTW4lmAImAn7i2Xx52qgoxe6r+VZDdeY98=
Subject key identifier:   8F:44:5C:DE:2C:1D:AB:D6:7A:A1:D0:4A:D7:93:15:1A:73:5A:73:60
Authority key identifier: 0C:FB:80:37:1A:23:DF:FD:D4:08:7A:A2:E5:8C:8D:95:D3:EF:2E:34
Certificate issuer:       /CN=0CFB80371A23DFFDD4087AA2E58C8D95D3EF2E34
Certificate serial:       182E
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DPuANxoj3_3UCHqi5YyNldPvLjQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3079/DPuANxoj3_3UCHqi5YyNldPvLjQ.mft
Manifest number:          1828
Signing time:             Tue 18 Mar 2025 19:31:52 +0000
Manifest this update:     Tue 18 Mar 2025 19:31:52 +0000
Manifest next update:     Wed 19 Mar 2025 01:31:52 +0000
Files and hashes:         1: DPuANxoj3_3UCHqi5YyNldPvLjQ.crl (hash: er4l4DPh8QmDjeQ1+8OFvu8Hw1GYNliBWByAibNHD1U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6190 (0x182e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CFB80371A23DFFDD4087AA2E58C8D95D3EF2E34
        Validity
            Not Before: Mar 18 19:31:52 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=8F445CDE2C1DABD67AA1D04AD793151A735A7360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a5:24:91:7d:38:81:07:b2:63:7c:a2:6f:12:
                    fe:72:2f:e1:c0:2a:76:4b:3f:7f:5f:0e:d3:72:e0:
                    70:07:c4:52:a1:3c:96:59:c3:6a:1c:57:94:89:06:
                    e9:e0:9d:b3:e3:04:f8:2b:01:e0:3d:8f:28:65:fd:
                    da:cb:9b:8d:66:a0:ab:3e:b6:69:65:65:1d:77:76:
                    ec:81:80:5c:0f:c2:ef:f4:7d:b8:1e:78:1c:53:fc:
                    30:52:d3:70:c0:e1:cd:19:cb:d3:0e:87:af:13:44:
                    b0:70:39:7d:a9:dd:51:d5:13:20:b7:e5:06:e9:d6:
                    08:b7:55:e9:ea:a2:86:1c:b5:ff:8a:49:98:80:6a:
                    cf:74:43:58:45:c9:db:28:7e:0d:94:63:d8:74:aa:
                    1a:82:33:89:ab:5d:1b:f3:71:96:b9:36:91:f9:7a:
                    3f:1e:04:63:e3:30:03:31:63:30:67:a4:d0:9e:9d:
                    99:d4:3e:72:a9:4d:4c:34:0d:7d:ba:f3:47:ef:a5:
                    84:0b:8d:58:a3:c0:84:80:ad:bb:bb:1b:6f:ff:11:
                    c4:75:a2:a3:6b:b1:f2:10:bd:f0:fd:02:3c:95:92:
                    bf:03:06:68:90:57:cf:33:11:fd:57:26:2d:e2:be:
                    15:77:bb:5d:3c:d4:9e:77:45:d0:43:11:9d:3b:c1:
                    67:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:44:5C:DE:2C:1D:AB:D6:7A:A1:D0:4A:D7:93:15:1A:73:5A:73:60
            X509v3 Authority Key Identifier:
                keyid:0C:FB:80:37:1A:23:DF:FD:D4:08:7A:A2:E5:8C:8D:95:D3:EF:2E:34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3079/DPuANxoj3_3UCHqi5YyNldPvLjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DPuANxoj3_3UCHqi5YyNldPvLjQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3079/DPuANxoj3_3UCHqi5YyNldPvLjQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c4:a0:bc:6f:2c:3e:e3:9d:b2:f6:2b:c8:52:68:7b:9b:eb:
         00:c2:7b:1e:d3:e8:f8:ca:da:94:ef:8d:c2:66:d7:d5:9d:c9:
         df:10:4d:4a:94:b8:0f:13:06:72:e5:00:4f:b4:84:95:f2:fb:
         5c:ff:be:dd:78:f6:83:f0:67:14:d8:1d:67:e2:f4:5d:f3:4c:
         46:7f:2c:13:1e:2b:a9:b9:f8:78:ab:09:e1:7d:58:1b:41:79:
         a3:37:7c:e0:68:93:2c:4a:54:2c:10:db:18:00:e8:74:48:6b:
         9f:10:ae:31:39:07:46:d1:e3:6f:6d:53:9a:0c:45:66:cd:e3:
         f5:04:80:17:e3:03:b1:3b:8b:62:00:3b:ed:69:7d:4d:d9:9b:
         45:79:49:0c:46:1b:ee:18:99:5e:76:02:59:45:02:76:37:e5:
         fa:c8:4e:43:04:0d:6e:75:4b:97:ac:ac:c1:0d:b4:26:1f:73:
         b4:74:0a:4f:e8:b3:05:43:38:6a:4f:00:fa:a6:ed:76:c9:12:
         b9:0d:40:89:c2:42:16:cf:f9:a0:9a:1e:a3:ab:75:f7:72:f0:
         ea:15:ed:a1:5f:2a:2a:32:63:bf:22:14:2f:90:37:2d:fa:39:
         6c:80:cf:30:32:be:4e:dd:a1:8a:5c:55:be:8d:aa:9c:8e:d0:
         9f:41:3e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:40 2025 by rpki-client