Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3145/33lDthlXGcWMANEetBElEP3_nJM.mft
File:                     33lDthlXGcWMANEetBElEP3_nJM.mft (raw, json)
Hash identifier:          2EtwveE5msLI/RBfvMNTPSSjkCTu7hsYtFSS95bhJ98=
Subject key identifier:   14:C5:A4:3B:E8:00:35:45:6D:B1:AA:EF:F7:5F:BD:3F:19:4D:C3:D2
Authority key identifier: DF:79:43:B6:19:57:19:C5:8C:00:D1:1E:B4:11:25:10:FD:FF:9C:93
Certificate issuer:       /CN=DF7943B6195719C58C00D11EB4112510FDFF9C93
Certificate serial:       14B6
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33lDthlXGcWMANEetBElEP3_nJM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/33lDthlXGcWMANEetBElEP3_nJM.mft
Manifest number:          14B6
Signing time:             Fri 21 Mar 2025 01:26:56 +0000
Manifest this update:     Fri 21 Mar 2025 01:26:56 +0000
Manifest next update:     Fri 21 Mar 2025 07:26:56 +0000
Files and hashes:         1: 33lDthlXGcWMANEetBElEP3_nJM.crl (hash: pHgFvimgJyxpvh1o30hUfQlvYODN0gNqSKIca3mB8Ho=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5302 (0x14b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF7943B6195719C58C00D11EB4112510FDFF9C93
        Validity
            Not Before: Mar 21 01:26:56 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=14C5A43BE80035456DB1AAEFF75FBD3F194DC3D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:75:6c:5a:64:c2:5c:22:d7:fb:f4:44:fa:
                    51:1c:bd:6d:1c:35:5c:6f:94:89:51:c0:d0:8d:8d:
                    0c:0a:1d:a6:dd:84:77:5a:16:2a:9b:3b:d6:15:b4:
                    9c:a8:28:66:2f:fb:16:b9:2e:82:ab:3f:64:f0:d5:
                    fa:d7:b4:4c:3a:60:91:eb:88:c0:c5:54:06:03:c6:
                    23:f3:46:ac:fa:57:86:e4:91:35:80:6e:04:3e:08:
                    7d:ff:34:24:61:95:87:e5:26:07:e8:29:05:38:46:
                    32:b7:88:bb:10:12:c3:30:c7:1b:f5:77:38:a2:6f:
                    87:48:44:1e:03:95:48:68:e6:5a:91:36:13:c8:1e:
                    56:68:2d:5f:bb:a3:27:5d:c2:b6:08:68:ba:29:c1:
                    ca:04:26:2e:0e:11:5a:eb:e2:de:07:d9:68:c0:8f:
                    fe:4b:8c:82:df:b2:f1:1c:d8:4c:df:bd:4d:df:6b:
                    9d:da:11:47:ff:03:e1:4b:d0:60:13:3e:cf:dc:fe:
                    57:e9:9b:be:7b:57:89:c5:97:c9:2c:87:75:80:66:
                    45:78:34:d1:0c:f2:19:e0:5a:10:a0:a7:63:e1:24:
                    95:ce:c6:8f:af:5c:dc:99:92:76:23:10:3b:bf:4c:
                    f6:fd:13:b0:8c:8a:ab:1d:49:8c:e6:14:33:51:c1:
                    ff:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C5:A4:3B:E8:00:35:45:6D:B1:AA:EF:F7:5F:BD:3F:19:4D:C3:D2
            X509v3 Authority Key Identifier:
                keyid:DF:79:43:B6:19:57:19:C5:8C:00:D1:1E:B4:11:25:10:FD:FF:9C:93

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/33lDthlXGcWMANEetBElEP3_nJM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33lDthlXGcWMANEetBElEP3_nJM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/33lDthlXGcWMANEetBElEP3_nJM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:33:54:0c:4a:af:b9:8b:84:14:1f:9d:7c:99:c3:d4:10:14:
         cd:e5:51:69:7d:f9:ec:1b:c5:12:ad:11:cc:2b:2a:17:6e:11:
         66:d9:e3:30:32:e2:43:bf:a8:e2:b0:18:50:d5:d9:2a:ac:74:
         9a:47:11:a7:e3:bf:3a:8c:7b:97:63:59:65:f3:22:96:7a:c8:
         d4:bb:83:71:03:fb:dc:22:df:e4:ce:bc:a8:79:3c:87:e0:ad:
         03:51:4b:17:b1:3b:bf:23:42:bd:98:8d:ba:d7:33:09:d3:7a:
         95:5a:36:d7:d4:7b:f7:c1:da:cc:3a:43:11:ae:87:4d:c8:9f:
         ef:67:61:2c:9f:d8:4d:cc:ad:17:8d:9a:54:b6:b7:a7:c4:74:
         bd:2c:b4:b4:45:c2:d1:1d:39:c8:55:01:e5:b3:33:51:ac:2d:
         28:28:5c:01:2e:45:b9:6a:6a:d7:51:ee:2b:61:11:a5:0f:0f:
         49:da:28:a8:54:fe:26:89:70:7c:ff:48:10:7d:34:52:8d:91:
         7e:8b:7d:1e:37:8f:ff:8c:59:0d:b6:37:5a:92:71:71:73:b1:
         d5:2a:d7:8b:50:a7:ff:7b:68:ba:2f:a4:e6:9a:6c:d0:02:f1:
         d4:80:bd:68:75:5a:c8:a1:82:75:b6:93:12:f6:20:10:8a:60:
         0f:04:92:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:35:09 2025 by rpki-client