Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3177/VZPMkzM9chHxN7wfzRxXcSWoWyo.mft
File:                     VZPMkzM9chHxN7wfzRxXcSWoWyo.mft (raw, json)
Hash identifier:          ILvfznr14ga2/vQwLoFpymc7lEsozJsJGOR5qjDI6EE=
Subject key identifier:   4F:6C:2F:9A:ED:87:CF:69:8D:7A:74:22:C8:39:68:FD:E5:1B:DE:81
Authority key identifier: 55:93:CC:93:33:3D:72:11:F1:37:BC:1F:CD:1C:57:71:25:A8:5B:2A
Certificate issuer:       /CN=5593CC93333D7211F137BC1FCD1C577125A85B2A
Certificate serial:       0FAC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VZPMkzM9chHxN7wfzRxXcSWoWyo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3177/VZPMkzM9chHxN7wfzRxXcSWoWyo.mft
Manifest number:          0FAC
Signing time:             Sat 29 Mar 2025 10:28:20 +0000
Manifest this update:     Sat 29 Mar 2025 10:28:20 +0000
Manifest next update:     Sat 29 Mar 2025 16:28:20 +0000
Files and hashes:         1: VZPMkzM9chHxN7wfzRxXcSWoWyo.crl (hash: KrLSyoHIUkkEJydECzc8Br/Xg/UgR38xp95SBwPZM7w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4012 (0xfac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5593CC93333D7211F137BC1FCD1C577125A85B2A
        Validity
            Not Before: Mar 29 10:28:20 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=4F6C2F9AED87CF698D7A7422C83968FDE51BDE81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3f:a9:20:26:87:f8:1e:64:24:e6:e4:f4:bb:
                    8f:3b:3c:24:c4:0a:1c:06:10:9f:1b:dd:f0:99:99:
                    cc:28:d2:3c:94:ad:05:f2:2f:16:47:12:9b:10:c5:
                    70:3a:7f:f0:f5:d6:c9:df:89:cd:23:fe:1a:67:4d:
                    d1:77:8f:52:2e:86:02:39:b7:9f:73:c1:59:a4:6b:
                    da:ab:f8:9a:5c:aa:fa:51:97:79:ae:01:83:82:95:
                    f7:c9:99:8e:1d:f3:15:4d:9b:c5:64:95:76:93:86:
                    0a:e1:60:a3:04:6d:38:be:68:c8:e8:23:a8:38:dd:
                    9a:ba:dd:c3:45:c3:ea:c4:4f:6f:b6:b3:af:20:fe:
                    b5:ac:ac:a9:b4:ed:fe:ad:c3:b2:8c:fc:79:64:70:
                    78:e6:43:71:2e:b8:31:55:a4:d6:3b:e9:70:fd:64:
                    3d:ea:e3:5d:b8:4f:8b:bb:b7:6f:bf:90:70:56:53:
                    e4:6a:38:85:db:03:9b:24:6e:ce:9a:d9:61:cc:f5:
                    5b:53:27:50:75:ed:76:97:38:36:26:d1:3d:03:12:
                    93:35:9c:f9:ee:df:17:3a:ee:92:cc:10:90:91:48:
                    d8:d4:95:0a:a4:22:2b:06:1e:4a:70:80:d6:33:7a:
                    fc:4a:0e:b1:0b:41:a4:e5:17:85:31:d6:bd:2d:75:
                    41:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6C:2F:9A:ED:87:CF:69:8D:7A:74:22:C8:39:68:FD:E5:1B:DE:81
            X509v3 Authority Key Identifier:
                keyid:55:93:CC:93:33:3D:72:11:F1:37:BC:1F:CD:1C:57:71:25:A8:5B:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3177/VZPMkzM9chHxN7wfzRxXcSWoWyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VZPMkzM9chHxN7wfzRxXcSWoWyo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3177/VZPMkzM9chHxN7wfzRxXcSWoWyo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:16:f4:4a:bc:db:86:84:d5:18:1e:a8:de:ba:3d:20:b3:5a:
         5d:e7:71:ed:52:d2:61:91:67:25:5e:45:ed:f7:fa:8f:d1:a8:
         ea:90:20:84:59:2b:8f:a1:da:5b:b6:f9:2d:07:20:23:f7:cd:
         2c:68:c7:c0:fc:5d:db:ca:8f:2f:b4:27:e5:67:a1:1e:eb:4a:
         10:54:35:9c:dc:6c:e2:9a:b4:de:83:e3:a0:e5:3e:88:9e:8c:
         60:44:21:77:dc:32:78:9e:a9:c1:27:15:18:1d:0a:74:d6:c6:
         df:0b:14:c1:37:47:31:cb:ef:8a:b8:01:28:9f:85:9a:7b:f5:
         4a:8e:6a:bc:bb:11:4d:ee:86:72:47:2c:c7:18:16:c8:5f:32:
         17:db:bb:5a:31:b6:7f:e9:a3:b5:1a:74:e6:b1:ef:93:f3:61:
         6e:cf:f2:b2:3e:04:15:54:fa:31:29:b7:35:51:de:49:aa:9d:
         68:9f:3e:e7:1f:a7:76:e3:e8:a5:65:fd:3b:f4:13:90:c1:43:
         58:fc:d9:e9:91:74:c7:58:72:c8:c3:94:8e:6d:e5:a9:3d:3a:
         65:04:cb:ce:08:68:62:f9:28:c4:e7:92:8e:ff:4b:fb:1d:40:
         4b:e6:36:00:28:87:89:4d:63:2f:d0:26:ed:73:a0:9e:bb:88:
         8b:0c:10:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:01 2025 by rpki-client