Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3213/VLX_ts-oeeTrWK4gq9ls2cvgcnA.mft
File:                     VLX_ts-oeeTrWK4gq9ls2cvgcnA.mft (raw, json)
Hash identifier:          S29y9g68BXUvzDFJrlpKFBkP3boExNtK4lir6ZDz/Ko=
Subject key identifier:   40:4E:96:EF:91:DC:32:5C:65:65:CD:57:4A:D7:17:9D:6F:D8:F9:46
Authority key identifier: 54:B5:FF:B6:CF:A8:79:E4:EB:58:AE:20:AB:D9:6C:D9:CB:E0:72:70
Certificate issuer:       /CN=54B5FFB6CFA879E4EB58AE20ABD96CD9CBE07270
Certificate serial:       0DA7
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VLX_ts-oeeTrWK4gq9ls2cvgcnA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/VLX_ts-oeeTrWK4gq9ls2cvgcnA.mft
Manifest number:          0DA7
Signing time:             Sat 29 Mar 2025 10:28:47 +0000
Manifest this update:     Sat 29 Mar 2025 10:28:47 +0000
Manifest next update:     Sat 29 Mar 2025 16:28:47 +0000
Files and hashes:         1: VLX_ts-oeeTrWK4gq9ls2cvgcnA.crl (hash: dDgdx+Miom/9QzQ8IYRQWn6N9eJcNQfOPnY/dhE46MY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3495 (0xda7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B5FFB6CFA879E4EB58AE20ABD96CD9CBE07270
        Validity
            Not Before: Mar 29 10:28:47 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=404E96EF91DC325C6565CD574AD7179D6FD8F946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:39:1f:a4:a4:d2:1b:73:9f:cf:8e:6d:33:7b:
                    4c:b0:c5:3e:44:c6:89:d8:a9:0d:0f:fa:a4:47:c5:
                    dd:3b:de:db:51:dc:a4:35:31:aa:0c:38:36:40:8b:
                    bf:19:48:33:fb:86:fc:65:c7:c3:27:51:9e:58:6e:
                    5c:f2:c7:f2:42:78:13:06:77:65:1a:93:62:a7:33:
                    0b:b0:b1:73:6e:ae:89:59:ae:dc:ee:31:90:2b:17:
                    dd:ab:0c:ca:3e:af:c3:65:66:56:07:c6:e1:08:27:
                    50:36:10:21:cb:fb:36:f1:26:8d:5f:c4:c9:32:0e:
                    0d:cb:f5:99:f5:0b:e3:88:d7:c7:e7:2a:21:d6:f2:
                    ce:44:8e:20:e5:39:39:c0:3c:7e:32:84:07:41:4d:
                    44:ff:d1:19:c5:52:5c:71:15:a3:de:4b:fe:ff:74:
                    6b:e1:74:b6:83:e4:ff:68:48:99:37:01:a3:90:cb:
                    6f:b7:9d:c7:58:8d:19:79:7b:c8:43:3e:f6:b0:0c:
                    40:56:e5:5d:c3:ed:9b:f9:d5:33:61:72:d0:40:2b:
                    74:2f:36:a2:47:65:cb:85:90:71:a7:17:49:04:49:
                    e9:45:d2:0f:02:85:5e:44:45:3d:26:15:05:1b:e5:
                    90:e5:b9:8f:c1:a8:49:60:23:77:7c:9c:c1:83:a5:
                    19:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4E:96:EF:91:DC:32:5C:65:65:CD:57:4A:D7:17:9D:6F:D8:F9:46
            X509v3 Authority Key Identifier:
                keyid:54:B5:FF:B6:CF:A8:79:E4:EB:58:AE:20:AB:D9:6C:D9:CB:E0:72:70

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/VLX_ts-oeeTrWK4gq9ls2cvgcnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VLX_ts-oeeTrWK4gq9ls2cvgcnA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/VLX_ts-oeeTrWK4gq9ls2cvgcnA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:df:18:c9:f8:13:be:8b:3e:41:48:b9:82:60:da:71:ee:c3:
         09:0f:69:35:3e:2e:31:dd:da:6a:d2:09:bd:f4:4b:61:16:ef:
         df:b4:50:60:08:cb:e0:e1:27:2d:d6:26:29:05:1d:b3:0b:9d:
         08:55:a0:78:ad:fd:d4:1c:72:e3:7e:8c:58:df:23:ad:76:c1:
         60:7a:cf:74:13:c5:11:9c:f7:4a:f9:ab:02:9a:ed:b3:5b:c1:
         c5:b2:af:87:8d:88:c8:af:e8:2a:c9:e4:f9:19:e2:b1:26:03:
         4f:7f:f1:c0:c0:d8:8b:53:b2:a5:9b:70:73:42:e4:73:1b:8f:
         f0:3a:2e:39:48:13:80:88:8e:a8:d5:a5:ce:c3:52:9b:8e:67:
         96:e6:9d:54:b7:ce:0d:e9:25:38:35:b7:35:31:f2:fa:06:4c:
         ae:96:7d:52:10:86:4b:36:87:c8:27:53:f7:e9:de:13:e1:a0:
         d7:e7:99:96:aa:01:85:e0:a0:37:1b:cf:18:6f:49:da:bf:a0:
         59:e4:0c:fe:17:0d:5f:21:59:10:d0:38:6e:8c:0c:49:a5:56:
         dc:4f:98:39:90:fd:3c:39:69:5e:fc:23:02:af:ba:32:b4:0c:
         45:54:9d:b6:48:9f:dc:9e:20:34:62:b0:64:28:71:91:db:3b:
         d1:61:6c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:29:25 2025 by rpki-client