Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft
File:                     gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft (raw, json)
Hash identifier:          7SSfPOi7xkTpqqYeJgfeGl8skeBqGHnCtlGUJc+vbu8=
Subject key identifier:   DD:62:A6:BE:3E:2F:11:89:37:96:CB:45:53:25:70:6C:C7:E6:E2:0F
Authority key identifier: 80:05:36:27:8B:DF:A4:59:9F:E0:66:67:27:0C:57:D4:85:68:05:F1
Certificate issuer:       /CN=800536278BDFA4599FE06667270C57D4856805F1
Certificate serial:       0C10
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gAU2J4vfpFmf4GZnJwxX1IVoBfE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft
Manifest number:          0C10
Signing time:             Fri 04 Apr 2025 19:10:35 +0000
Manifest this update:     Fri 04 Apr 2025 19:10:35 +0000
Manifest next update:     Sat 05 Apr 2025 01:10:35 +0000
Files and hashes:         1: gAU2J4vfpFmf4GZnJwxX1IVoBfE.crl (hash: Hm/IV9wpk4BEjaGGr5VIInLsPXv7q3EimAPO2LcrDPc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3088 (0xc10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=800536278BDFA4599FE06667270C57D4856805F1
        Validity
            Not Before: Apr  4 19:10:35 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=DD62A6BE3E2F11893796CB455325706CC7E6E20F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f3:a8:ff:f6:9c:9d:87:48:ca:a9:48:dd:72:
                    c7:f5:e6:f4:45:8b:25:5e:8d:ab:f7:f7:db:fd:bd:
                    d0:b3:43:09:01:46:d1:da:78:31:e1:c0:ab:16:7c:
                    a6:ad:67:65:11:fe:38:06:ba:fc:ea:2c:ce:e3:74:
                    dd:9f:29:c6:45:36:2d:f7:bb:56:c3:bd:a1:04:aa:
                    14:ba:34:68:a7:68:d4:8b:fc:af:83:89:07:d5:32:
                    42:33:c3:78:f3:80:7c:c0:f7:85:88:ba:b7:42:5f:
                    15:84:0f:4a:0a:75:5c:d1:cb:08:14:47:a6:ab:8c:
                    e6:93:ce:ed:30:cd:02:df:4c:bd:fd:a9:a5:c4:5e:
                    ba:51:22:4d:6b:6c:f6:06:f7:73:b5:ed:e3:9f:a9:
                    bc:27:a5:a0:f9:3f:36:b5:4c:cd:50:a6:61:c1:0d:
                    1f:17:75:db:0b:e4:58:bd:33:13:97:08:77:12:f1:
                    c4:d4:76:94:d5:e8:7a:b0:39:cb:1d:4a:c2:c3:f4:
                    1b:30:20:6f:b6:1a:92:89:56:7b:cc:b7:7a:4f:47:
                    4c:b7:a3:3e:bd:d5:2a:75:45:07:ba:92:59:d6:14:
                    11:d5:ec:bc:4d:e7:0c:26:21:1b:cc:0f:53:d4:25:
                    e2:28:5b:cd:a3:83:c6:51:1b:2a:d3:97:ad:6d:b1:
                    4b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:62:A6:BE:3E:2F:11:89:37:96:CB:45:53:25:70:6C:C7:E6:E2:0F
            X509v3 Authority Key Identifier:
                keyid:80:05:36:27:8B:DF:A4:59:9F:E0:66:67:27:0C:57:D4:85:68:05:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gAU2J4vfpFmf4GZnJwxX1IVoBfE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:91:18:40:c4:3c:f9:78:e7:99:41:37:64:3f:43:ae:b3:f7:
         cc:ba:67:36:69:be:a7:86:b4:d6:5c:84:04:23:5d:a5:83:a4:
         94:ea:76:2b:53:dc:28:89:17:5c:ce:60:2d:82:a7:36:48:0f:
         48:ae:2a:38:d1:03:e3:70:68:c6:ab:bc:fe:a4:a4:4d:53:fe:
         e0:64:98:73:10:b5:29:f5:88:47:0b:05:ac:6e:87:f6:78:7e:
         df:ca:ff:b6:71:83:6b:03:d5:20:c5:cf:2e:4d:3e:ca:ac:ae:
         f0:6b:10:7f:96:a1:d0:77:54:40:d0:8b:9b:cf:03:65:a9:f8:
         fa:db:20:7d:bd:d4:1a:8a:64:ef:24:91:07:19:cd:86:44:ec:
         c6:9c:3b:d4:1e:8a:77:fa:2f:cb:f0:63:5d:b8:ae:68:12:56:
         0a:de:1c:06:3a:4a:c3:5f:4d:6d:29:a4:c1:1f:af:1d:ec:ae:
         07:a7:5b:d0:24:83:f4:7b:a3:1f:1a:6b:1c:01:43:28:1d:65:
         af:1b:c5:57:ee:89:1b:2d:97:61:fd:69:de:f1:e9:f3:b3:2f:
         cf:84:c3:f3:ec:e2:05:56:4c:be:0d:e8:ba:8b:44:96:27:f1:
         ac:c4:d8:a1:c7:1a:7c:89:81:6f:99:62:e0:d1:b6:ef:86:7e:
         9f:b7:9f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:40:02 2025 by rpki-client