Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft
File:                     gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft (raw, json)
Hash identifier:          T3FSDwEun9S+CxEzNWtmhctxSYyuS0CW832F+irHxV4=
Subject key identifier:   DD:62:A6:BE:3E:2F:11:89:37:96:CB:45:53:25:70:6C:C7:E6:E2:0F
Authority key identifier: 80:05:36:27:8B:DF:A4:59:9F:E0:66:67:27:0C:57:D4:85:68:05:F1
Certificate issuer:       /CN=800536278BDFA4599FE06667270C57D4856805F1
Certificate serial:       0D41
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gAU2J4vfpFmf4GZnJwxX1IVoBfE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft
Manifest number:          0D41
Signing time:             Thu 05 Jun 2025 16:44:55 +0000
Manifest this update:     Thu 05 Jun 2025 16:44:55 +0000
Manifest next update:     Thu 05 Jun 2025 22:44:55 +0000
Files and hashes:         1: gAU2J4vfpFmf4GZnJwxX1IVoBfE.crl (hash: 6KWeSbpSVjB3+c1UMm/22TTgvb3P6fJHRnpM/Nx1cjM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3393 (0xd41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=800536278BDFA4599FE06667270C57D4856805F1
        Validity
            Not Before: Jun  5 16:44:55 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=DD62A6BE3E2F11893796CB455325706CC7E6E20F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f3:a8:ff:f6:9c:9d:87:48:ca:a9:48:dd:72:
                    c7:f5:e6:f4:45:8b:25:5e:8d:ab:f7:f7:db:fd:bd:
                    d0:b3:43:09:01:46:d1:da:78:31:e1:c0:ab:16:7c:
                    a6:ad:67:65:11:fe:38:06:ba:fc:ea:2c:ce:e3:74:
                    dd:9f:29:c6:45:36:2d:f7:bb:56:c3:bd:a1:04:aa:
                    14:ba:34:68:a7:68:d4:8b:fc:af:83:89:07:d5:32:
                    42:33:c3:78:f3:80:7c:c0:f7:85:88:ba:b7:42:5f:
                    15:84:0f:4a:0a:75:5c:d1:cb:08:14:47:a6:ab:8c:
                    e6:93:ce:ed:30:cd:02:df:4c:bd:fd:a9:a5:c4:5e:
                    ba:51:22:4d:6b:6c:f6:06:f7:73:b5:ed:e3:9f:a9:
                    bc:27:a5:a0:f9:3f:36:b5:4c:cd:50:a6:61:c1:0d:
                    1f:17:75:db:0b:e4:58:bd:33:13:97:08:77:12:f1:
                    c4:d4:76:94:d5:e8:7a:b0:39:cb:1d:4a:c2:c3:f4:
                    1b:30:20:6f:b6:1a:92:89:56:7b:cc:b7:7a:4f:47:
                    4c:b7:a3:3e:bd:d5:2a:75:45:07:ba:92:59:d6:14:
                    11:d5:ec:bc:4d:e7:0c:26:21:1b:cc:0f:53:d4:25:
                    e2:28:5b:cd:a3:83:c6:51:1b:2a:d3:97:ad:6d:b1:
                    4b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:62:A6:BE:3E:2F:11:89:37:96:CB:45:53:25:70:6C:C7:E6:E2:0F
            X509v3 Authority Key Identifier:
                keyid:80:05:36:27:8B:DF:A4:59:9F:E0:66:67:27:0C:57:D4:85:68:05:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gAU2J4vfpFmf4GZnJwxX1IVoBfE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:10:a6:ef:b9:38:99:ff:17:df:1d:95:8a:b3:30:68:16:aa:
         7e:7b:be:34:52:b4:15:b1:85:21:03:75:91:4d:8a:ef:78:64:
         7a:62:07:ce:d5:5b:e9:25:5f:f6:e1:0f:99:81:ec:5d:13:46:
         49:eb:db:39:4e:0a:d2:09:c6:f8:02:d2:4a:6a:d1:02:d1:8d:
         64:1c:da:a3:cb:e7:36:1c:da:bc:c7:3f:e2:8e:0e:68:28:90:
         d5:e8:0b:66:15:4d:46:a8:42:4d:70:7d:bb:c9:29:77:fd:76:
         e5:1d:ef:11:fd:f7:22:aa:c6:63:c8:1f:07:0a:ca:7b:e5:59:
         9c:59:58:d4:f7:95:07:b3:a8:8b:f6:4f:99:dd:ed:af:59:4a:
         c9:27:ae:4a:d4:77:a0:bc:b7:8c:4a:83:5f:6e:8e:15:d2:85:
         7d:74:49:8d:7b:05:d3:98:92:2a:6e:31:a1:ec:8d:2e:3f:87:
         6a:e1:5c:4b:fa:b9:c5:11:3c:4b:35:b6:c9:10:bb:f9:30:82:
         de:d3:ef:79:13:c2:f5:7c:6b:48:2b:91:67:c2:e7:0f:20:23:
         95:d8:af:e3:1c:46:ba:17:62:53:be:1d:98:66:a7:c1:8e:c3:
         37:1f:47:b7:a5:b1:f5:ae:29:47:bb:fb:15:0a:d2:40:03:7e:
         70:f4:da:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:10:16 2025 by rpki-client