Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3269/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.mft
File:                     WCQO-Tq-mV-XYbQhUzb_qpcFnqc.mft (raw, json)
Hash identifier:          36yIXeWnUA374Y1Bnn3lgJ74fL2wk0jK8ZcDgMG3p9Y=
Subject key identifier:   58:89:77:2F:20:9A:16:EE:13:8C:78:F5:75:71:7F:7A:4B:6B:47:43
Authority key identifier: 58:24:0E:F9:3A:BE:99:5F:97:61:B4:21:53:36:FF:AA:97:05:9E:A7
Certificate issuer:       /CN=58240EF93ABE995F9761B4215336FFAA97059EA7
Certificate serial:       0757
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.mft
Manifest number:          0757
Signing time:             Fri 21 Mar 2025 00:31:02 +0000
Manifest this update:     Fri 21 Mar 2025 00:31:02 +0000
Manifest next update:     Fri 21 Mar 2025 06:31:02 +0000
Files and hashes:         1: WCQO-Tq-mV-XYbQhUzb_qpcFnqc.crl (hash: bOGte/Oul+CKh/1CKoODWWlSncN+MKUjXiHYJfW+5Zo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1879 (0x757)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58240EF93ABE995F9761B4215336FFAA97059EA7
        Validity
            Not Before: Mar 21 00:31:02 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=5889772F209A16EE138C78F575717F7A4B6B4743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:3c:7c:92:20:65:7d:db:8c:fb:8c:18:57:
                    8c:77:cc:cf:0e:9a:66:9c:1c:59:1e:cd:ce:cf:63:
                    89:d6:04:93:e7:68:a7:88:4a:6e:51:df:c9:18:c3:
                    3b:4e:34:b8:88:47:0c:55:39:f4:f7:48:db:29:5b:
                    03:15:0a:d5:86:3f:d9:3c:70:db:85:4d:29:25:3a:
                    43:a1:ea:fb:63:cb:3b:86:8b:d4:2c:75:d7:93:e2:
                    f6:69:90:dd:0a:b2:85:47:35:80:95:1c:b2:6b:71:
                    4d:7d:03:fc:54:7e:6f:ba:ff:04:6d:c3:20:f1:05:
                    8c:f3:c6:6b:19:3c:30:37:2e:e0:b9:b4:f1:a8:df:
                    47:29:0f:4a:e7:06:d5:62:d7:9b:64:b0:17:8f:f6:
                    6a:e1:f8:79:96:7b:bc:33:1f:8d:04:38:74:93:50:
                    a8:22:f7:14:be:6b:a4:e1:5f:85:b4:6c:34:7d:50:
                    9c:d7:e1:8d:94:3a:77:02:4a:b8:8d:16:69:2c:79:
                    c0:a1:7c:5f:0c:8e:e4:48:74:a3:42:f4:5e:a3:f5:
                    de:22:be:cd:64:28:be:c8:74:27:49:6c:f6:9a:59:
                    49:b2:da:f5:d0:a4:1b:61:cc:36:83:fc:89:fa:8c:
                    61:1f:2d:58:84:e6:f9:2e:84:7c:7c:20:91:0f:33:
                    ce:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:89:77:2F:20:9A:16:EE:13:8C:78:F5:75:71:7F:7A:4B:6B:47:43
            X509v3 Authority Key Identifier:
                keyid:58:24:0E:F9:3A:BE:99:5F:97:61:B4:21:53:36:FF:AA:97:05:9E:A7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d9:c7:a8:65:9a:a6:5a:c4:04:9b:42:75:cb:65:08:4a:09:
         b1:5d:e2:0f:94:c0:8f:f0:99:6c:31:10:77:5c:66:68:12:fe:
         d5:90:0d:f9:cf:30:7c:70:28:5e:8a:3c:70:df:79:08:51:56:
         dd:9e:d5:ea:76:53:11:42:9d:f0:3f:bc:d5:fd:61:cc:3b:6c:
         c9:bd:c7:16:64:9a:68:3c:78:48:80:d2:84:23:d6:ac:8a:ef:
         c2:2d:39:f4:ca:0a:c2:c2:86:3f:e4:cd:e7:4e:0b:da:2e:c5:
         9e:d2:60:03:c3:9d:c7:75:33:73:b6:64:92:41:34:7f:c2:e5:
         6b:cb:b5:19:65:54:b7:ab:0f:11:70:61:bc:60:08:3c:f4:84:
         33:31:16:f5:bd:fb:a8:61:a6:d3:b7:19:ce:06:9b:58:2b:08:
         56:60:48:8b:fd:aa:e6:a6:4a:31:25:2c:d0:1c:4c:ce:75:14:
         81:43:7d:e4:44:8f:02:56:c1:74:f8:84:fd:05:46:e8:ec:97:
         b6:65:70:39:2b:8e:0e:53:c8:91:6a:9a:14:c6:ba:ec:e7:83:
         1a:1f:16:08:cd:c6:50:35:34:46:4c:d2:48:9c:2c:96:3a:12:
         20:a2:43:99:7f:51:c2:38:3e:0b:6f:11:15:89:f1:2e:01:9b:
         93:b9:88:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:30 2025 by rpki-client