Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft
File:                     VyVNn31j60IRhMWNAuBBlwWaag4.mft (raw, json)
Hash identifier:          JmrxM2hL1U1ecjNK3z5hCasa6b/UgZGijIQw4/GSChw=
Subject key identifier:   8C:09:73:12:7E:8D:45:EB:CE:C8:F7:DE:B6:1F:DB:F6:1C:D5:E2:AB
Authority key identifier: 57:25:4D:9F:7D:63:EB:42:11:84:C5:8D:02:E0:41:97:05:9A:6A:0E
Certificate issuer:       /CN=57254D9F7D63EB421184C58D02E04197059A6A0E
Certificate serial:       076D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VyVNn31j60IRhMWNAuBBlwWaag4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft
Manifest number:          076D
Signing time:             Sat 29 Mar 2025 10:29:59 +0000
Manifest this update:     Sat 29 Mar 2025 10:29:59 +0000
Manifest next update:     Sat 29 Mar 2025 16:29:59 +0000
Files and hashes:         1: VyVNn31j60IRhMWNAuBBlwWaag4.crl (hash: ol6MuGaNW6m+w5uuuZxZo17vLeENmywGlMIiIyrBlMI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1901 (0x76d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57254D9F7D63EB421184C58D02E04197059A6A0E
        Validity
            Not Before: Mar 29 10:29:59 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=8C0973127E8D45EBCEC8F7DEB61FDBF61CD5E2AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:86:a3:56:2e:72:20:0b:b8:87:bc:20:2a:f8:
                    e5:6a:81:f5:dc:d9:16:77:cd:f1:1d:03:a8:a6:59:
                    1f:7c:4c:0c:9e:1e:dc:9b:47:ef:a3:69:b4:8e:16:
                    2a:db:ab:2f:da:c9:f5:3a:8a:a9:43:f8:d7:59:76:
                    5d:0b:e5:83:af:e0:08:04:9a:51:ff:2e:78:64:cc:
                    12:f4:7f:f7:d8:01:11:8b:51:87:8a:5c:ca:a9:41:
                    5c:f2:36:ce:07:4a:2d:88:1d:64:d6:53:6d:0f:4d:
                    fb:70:e9:17:c4:e9:b6:ac:39:77:b0:64:45:53:66:
                    25:19:f8:c5:35:83:2c:7b:4b:83:ea:98:74:03:a0:
                    a9:cf:08:ba:47:6d:17:fa:56:a8:eb:f8:fd:2d:e6:
                    cf:18:49:fa:7f:2e:1b:74:23:74:37:44:a7:61:77:
                    55:91:7a:1c:41:f1:df:61:c1:1d:47:9f:21:18:6f:
                    ca:77:44:06:8f:0e:89:d2:67:12:e8:d0:b2:b2:62:
                    8f:49:21:65:cc:64:3f:8c:1f:79:f0:6f:8b:dd:94:
                    63:e2:d9:04:bc:42:fb:5a:38:c6:dd:33:00:b9:30:
                    07:15:70:5f:4a:0a:a8:d9:a6:dc:a5:98:5e:32:d1:
                    45:3a:96:e9:2e:d0:63:af:66:ca:3e:83:d0:53:86:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:09:73:12:7E:8D:45:EB:CE:C8:F7:DE:B6:1F:DB:F6:1C:D5:E2:AB
            X509v3 Authority Key Identifier:
                keyid:57:25:4D:9F:7D:63:EB:42:11:84:C5:8D:02:E0:41:97:05:9A:6A:0E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VyVNn31j60IRhMWNAuBBlwWaag4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:1c:b7:7c:3b:24:82:5e:9f:cc:cc:6f:4a:81:ff:f0:f7:ec:
         c9:8a:ee:dc:37:9e:22:4e:e9:e0:ab:41:a1:e2:dc:08:c8:96:
         d8:8a:b0:41:7a:cb:9c:39:a7:da:95:15:a3:ad:79:b1:5c:37:
         a2:0f:17:ed:b5:ee:9d:37:f5:1e:0a:16:d5:83:ee:6f:58:02:
         ae:42:da:e6:1e:86:8c:c6:fb:25:90:1f:ec:f4:f1:7f:42:73:
         96:59:11:80:d5:37:5f:55:b5:06:f7:fd:38:b1:86:f7:ae:e0:
         1e:0a:2f:17:ec:b0:91:5b:43:ef:d5:16:d8:36:26:66:8c:33:
         3c:09:e3:87:2d:97:70:fd:6f:a8:50:a3:92:9c:60:37:14:b1:
         75:94:9f:c5:c5:1c:48:08:62:ed:73:15:c3:11:b5:16:37:84:
         0d:bc:db:30:e0:f9:4a:29:dd:2b:5b:df:dd:2c:2e:ff:a3:e2:
         a1:58:02:1f:80:61:29:b8:84:76:c0:1e:d0:50:69:aa:5c:fc:
         23:f4:ac:31:a0:74:6f:8b:59:c0:f3:ce:11:b3:52:56:10:cd:
         13:4b:a7:eb:00:f7:bc:02:a0:02:03:25:c7:3e:29:ce:f7:44:
         0c:17:d6:e2:0c:89:f0:88:f4:f6:7f:f2:ec:21:0c:dc:65:70:
         b9:11:3e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:09 2025 by rpki-client