Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3273/n8_cuQzpJJspaS8F0cRk9itgXjE.mft
File:                     n8_cuQzpJJspaS8F0cRk9itgXjE.mft (raw, json)
Hash identifier:          ufWBIFvxPELb0hYy0z6+ra9a4FHNSqkOCYeLy5ijvsY=
Subject key identifier:   0A:45:C8:60:B6:94:9D:F6:2E:B6:07:1A:E5:8B:2B:B0:79:90:6B:88
Authority key identifier: 9F:CF:DC:B9:0C:E9:24:9B:29:69:2F:05:D1:C4:64:F6:2B:60:5E:31
Certificate issuer:       /CN=9FCFDCB90CE9249B29692F05D1C464F62B605E31
Certificate serial:       06BC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/n8_cuQzpJJspaS8F0cRk9itgXjE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/n8_cuQzpJJspaS8F0cRk9itgXjE.mft
Manifest number:          06BC
Signing time:             Fri 21 Mar 2025 00:27:00 +0000
Manifest this update:     Fri 21 Mar 2025 00:27:00 +0000
Manifest next update:     Fri 21 Mar 2025 06:27:00 +0000
Files and hashes:         1: n8_cuQzpJJspaS8F0cRk9itgXjE.crl (hash: qlb5cWQNe3OBSr4rPzrw86Vitlk6W8/720/GkEiHRSc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1724 (0x6bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FCFDCB90CE9249B29692F05D1C464F62B605E31
        Validity
            Not Before: Mar 21 00:27:00 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=0A45C860B6949DF62EB6071AE58B2BB079906B88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b9:75:d4:d2:db:ec:27:91:08:01:c0:09:ba:
                    89:d2:46:55:8e:1b:9f:9c:9f:9e:fb:82:cd:9f:3f:
                    16:c5:94:1c:3a:ad:4d:fa:f5:33:3b:94:12:ed:31:
                    85:3c:0f:41:1d:b3:de:7b:bf:5e:b7:23:79:f0:cf:
                    b8:ca:79:f4:0a:e3:aa:8c:76:5f:8b:6f:7e:5e:90:
                    24:26:6d:e0:15:5a:40:d3:a8:75:08:4e:b9:e3:f3:
                    0e:07:20:35:d9:4e:32:0e:0f:6e:1c:48:45:21:40:
                    d2:0d:61:9a:dc:80:bc:03:5a:50:1f:f0:f5:a3:60:
                    f9:77:03:d9:c3:14:2f:62:f8:08:41:0a:10:1f:77:
                    79:00:20:24:4c:59:07:7d:d5:aa:7b:b1:4c:a7:2c:
                    ce:05:72:ce:d2:72:a0:c9:39:64:23:8c:78:3b:5c:
                    a4:74:4b:23:19:89:6a:b2:73:b1:d1:0a:48:32:b5:
                    f1:64:a6:ba:91:5e:77:89:ed:20:12:c0:05:2f:48:
                    78:45:03:dd:12:33:bf:ef:a8:1d:4b:f4:8e:94:4a:
                    b0:56:62:ea:bc:43:8c:44:c2:fc:c3:05:59:1a:48:
                    f3:ee:d4:7b:9e:e8:71:29:82:82:35:50:72:8a:61:
                    44:62:68:61:d2:49:85:0f:91:da:48:1e:c9:f5:47:
                    71:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:45:C8:60:B6:94:9D:F6:2E:B6:07:1A:E5:8B:2B:B0:79:90:6B:88
            X509v3 Authority Key Identifier:
                keyid:9F:CF:DC:B9:0C:E9:24:9B:29:69:2F:05:D1:C4:64:F6:2B:60:5E:31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/n8_cuQzpJJspaS8F0cRk9itgXjE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/n8_cuQzpJJspaS8F0cRk9itgXjE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/n8_cuQzpJJspaS8F0cRk9itgXjE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:a5:35:b0:b1:83:41:f7:03:ca:28:14:9a:7c:4a:4b:47:3b:
         63:cf:ca:e8:1c:27:bb:c9:11:15:62:0b:31:58:5b:ae:9f:da:
         52:65:59:02:9a:fd:4e:80:b9:27:71:fa:6b:f5:72:de:3c:00:
         8b:22:c4:78:60:41:8b:93:5b:57:bf:b1:67:d3:67:1a:3c:a2:
         a3:20:f8:bb:83:2d:49:e7:82:60:c7:30:1d:5d:71:ff:ca:df:
         79:8d:8e:cd:64:ec:f2:6d:de:47:87:f8:ab:78:0f:49:5e:00:
         2f:49:3f:25:08:18:63:c4:00:5e:80:7f:b7:3a:ec:26:43:b3:
         1d:36:a7:f9:c6:65:7d:fc:ff:83:00:91:f4:db:f4:fc:6e:89:
         8a:48:04:f5:f3:31:75:ea:37:44:0c:14:71:63:42:16:7e:c0:
         4c:4e:b1:f2:a0:0f:30:7e:d9:5c:42:8e:bf:44:49:9f:ef:c3:
         68:52:40:32:e8:65:f5:32:49:e8:5e:bc:28:95:cd:68:df:be:
         77:b4:21:a0:4b:7f:06:e6:da:7f:79:a2:87:4b:83:34:ae:76:
         92:00:34:d1:40:77:87:14:ec:30:77:72:71:e5:cd:0c:bc:c8:
         c0:ee:63:3d:fe:5e:f1:fe:63:c6:3d:a1:5f:d3:38:c8:da:55:
         9e:09:c0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:35 2025 by rpki-client