Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3277/b9AjRMs0VRt1rQS0HGQaJAmBRa0.mft
File:                     b9AjRMs0VRt1rQS0HGQaJAmBRa0.mft (raw, json)
Hash identifier:          t+pjirlobDDfx83SIZxo0E/1MQMOpichmlX7gmCpBV8=
Subject key identifier:   48:F8:71:02:E1:75:17:F8:0A:22:91:31:DF:61:A4:BB:EF:C4:7D:59
Authority key identifier: 6F:D0:23:44:CB:34:55:1B:75:AD:04:B4:1C:64:1A:24:09:81:45:AD
Certificate issuer:       /CN=6FD02344CB34551B75AD04B41C641A24098145AD
Certificate serial:       0828
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b9AjRMs0VRt1rQS0HGQaJAmBRa0.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3277/b9AjRMs0VRt1rQS0HGQaJAmBRa0.mft
Manifest number:          0828
Signing time:             Thu 05 Jun 2025 16:39:34 +0000
Manifest this update:     Thu 05 Jun 2025 16:39:34 +0000
Manifest next update:     Thu 05 Jun 2025 22:39:34 +0000
Files and hashes:         1: b9AjRMs0VRt1rQS0HGQaJAmBRa0.crl (hash: 0cpFh/9pIuSi4XpM3bzorFQ8uMbazdnR0oVFchIJnAU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2088 (0x828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FD02344CB34551B75AD04B41C641A24098145AD
        Validity
            Not Before: Jun  5 16:39:34 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=48F87102E17517F80A229131DF61A4BBEFC47D59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ba:85:be:6d:64:ec:e8:6d:9a:24:fb:25:17:
                    a3:1e:c3:bd:be:d3:e2:48:9e:74:57:7b:31:8a:97:
                    8a:2c:e8:ba:87:c5:a2:04:0d:49:92:19:57:10:01:
                    72:6e:5b:d2:77:40:75:ba:34:a9:4a:84:98:13:0d:
                    52:b8:1b:f5:d5:8b:8a:de:a7:99:a3:80:60:ef:f9:
                    d7:c0:af:cb:11:fb:e5:6b:4e:2a:d6:df:bf:e3:b9:
                    cb:83:0a:25:65:24:7c:b2:5c:ef:78:93:6c:79:6a:
                    1e:26:84:ad:dd:8b:0b:19:75:1d:a7:3f:1c:bc:0c:
                    b6:31:bd:b1:84:19:1b:2a:dc:39:ae:73:b2:a5:e6:
                    1c:fd:a6:9c:fd:a1:81:79:d7:1b:35:d2:00:7b:c4:
                    cb:7c:c2:eb:48:1a:86:d9:76:89:3d:6a:5c:4d:67:
                    51:8b:6d:d3:51:32:c1:21:7e:da:33:57:e7:dd:aa:
                    a7:9b:a1:d0:12:ec:39:3c:de:bc:e3:ea:23:cf:be:
                    f5:a3:f4:88:48:e6:39:28:8b:a3:b9:e5:61:31:33:
                    63:5c:98:38:12:f9:59:cf:2f:e0:80:22:b5:38:eb:
                    1c:3f:e0:ba:8d:d2:e4:17:b1:09:0b:ae:fd:e3:b5:
                    4b:e9:f6:b2:02:b7:47:23:bc:c8:9d:88:99:bb:66:
                    8e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F8:71:02:E1:75:17:F8:0A:22:91:31:DF:61:A4:BB:EF:C4:7D:59
            X509v3 Authority Key Identifier:
                keyid:6F:D0:23:44:CB:34:55:1B:75:AD:04:B4:1C:64:1A:24:09:81:45:AD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3277/b9AjRMs0VRt1rQS0HGQaJAmBRa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b9AjRMs0VRt1rQS0HGQaJAmBRa0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3277/b9AjRMs0VRt1rQS0HGQaJAmBRa0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:f8:1a:24:07:d2:4a:ff:79:82:5d:7f:7e:10:e8:2e:91:9d:
         aa:24:8a:0f:52:9c:9e:e2:42:7b:94:d3:f4:1c:17:8a:4f:32:
         cf:2b:28:7a:b8:93:4c:fa:42:1c:0e:f5:22:c7:92:1e:87:e4:
         3d:0d:27:14:70:44:bb:68:7c:1a:1f:85:b6:43:02:af:a9:b3:
         8b:1f:b9:a8:ab:33:2e:8c:4a:df:33:0c:4b:2a:3d:d4:a7:dd:
         e3:1f:50:70:2c:b8:9d:9f:ae:c9:8d:ec:3c:c9:a0:22:d1:80:
         d4:8b:8b:cf:78:d0:8e:7f:75:18:81:5d:9e:c2:a9:46:70:06:
         15:aa:32:69:e9:ca:ae:43:23:98:cc:ef:f0:38:cf:6a:d5:03:
         b6:56:2e:d3:80:10:0d:75:9e:26:4a:07:6d:a1:e3:95:44:c5:
         26:d4:e0:da:ac:8e:7e:83:0d:9c:83:af:81:49:d5:3b:1b:05:
         ad:aa:32:bf:25:e0:6c:84:66:08:23:ce:40:7a:cc:e1:61:5b:
         2a:dc:ca:a6:03:12:84:9d:28:d3:a0:4b:26:89:a0:2b:64:8b:
         e2:92:42:1a:59:cd:f8:75:ab:86:bd:86:37:0a:be:48:ad:60:
         3e:1f:81:4e:5c:df:a3:48:48:67:d7:5e:c6:7f:1d:44:77:e0:
         f0:28:5e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:59:02 2025 by rpki-client