Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3278/N3Z104GJWPsoPxmxJ8mVg1G0Vh4.mft
File:                     N3Z104GJWPsoPxmxJ8mVg1G0Vh4.mft (raw, json)
Hash identifier:          IFg3EpTNhdJ+43SO8vYd2P4r7vEFH5KsUfJmYllrGTw=
Subject key identifier:   AE:5B:58:BC:3A:A8:70:50:9F:C8:DE:40:CE:D4:7A:91:98:35:F3:A6
Authority key identifier: 37:76:75:D3:81:89:58:FB:28:3F:19:B1:27:C9:95:83:51:B4:56:1E
Certificate issuer:       /CN=377675D3818958FB283F19B127C9958351B4561E
Certificate serial:       0661
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/N3Z104GJWPsoPxmxJ8mVg1G0Vh4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/N3Z104GJWPsoPxmxJ8mVg1G0Vh4.mft
Manifest number:          0661
Signing time:             Fri 21 Mar 2025 00:28:08 +0000
Manifest this update:     Fri 21 Mar 2025 00:28:08 +0000
Manifest next update:     Fri 21 Mar 2025 06:28:08 +0000
Files and hashes:         1: N3Z104GJWPsoPxmxJ8mVg1G0Vh4.crl (hash: hTWgjIACK+SrZm67IxuwjdI/MCdnC5xVjiPxpVKWKII=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1633 (0x661)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=377675D3818958FB283F19B127C9958351B4561E
        Validity
            Not Before: Mar 21 00:28:08 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=AE5B58BC3AA870509FC8DE40CED47A919835F3A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9f:63:98:98:1c:65:2f:80:de:3e:66:e4:d1:
                    63:66:ea:a3:9d:da:de:08:5f:68:17:19:9d:8f:b0:
                    a1:75:cd:1f:ef:19:c7:1c:1c:e0:4b:7c:37:77:4a:
                    da:67:10:5f:b7:bb:0f:f9:df:b1:b0:14:2c:84:c9:
                    bb:2f:a0:05:05:63:1c:b5:24:69:33:5c:df:9f:25:
                    a2:19:c5:8b:0c:4a:10:6e:94:a3:92:18:90:73:3d:
                    5f:cb:6a:dd:73:8a:28:8c:95:a1:dd:a6:db:f3:e9:
                    9b:ec:19:6b:14:74:a5:a0:8d:5a:e2:f8:3e:e6:b0:
                    02:37:ce:c7:c8:f0:d2:a9:7a:5b:e0:0b:5b:c7:e3:
                    00:0f:43:94:ba:39:54:82:87:67:f1:2e:f1:98:8a:
                    ac:0f:5c:f1:5e:d3:ef:7a:03:0f:8f:3b:c4:86:7c:
                    82:0a:fa:db:f6:7a:77:e9:90:72:1f:a1:2c:41:f7:
                    d3:0f:69:dc:44:18:ad:30:43:7a:7c:dc:66:28:90:
                    8f:07:40:27:42:29:d6:9e:19:5a:40:5a:e3:72:b7:
                    cb:8a:3a:2a:04:73:27:c8:10:6e:16:73:94:b0:99:
                    01:23:06:f4:04:ae:87:e6:9f:5c:3c:2b:d1:a7:56:
                    6d:26:a7:b2:79:f0:3b:23:cb:99:8a:8a:fb:e2:44:
                    4d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5B:58:BC:3A:A8:70:50:9F:C8:DE:40:CE:D4:7A:91:98:35:F3:A6
            X509v3 Authority Key Identifier:
                keyid:37:76:75:D3:81:89:58:FB:28:3F:19:B1:27:C9:95:83:51:B4:56:1E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/N3Z104GJWPsoPxmxJ8mVg1G0Vh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/N3Z104GJWPsoPxmxJ8mVg1G0Vh4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/N3Z104GJWPsoPxmxJ8mVg1G0Vh4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f9:d1:71:fe:5f:32:6d:8a:9b:6e:51:56:f6:81:3e:ef:48:
         05:4a:9c:9e:4b:dd:a2:4b:c4:1f:d5:44:ba:cc:9a:96:82:e6:
         ff:b2:61:05:5a:ca:19:e2:ad:af:9e:e6:c9:de:92:30:84:43:
         a8:1e:b3:d3:75:1d:66:80:e2:2c:9e:86:52:ca:2b:01:4e:c0:
         a9:f0:be:66:84:d2:f8:e2:5d:09:63:66:ac:59:46:82:37:dd:
         ce:06:c5:e9:37:00:27:5c:e6:dc:bd:cb:2d:c1:59:65:ab:25:
         52:c8:76:4d:88:12:7a:72:4b:0e:ec:b3:31:ef:7a:7e:cd:ce:
         96:b4:d2:21:bc:9f:59:7f:cf:19:c3:1c:95:9f:22:93:c1:fe:
         1e:61:4d:a3:fb:86:3b:49:03:1c:58:97:c8:89:6e:3f:5e:be:
         e2:b7:b3:8a:41:66:8c:b4:d1:db:f2:56:c8:91:a7:9e:63:ea:
         a0:29:70:23:40:be:5b:23:f0:14:84:b0:7b:2b:d2:03:1b:fb:
         46:ef:3d:e0:a8:08:51:12:e2:78:78:cc:64:60:db:1d:59:37:
         24:a4:9a:ab:ab:b7:0e:f0:1d:7f:b3:aa:7a:72:7d:24:2c:50:
         ec:6b:b7:c0:e2:eb:17:f2:42:d3:e3:cc:ef:7e:35:63:46:28:
         e9:99:f3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:33 2025 by rpki-client