Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3284/Xw7MVP5lpVcqiBu0qyGFJbOsitA.mft
File:                     Xw7MVP5lpVcqiBu0qyGFJbOsitA.mft (raw, json)
Hash identifier:          WqijlB/cs50gw3E3+baaHgiOxLMVI4UYS73nmYikvZA=
Subject key identifier:   EE:92:B5:AE:5C:AC:7C:2B:72:58:16:3D:E9:E8:02:FA:77:A3:31:8F
Authority key identifier: 5F:0E:CC:54:FE:65:A5:57:2A:88:1B:B4:AB:21:85:25:B3:AC:8A:D0
Certificate issuer:       /CN=5F0ECC54FE65A5572A881BB4AB218525B3AC8AD0
Certificate serial:       06EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Xw7MVP5lpVcqiBu0qyGFJbOsitA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/Xw7MVP5lpVcqiBu0qyGFJbOsitA.mft
Manifest number:          06EA
Signing time:             Thu 05 Jun 2025 16:43:51 +0000
Manifest this update:     Thu 05 Jun 2025 16:43:51 +0000
Manifest next update:     Thu 05 Jun 2025 22:43:51 +0000
Files and hashes:         1: Xw7MVP5lpVcqiBu0qyGFJbOsitA.crl (hash: Xt0U6MCt71e22wHnP0vnerNoj39VvNk+bNp3VtZOymg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1770 (0x6ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F0ECC54FE65A5572A881BB4AB218525B3AC8AD0
        Validity
            Not Before: Jun  5 16:43:51 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=EE92B5AE5CAC7C2B7258163DE9E802FA77A3318F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:19:ad:b0:22:ca:83:81:58:86:d5:fc:89:11:
                    81:9f:21:c4:61:e1:86:29:d4:b7:4b:d6:2c:36:d0:
                    17:15:15:38:60:17:7b:a6:88:2c:af:e8:57:92:28:
                    a2:b1:10:0a:a9:4c:32:32:a7:23:cb:a0:a8:13:d8:
                    81:e3:93:be:28:53:a2:eb:34:1a:05:69:f0:f7:39:
                    a6:86:c8:1d:4c:54:e3:0e:b1:7f:41:dc:31:81:50:
                    d3:d9:0b:78:d9:33:68:f2:a5:68:c1:af:72:e9:7b:
                    c1:72:b2:0b:6c:84:fd:fb:fd:21:7d:04:a5:7d:8e:
                    af:ef:a4:be:74:b1:62:8f:50:f6:c8:34:21:e4:ca:
                    10:29:57:f9:5d:6a:76:fa:70:a8:01:34:4a:5b:1f:
                    62:0b:f5:ab:92:12:e9:e0:19:cf:d2:b5:e9:51:61:
                    f0:f1:83:40:35:20:db:f3:bd:87:db:c7:e9:26:69:
                    8e:d9:ea:f3:69:cc:49:c0:4e:66:c3:a1:ec:43:82:
                    4d:23:df:53:df:c9:b1:7b:6b:b1:79:7d:12:71:0c:
                    30:e5:f8:73:47:2c:4a:87:d4:8f:9a:5f:f7:bb:9f:
                    47:77:b5:ef:c4:05:49:72:64:f9:29:ea:b5:5e:74:
                    b7:9c:38:d1:e7:3f:87:57:4a:07:2e:38:52:cc:0f:
                    5c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:92:B5:AE:5C:AC:7C:2B:72:58:16:3D:E9:E8:02:FA:77:A3:31:8F
            X509v3 Authority Key Identifier:
                keyid:5F:0E:CC:54:FE:65:A5:57:2A:88:1B:B4:AB:21:85:25:B3:AC:8A:D0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/Xw7MVP5lpVcqiBu0qyGFJbOsitA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Xw7MVP5lpVcqiBu0qyGFJbOsitA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/Xw7MVP5lpVcqiBu0qyGFJbOsitA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:97:38:3e:76:d6:8a:fe:ab:8b:02:7a:88:07:8a:d8:d5:47:
         56:e6:4c:77:a6:a1:7a:f1:0c:0e:53:bd:68:20:7a:0b:57:3f:
         10:e4:f2:02:53:ad:4a:2a:f6:c3:11:f3:a3:73:00:90:bf:f6:
         ac:7d:8b:6c:4f:44:8e:e0:24:cb:e0:bf:fa:af:01:fb:0c:63:
         fc:44:ef:4c:0d:57:72:b7:c6:0b:d8:ea:f0:4f:74:95:d6:65:
         c0:b5:7d:51:4c:26:7c:5c:f0:be:84:23:0c:be:91:89:df:31:
         f7:06:ba:05:a7:2b:17:ef:97:95:2a:e2:f1:1e:cf:22:15:af:
         a8:92:8a:9d:2d:b0:56:49:48:f4:78:3e:7d:a1:8f:d3:04:01:
         ab:92:d8:1b:96:c7:e1:5a:27:1f:d9:3f:95:b2:0d:3d:10:39:
         ca:05:ab:69:2f:2c:2b:b5:5b:af:c5:44:8c:b9:d1:a2:cb:fa:
         79:02:a9:68:52:b6:2b:af:9b:41:88:46:0d:26:ea:9e:0c:9e:
         b6:f9:77:8e:24:19:2e:b5:6f:d2:cd:32:97:67:06:da:07:50:
         71:b2:06:ac:9f:32:9d:54:ae:14:a8:06:59:b7:c8:07:06:35:
         cc:28:66:fc:36:b0:14:3a:b8:1c:3f:3a:f8:3e:97:ca:44:e6:
         8d:75:5d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:18:08 2025 by rpki-client