Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.mft
File:                     lazTI5qu6vMSOhjdo_diO4EFNtI.mft (raw, json)
Hash identifier:          NxHS/M6RrIPCS1ZeW+aiHVM0xIce+Ry929bABjI52xg=
Subject key identifier:   E6:48:C1:6B:92:E9:3D:4A:7B:48:10:29:F3:BE:18:38:63:5C:7A:2D
Authority key identifier: 95:AC:D3:23:9A:AE:EA:F3:12:3A:18:DD:A3:F7:62:3B:81:05:36:D2
Certificate issuer:       /CN=95ACD3239AAEEAF3123A18DDA3F7623B810536D2
Certificate serial:       0745
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lazTI5qu6vMSOhjdo_diO4EFNtI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.mft
Manifest number:          0745
Signing time:             Tue 03 Jun 2025 21:11:40 +0000
Manifest this update:     Tue 03 Jun 2025 21:11:40 +0000
Manifest next update:     Wed 04 Jun 2025 03:11:40 +0000
Files and hashes:         1: lazTI5qu6vMSOhjdo_diO4EFNtI.crl (hash: nQvABE7u4wnFljiOYZyEfposq5x24RHhkFneG37PTrw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1861 (0x745)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ACD3239AAEEAF3123A18DDA3F7623B810536D2
        Validity
            Not Before: Jun  3 21:11:40 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=E648C16B92E93D4A7B481029F3BE1838635C7A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:03:5c:80:ef:04:fa:0b:e3:a9:b7:62:2e:34:
                    82:27:27:82:04:5c:4e:e8:fc:b8:ce:60:93:81:2d:
                    0f:88:f9:0e:e8:bb:5d:d8:97:d4:35:b5:ad:84:e8:
                    a3:80:f9:3f:19:52:c7:d7:69:46:0e:c0:49:1c:18:
                    bf:d9:12:63:b1:a2:ea:e2:67:8b:bb:36:c3:b9:b3:
                    c1:f3:5a:60:3c:7f:9c:77:1f:4c:0a:f4:0e:7f:84:
                    2c:74:e3:2e:d1:6f:d3:8c:7e:cd:19:61:42:b5:79:
                    8a:b7:6e:e9:91:a5:d4:9a:1f:ad:0a:44:c0:94:94:
                    ca:d7:37:97:e6:8b:ce:a7:1e:92:b1:d0:d1:c1:b8:
                    3d:48:54:61:6e:f1:48:3d:17:24:0c:f7:c0:50:4e:
                    8c:49:e0:44:31:52:b9:cb:69:d9:bd:a4:d6:52:a2:
                    f5:c0:d1:13:ee:7e:8c:4b:71:10:75:25:39:a9:c5:
                    e1:10:38:36:44:13:57:f3:b6:7d:8f:f0:06:34:fd:
                    3f:d8:a9:96:00:66:af:87:59:07:6b:55:68:a2:17:
                    16:2f:df:26:80:d7:93:84:0d:39:05:0b:63:fe:fd:
                    1e:fa:af:f8:4c:c7:27:17:6b:1d:ad:39:20:bb:c1:
                    a3:d2:10:6e:e5:34:b9:23:9f:71:a1:eb:f5:69:7c:
                    04:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:48:C1:6B:92:E9:3D:4A:7B:48:10:29:F3:BE:18:38:63:5C:7A:2D
            X509v3 Authority Key Identifier:
                keyid:95:AC:D3:23:9A:AE:EA:F3:12:3A:18:DD:A3:F7:62:3B:81:05:36:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lazTI5qu6vMSOhjdo_diO4EFNtI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:32:bd:c3:e3:1a:18:6a:55:b7:8e:b2:c4:1f:b4:dc:35:c9:
         73:87:69:4f:48:a2:d2:2f:16:77:34:b7:ae:b7:10:af:d1:56:
         c8:c5:76:03:e3:eb:e8:58:87:4b:82:fc:41:1b:27:9f:5d:7b:
         a4:9b:31:30:99:ad:44:a1:eb:e9:43:62:60:88:a0:78:94:2c:
         ed:e3:ac:a4:89:c0:96:f4:14:a7:e3:e9:8b:8e:e7:3b:94:c9:
         ac:56:38:6d:7b:a8:7c:16:85:94:01:0d:61:67:02:3b:3c:f5:
         46:52:e3:86:c6:eb:2f:91:c7:d6:d4:9a:60:1b:9f:27:1a:a0:
         14:f3:fc:aa:0a:8c:fd:0e:67:97:32:42:47:ea:9e:b3:d0:ff:
         2c:c8:94:c9:41:e4:f5:26:61:dd:9e:58:0b:e7:f6:2a:22:29:
         40:3f:2d:b6:35:01:c1:ea:a0:3e:44:58:3c:95:83:7f:6e:75:
         1d:a7:3b:d0:a9:3e:d6:15:02:e3:60:f5:8e:30:8f:69:32:b8:
         6d:67:02:26:87:44:ea:cb:18:62:de:65:8f:72:60:ee:ac:8e:
         f9:69:b7:b1:d4:f9:40:c1:85:28:58:8e:a6:fd:88:05:4a:67:
         26:98:be:33:15:86:c2:21:14:19:11:ae:2d:bd:21:c0:b7:39:
         b1:b0:cf:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:56:56 2025 by rpki-client