Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3286/fnoIxQq5v7LbFff2L1wXNDC-NQo.mft
File:                     fnoIxQq5v7LbFff2L1wXNDC-NQo.mft (raw, json)
Hash identifier:          PYdbahed1mR5nvw3pX8B4/aibm4Uavfhrqol0wghZPY=
Subject key identifier:   A6:06:0D:B1:9D:84:7B:5F:74:E8:92:5D:07:07:D5:82:2E:5B:5B:80
Authority key identifier: 7E:7A:08:C5:0A:B9:BF:B2:DB:15:F7:F6:2F:5C:17:34:30:BE:35:0A
Certificate issuer:       /CN=7E7A08C50AB9BFB2DB15F7F62F5C173430BE350A
Certificate serial:       05BD
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fnoIxQq5v7LbFff2L1wXNDC-NQo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3286/fnoIxQq5v7LbFff2L1wXNDC-NQo.mft
Manifest number:          05BD
Signing time:             Fri 21 Mar 2025 00:31:13 +0000
Manifest this update:     Fri 21 Mar 2025 00:31:13 +0000
Manifest next update:     Fri 21 Mar 2025 06:31:13 +0000
Files and hashes:         1: fnoIxQq5v7LbFff2L1wXNDC-NQo.crl (hash: VbTHwm2C6w8kaNUTxBAlcsqrZsGvFES57vGKW/qCq2E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1469 (0x5bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E7A08C50AB9BFB2DB15F7F62F5C173430BE350A
        Validity
            Not Before: Mar 21 00:31:13 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=A6060DB19D847B5F74E8925D0707D5822E5B5B80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4b:fd:11:14:f7:29:98:4e:f8:83:6f:0d:c7:
                    07:53:0c:40:c4:ed:67:af:6e:de:eb:50:94:65:9b:
                    d3:c4:82:46:1f:74:6e:d3:5e:bf:43:31:66:e8:ec:
                    20:50:2f:86:82:d1:e4:6f:a7:c6:7f:7b:c0:c2:d1:
                    32:7f:e1:43:19:cb:73:1b:6d:fc:ba:70:35:98:30:
                    e8:d9:da:5a:28:1c:d5:83:55:f9:f1:c3:de:21:9a:
                    1e:a3:e7:ca:9f:c1:37:e3:6d:e4:b4:ce:f2:1f:0c:
                    0e:43:24:5c:66:a3:32:3c:ea:bb:a9:b3:7a:08:37:
                    05:f8:99:15:66:1f:ff:0f:db:09:64:11:9f:73:50:
                    3a:6d:00:fc:c7:89:0b:a6:ce:b8:8e:54:f7:42:08:
                    47:93:70:1d:fa:8c:d0:0f:c0:e4:eb:d0:e7:bd:6c:
                    58:cf:51:a1:67:6d:a6:db:9e:ad:43:da:75:95:bc:
                    f9:25:7b:c3:50:1b:a1:41:cc:4d:b6:5a:63:db:1d:
                    3e:02:8e:8d:03:03:15:60:d1:4d:49:1d:4f:2e:50:
                    b7:64:36:50:b1:bb:7a:23:63:4b:9f:c8:54:f8:ed:
                    fc:dd:9d:cf:87:ee:f1:08:c5:0d:13:ff:fd:4a:d5:
                    10:68:8c:4f:f7:2c:0a:09:d0:2b:eb:a2:65:51:07:
                    10:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:06:0D:B1:9D:84:7B:5F:74:E8:92:5D:07:07:D5:82:2E:5B:5B:80
            X509v3 Authority Key Identifier:
                keyid:7E:7A:08:C5:0A:B9:BF:B2:DB:15:F7:F6:2F:5C:17:34:30:BE:35:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3286/fnoIxQq5v7LbFff2L1wXNDC-NQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fnoIxQq5v7LbFff2L1wXNDC-NQo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3286/fnoIxQq5v7LbFff2L1wXNDC-NQo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b9:bd:4a:3a:48:0c:b5:3f:38:b3:6a:6d:70:d1:8c:4f:5e:
         ac:92:35:df:15:2b:a4:3a:7c:4d:b3:0f:fb:21:4a:29:0c:65:
         2f:a9:a9:32:ee:0f:f5:ca:a2:4b:2a:4e:87:60:b9:0a:3c:50:
         85:3b:30:fa:2e:40:32:82:25:43:59:06:3a:50:8b:09:b5:8f:
         32:43:e8:1b:71:2d:d5:56:12:95:65:a0:9c:96:71:58:1e:02:
         03:82:58:0c:c4:48:cb:77:7e:f0:17:95:69:0f:b4:1f:d8:ba:
         67:e5:d1:43:e3:69:75:84:3b:1e:27:8a:39:bf:66:a5:f8:8d:
         b7:91:2b:96:5e:89:9a:01:d1:b8:35:4f:ae:3f:d8:f6:f8:ac:
         ee:f7:a5:80:91:9c:f3:3f:b3:81:64:14:df:be:e5:32:0f:ad:
         9b:39:37:e1:db:83:48:14:88:54:22:4b:59:5b:e8:b2:2e:9d:
         92:34:35:a0:2a:ef:2a:4d:9e:1c:d7:8e:dd:de:f5:30:8e:07:
         b2:63:29:c0:8b:68:fe:81:75:6e:a8:22:fe:71:19:40:62:e9:
         92:65:ae:b5:03:66:21:72:36:86:1b:63:c6:99:34:05:1b:25:
         3a:23:79:17:62:c9:90:63:54:f2:68:c1:d2:fa:29:42:f7:aa:
         bb:b7:e7:63
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBb0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0U3
QTA4QzUwQUI5QkZCMkRCMTVGN0Y2MkY1QzE3MzQzMEJFMzUwQTAeFw0yNTAzMjEw
MDMxMTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEE2MDYwREIxOUQ4NDdC
NUY3NEU4OTI1RDA3MDdENTgyMkU1QjVCODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcS/0RFPcpmE74g28NxwdTDEDE7Wevbt7rUJRlm9PEgkYfdG7T
Xr9DMWbo7CBQL4aC0eRvp8Z/e8DC0TJ/4UMZy3Mbbfy6cDWYMOjZ2looHNWDVfnx
w94hmh6j58qfwTfjbeS0zvIfDA5DJFxmozI86rups3oINwX4mRVmH/8P2wlkEZ9z
UDptAPzHiQumzriOVPdCCEeTcB36jNAPwOTr0Oe9bFjPUaFnbabbnq1D2nWVvPkl
e8NQG6FBzE22WmPbHT4Cjo0DAxVg0U1JHU8uULdkNlCxu3ojY0ufyFT47fzdnc+H
7vEIxQ0T//1K1RBojE/3LAoJ0CvromVRBxDJAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUpgYNsZ2Ee1906JJdBwfVgi5bW4AwHwYDVR0jBBgwFoAUfnoIxQq5v7LbFff2
L1wXNDC+NQowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4
Ni9mbm9JeFFxNXY3TGJGZmYyTDF3WE5EQy1OUW8uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2Zub0l4UXE1djdMYkZmZjJMMXdYTkRDLU5Rby5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODYvZm5vSXhRcTV2N0xi
RmZmMkwxd1hOREMtTlFvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAKS5vUo6SAy1Pzizam1w0YxPXqySNd8VK6Q6fE2zD/shSikMZS+pqTLuD/XK
oksqTodguQo8UIU7MPouQDKCJUNZBjpQiwm1jzJD6BtxLdVWEpVloJyWcVgeAgOC
WAzESMt3fvAXlWkPtB/Yumfl0UPjaXWEOx4nijm/ZqX4jbeRK5ZeiZoB0bg1T64/
2Pb4rO73pYCRnPM/s4FkFN++5TIPrZs5N+Hbg0gUiFQiS1lb6LIunZI0NaAq7ypN
nhzXjt3e9TCOB7JjKcCLaP6BdW6oIv5xGUBi6ZJlrrUDZiFyNoYbY8aZNAUbJToj
eRdiyZBjVPJowdL6KUL3qru352M=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:34:47 2025 by rpki-client