Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3290/xWg5B3F2O7YxSEuxvd-uSFlvXOI.mft
File:                     xWg5B3F2O7YxSEuxvd-uSFlvXOI.mft (raw, json)
Hash identifier:          anKbKM+rBVLUbRVWR309eaD0q/G4k19S5lXkOkinko4=
Subject key identifier:   3A:6B:64:A2:57:5F:AD:47:2E:90:7F:75:1C:F0:18:E7:97:46:1F:16
Authority key identifier: C5:68:39:07:71:76:3B:B6:31:48:4B:B1:BD:DF:AE:48:59:6F:5C:E2
Certificate issuer:       /CN=C568390771763BB631484BB1BDDFAE48596F5CE2
Certificate serial:       05BA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xWg5B3F2O7YxSEuxvd-uSFlvXOI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/xWg5B3F2O7YxSEuxvd-uSFlvXOI.mft
Manifest number:          05BA
Signing time:             Sat 29 Mar 2025 09:27:36 +0000
Manifest this update:     Sat 29 Mar 2025 09:27:36 +0000
Manifest next update:     Sat 29 Mar 2025 15:27:36 +0000
Files and hashes:         1: xWg5B3F2O7YxSEuxvd-uSFlvXOI.crl (hash: NnUYsmdM7l86Ijnyo9PeYH6cney8Ccki13TxHPCKdd4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1466 (0x5ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C568390771763BB631484BB1BDDFAE48596F5CE2
        Validity
            Not Before: Mar 29 09:27:36 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=3A6B64A2575FAD472E907F751CF018E797461F16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:63:38:19:15:71:2a:01:f8:db:f8:41:8c:
                    70:db:35:07:d3:25:7a:d2:3b:a7:99:52:c3:81:06:
                    31:60:61:58:c0:40:62:21:80:8c:69:4b:1b:46:16:
                    b5:c6:3a:86:08:84:b0:2e:74:ad:d6:9b:ce:36:8a:
                    bb:de:8d:da:66:33:12:9a:e7:f3:a2:d0:15:8c:02:
                    52:26:ea:0a:c5:f0:ba:c7:ed:82:e1:20:39:67:73:
                    55:77:41:65:7c:73:79:77:f7:cc:c0:5d:e9:f0:c1:
                    00:ae:d3:4f:58:49:31:f3:3d:29:ff:c4:a5:eb:8f:
                    ec:65:13:74:6a:81:6a:ce:9b:ec:32:d4:b9:b2:02:
                    9f:ed:5d:69:43:0a:1f:1b:eb:ee:46:72:f7:ed:38:
                    7a:be:39:64:5a:9c:96:b5:13:98:ac:25:a4:a0:07:
                    0a:66:63:80:be:a3:10:df:39:4d:c7:95:f9:d0:68:
                    6e:a2:05:f6:82:f3:6b:46:7f:2c:91:60:99:23:71:
                    66:79:62:df:7c:27:d9:c8:ef:7a:f4:dd:de:81:d9:
                    2e:29:a9:d7:e8:76:22:7d:af:3c:63:e8:b1:05:42:
                    48:bd:8f:85:5a:a6:32:4c:d7:49:66:dd:7c:4e:a1:
                    70:09:90:8a:00:ef:e7:e2:c1:ce:a3:7c:03:7f:90:
                    20:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6B:64:A2:57:5F:AD:47:2E:90:7F:75:1C:F0:18:E7:97:46:1F:16
            X509v3 Authority Key Identifier:
                keyid:C5:68:39:07:71:76:3B:B6:31:48:4B:B1:BD:DF:AE:48:59:6F:5C:E2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/xWg5B3F2O7YxSEuxvd-uSFlvXOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xWg5B3F2O7YxSEuxvd-uSFlvXOI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/xWg5B3F2O7YxSEuxvd-uSFlvXOI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:e2:5e:5a:f3:69:da:55:7d:91:65:91:3f:fd:5f:52:78:f5:
         af:f6:5a:c6:7a:bc:2a:3b:a1:41:5c:6b:31:9d:96:ce:3d:5a:
         25:56:9a:9a:4f:d7:8b:17:8b:92:8e:5e:5d:e8:83:20:ff:3c:
         5b:18:38:4d:91:b4:66:7e:63:a7:f9:9e:f5:de:70:3d:ca:33:
         c7:fc:52:f3:5d:2f:cf:69:e3:87:60:55:71:b4:36:2e:3e:65:
         56:fd:7f:89:2f:d5:18:91:72:65:d7:12:e0:33:34:67:6e:9c:
         2b:20:1e:d3:6e:6e:62:4c:45:fc:bd:b5:02:1b:f9:1b:f0:52:
         dc:99:b7:df:d0:21:15:4c:5a:1a:cc:4e:f6:db:65:cf:8e:59:
         0e:77:69:34:06:a7:00:0d:84:3f:1c:c9:98:44:a9:79:23:9c:
         28:fc:83:dd:5b:d0:3f:f7:bb:02:51:d0:b2:80:7c:d5:96:e5:
         19:03:83:a3:0e:96:4d:71:f7:e3:12:e9:99:7b:eb:8a:a9:cf:
         b5:af:f2:62:4c:f4:fa:37:d4:50:05:93:04:69:a1:bb:98:f2:
         d5:77:2d:af:57:01:21:0a:62:e0:9b:6b:58:68:6c:bd:b7:36:
         3f:80:30:05:91:73:d6:4a:d8:55:90:5e:65:5a:9d:85:79:c6:
         9d:29:a8:87
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBbowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzU2
ODM5MDc3MTc2M0JCNjMxNDg0QkIxQkRERkFFNDg1OTZGNUNFMjAeFw0yNTAzMjkw
OTI3MzZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDNBNkI2NEEyNTc1RkFE
NDcyRTkwN0Y3NTFDRjAxOEU3OTc0NjFGMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4KmM4GRVxKgH42/hBjHDbNQfTJXrSO6eZUsOBBjFgYVjAQGIh
gIxpSxtGFrXGOoYIhLAudK3Wm842irvejdpmMxKa5/Oi0BWMAlIm6grF8LrH7YLh
IDlnc1V3QWV8c3l398zAXenwwQCu009YSTHzPSn/xKXrj+xlE3RqgWrOm+wy1Lmy
Ap/tXWlDCh8b6+5GcvftOHq+OWRanJa1E5isJaSgBwpmY4C+oxDfOU3HlfnQaG6i
BfaC82tGfyyRYJkjcWZ5Yt98J9nI73r03d6B2S4pqdfodiJ9rzxj6LEFQki9j4Va
pjJM10lm3XxOoXAJkIoA7+fiwc6jfAN/kCBJAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUOmtkoldfrUcukH91HPAY55dGHxYwHwYDVR0jBBgwFoAUxWg5B3F2O7YxSEux
vd+uSFlvXOIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5
MC94V2c1QjNGMk83WXhTRXV4dmQtdVNGbHZYT0kuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3hXZzVCM0YyTzdZeFNFdXh2ZC11U0ZsdlhPSS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTAveFdnNUIzRjJPN1l4
U0V1eHZkLXVTRmx2WE9JLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAAriXlrzadpVfZFlkT/9X1J49a/2WsZ6vCo7oUFcazGdls49WiVWmppP14sX
i5KOXl3ogyD/PFsYOE2RtGZ+Y6f5nvXecD3KM8f8UvNdL89p44dgVXG0Ni4+ZVb9
f4kv1RiRcmXXEuAzNGdunCsgHtNubmJMRfy9tQIb+RvwUtyZt9/QIRVMWhrMTvbb
Zc+OWQ53aTQGpwANhD8cyZhEqXkjnCj8g91b0D/3uwJR0LKAfNWW5RkDg6MOlk1x
9+MS6Zl764qpz7Wv8mJM9Po31FAFkwRpobuY8tV3La9XASEKYuCba1hobL23Nj+A
MAWRc9ZK2FWQXmVanYV5xp0pqIc=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:14 2025 by rpki-client