Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3291/VcshVVaSGcfkAyzP1XcyETxW-rA.mft
File:                     VcshVVaSGcfkAyzP1XcyETxW-rA.mft (raw, json)
Hash identifier:          IQy65+xoYQEmocxhu8+nOqj6eIWkbFQVOhqH/S0WIHs=
Subject key identifier:   B8:0E:48:B3:A2:CA:D3:76:77:7E:B2:AA:70:1A:BF:6E:57:3B:63:6D
Authority key identifier: 55:CB:21:55:56:92:19:C7:E4:03:2C:CF:D5:77:32:11:3C:56:FA:B0
Certificate issuer:       /CN=55CB2155569219C7E4032CCFD57732113C56FAB0
Certificate serial:       0572
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VcshVVaSGcfkAyzP1XcyETxW-rA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/VcshVVaSGcfkAyzP1XcyETxW-rA.mft
Manifest number:          0572
Signing time:             Fri 21 Mar 2025 00:30:09 +0000
Manifest this update:     Fri 21 Mar 2025 00:30:09 +0000
Manifest next update:     Fri 21 Mar 2025 06:30:09 +0000
Files and hashes:         1: VcshVVaSGcfkAyzP1XcyETxW-rA.crl (hash: YFiO+YRo2+Ouz6Sdm+ekEmhncn28AIPSIic46wqc2b0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1394 (0x572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55CB2155569219C7E4032CCFD57732113C56FAB0
        Validity
            Not Before: Mar 21 00:30:09 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=B80E48B3A2CAD376777EB2AA701ABF6E573B636D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c4:6b:c7:ab:44:88:e3:21:ac:55:cf:3b:0f:
                    72:fd:99:eb:d1:92:00:0f:5d:83:0c:54:cc:6a:93:
                    ae:b6:3a:01:04:5a:11:92:e2:f9:dc:d5:35:94:38:
                    93:23:b0:ff:26:58:6d:1b:99:bb:4c:5e:df:e0:f5:
                    98:74:20:31:fa:ca:d3:c2:3e:5a:b7:26:fc:56:63:
                    03:65:bd:f0:5a:42:b0:fe:dd:52:c6:3e:da:bc:ba:
                    2c:8a:9d:cb:10:41:33:83:d0:0f:aa:e7:06:21:81:
                    3b:61:a7:59:06:1d:ad:f4:e5:f5:c0:7e:c1:2f:cb:
                    4f:0d:82:70:43:11:47:9b:e8:a2:00:78:90:20:a8:
                    82:fe:a3:c3:a5:45:b2:0e:cd:38:a1:b1:68:fd:d6:
                    74:65:b3:7b:4c:d4:ea:b0:f6:d8:1e:a1:24:26:ef:
                    42:c5:71:8d:c8:dd:6d:c5:b7:73:ae:a4:4e:89:81:
                    74:ec:23:6d:ee:13:86:7b:3f:b2:a6:90:a3:6d:d9:
                    d6:2f:2d:58:dc:b8:38:e8:66:3d:e8:15:ec:8a:d3:
                    de:32:50:81:c5:59:0d:be:9a:ed:ac:52:2c:b2:7b:
                    1f:0d:5b:4e:71:70:44:5b:48:7e:d3:08:08:5f:25:
                    da:a1:12:cd:a9:aa:ee:f8:17:00:d9:d4:b1:5e:44:
                    20:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0E:48:B3:A2:CA:D3:76:77:7E:B2:AA:70:1A:BF:6E:57:3B:63:6D
            X509v3 Authority Key Identifier:
                keyid:55:CB:21:55:56:92:19:C7:E4:03:2C:CF:D5:77:32:11:3C:56:FA:B0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/VcshVVaSGcfkAyzP1XcyETxW-rA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VcshVVaSGcfkAyzP1XcyETxW-rA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/VcshVVaSGcfkAyzP1XcyETxW-rA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:0a:af:19:8c:d9:81:72:ee:22:1b:03:95:b5:7a:ca:1c:93:
         94:19:b9:26:0b:8e:a1:17:1b:e3:98:a5:5e:5a:c5:62:52:c8:
         d2:8c:72:91:c0:e6:3f:c7:9a:06:2d:78:48:a8:ed:90:99:9e:
         1c:9c:c0:7e:a7:02:a0:e5:25:fb:4e:c6:14:e9:ce:de:ad:b7:
         2b:35:4e:09:d6:88:0c:6f:fc:98:03:e7:d1:cd:75:3e:23:fd:
         db:e0:eb:fc:91:5d:7e:16:b2:ca:f7:c0:30:82:af:83:3f:8e:
         6c:d4:3b:d9:30:4a:3f:99:43:96:8a:37:4b:ae:8b:73:b9:d3:
         b2:cc:ff:d6:72:22:59:7b:38:9b:76:fa:3b:b3:61:9f:0a:76:
         0a:fc:53:66:c5:e8:bd:7b:a8:63:24:00:57:a7:06:4f:ee:89:
         e5:a3:c8:76:52:07:44:d1:bd:fc:e6:9a:ce:82:b4:be:d1:88:
         e5:b8:5c:19:34:7b:fa:95:0e:dd:f1:c7:cb:23:a5:63:45:fb:
         c2:5a:e3:2d:a4:c4:85:91:de:93:cd:76:2c:fb:73:ec:77:c7:
         01:4e:b0:fd:44:27:60:40:39:d3:bc:98:c0:ef:bd:db:e7:aa:
         c7:4d:3e:72:09:6a:f7:9f:cb:02:53:fa:68:eb:c4:9f:c6:1f:
         e4:94:1e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:01 2025 by rpki-client