Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3294/V9fgeB2zyP-T6Dnqsn4DX09EurI.mft
File:                     V9fgeB2zyP-T6Dnqsn4DX09EurI.mft (raw, json)
Hash identifier:          Bat5iAqj6MuzjlXpZ+RrujncXE1Y62xfrVgjbglScDA=
Subject key identifier:   13:39:57:F9:74:E1:0B:EC:24:65:6C:FE:1F:9C:21:33:1D:81:13:62
Authority key identifier: 57:D7:E0:78:1D:B3:C8:FF:93:E8:39:EA:B2:7E:03:5F:4F:44:BA:B2
Certificate issuer:       /CN=57D7E0781DB3C8FF93E839EAB27E035F4F44BAB2
Certificate serial:       055D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/V9fgeB2zyP-T6Dnqsn4DX09EurI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/V9fgeB2zyP-T6Dnqsn4DX09EurI.mft
Manifest number:          055D
Signing time:             Fri 21 Mar 2025 00:31:28 +0000
Manifest this update:     Fri 21 Mar 2025 00:31:28 +0000
Manifest next update:     Fri 21 Mar 2025 06:31:28 +0000
Files and hashes:         1: V9fgeB2zyP-T6Dnqsn4DX09EurI.crl (hash: cu4fGll0r3lazhf1Thd+g9offOuFRgVy0SqgVzDDrjI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1373 (0x55d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57D7E0781DB3C8FF93E839EAB27E035F4F44BAB2
        Validity
            Not Before: Mar 21 00:31:28 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=133957F974E10BEC24656CFE1F9C21331D811362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:85:02:b1:02:a9:f2:44:90:32:6c:97:73:a6:
                    d0:02:8c:12:19:88:81:8b:72:c2:e0:25:c4:d1:d9:
                    c0:a6:6e:ab:5f:aa:c0:7c:8a:ce:52:5f:be:4c:09:
                    f1:64:c5:49:75:87:fb:b3:32:4f:d5:6b:e7:58:7f:
                    68:83:dd:63:97:77:51:b4:f8:2a:b6:b3:84:b8:ee:
                    d1:67:06:da:e2:aa:2b:88:ff:ce:f3:ba:dc:34:b1:
                    a6:f5:04:44:ae:f7:8c:93:00:50:23:67:69:d4:c7:
                    ee:51:ac:ff:e9:9f:c5:4e:f3:c8:e0:ec:c0:3e:8c:
                    a8:64:79:fa:a8:9f:e5:11:65:44:1d:75:c3:6c:58:
                    ae:12:35:94:5b:58:d7:cd:26:b4:e1:e6:93:fa:41:
                    a0:2c:31:f7:7f:bb:24:f5:a6:e4:b0:70:a1:3e:9e:
                    a6:a0:19:6d:b1:06:86:4a:fa:de:83:91:ee:6c:a6:
                    73:92:3d:ca:18:fe:73:49:fc:f2:4c:bd:92:4b:a2:
                    90:45:d1:85:84:c0:16:57:dc:3b:82:71:69:db:66:
                    c1:63:0e:65:05:21:5d:fd:80:fe:23:f6:c1:b0:d5:
                    99:56:16:a3:b4:e5:ae:07:9b:d6:15:7e:2f:99:d5:
                    51:ad:a9:56:17:f6:ae:fc:15:81:a2:25:1f:29:71:
                    2f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:39:57:F9:74:E1:0B:EC:24:65:6C:FE:1F:9C:21:33:1D:81:13:62
            X509v3 Authority Key Identifier:
                keyid:57:D7:E0:78:1D:B3:C8:FF:93:E8:39:EA:B2:7E:03:5F:4F:44:BA:B2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/V9fgeB2zyP-T6Dnqsn4DX09EurI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/V9fgeB2zyP-T6Dnqsn4DX09EurI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/V9fgeB2zyP-T6Dnqsn4DX09EurI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:78:60:17:43:09:20:e8:07:c5:00:53:02:f7:c0:08:b4:b8:
         61:b0:cd:54:fd:b9:88:b9:87:75:f1:cd:17:29:c8:b0:4f:6d:
         0c:d4:64:d7:b0:c6:b4:e0:b2:d5:20:4e:10:b7:6d:08:4a:4d:
         a1:26:84:00:2b:ec:b4:e2:09:84:ff:41:e8:96:b8:39:1a:32:
         13:74:04:e9:af:48:76:91:62:45:3a:5c:ee:c6:a5:98:11:b5:
         16:ae:63:13:f1:de:7b:ba:6e:7b:21:55:9a:54:d2:5d:d4:21:
         c0:30:77:af:f2:fd:57:ea:2a:1c:e7:a8:b0:48:f4:ea:04:53:
         2d:16:88:a5:1c:4b:a6:6b:9a:40:f4:1e:6f:ec:87:67:7b:06:
         bd:03:ab:24:7b:1d:6c:b0:cd:0b:b3:d4:5c:a4:5d:37:fe:47:
         3c:d8:c4:ac:39:48:62:ff:e0:c1:24:4e:fb:61:6c:32:7d:47:
         47:c5:0b:29:d5:d7:48:fe:a2:c5:9a:90:f7:60:9a:e0:4b:a2:
         e1:8d:d9:d9:80:b8:53:51:28:20:75:ba:fa:4b:17:b2:73:1c:
         35:41:35:39:30:ca:f2:0c:a4:cc:98:b3:90:8f:11:53:cf:9d:
         49:20:45:ec:58:03:6f:0c:83:e3:60:43:fe:df:d1:98:6b:66:
         e0:b0:78:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:32 2025 by rpki-client