Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3296/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.mft
File:                     Dyhlg1nJdzIhcfQCMyNCwx3XxW4.mft (raw, json)
Hash identifier:          WvqsX6yeoeiZd4GOjPM9z8tu+Wewy9IIDK9kL7Yky8E=
Subject key identifier:   94:4E:1C:38:AF:E2:E2:30:95:2C:64:88:E7:63:4B:3C:0D:46:DA:AE
Authority key identifier: 0F:28:65:83:59:C9:77:32:21:71:F4:02:33:23:42:C3:1D:D7:C5:6E
Certificate issuer:       /CN=0F28658359C977322171F402332342C31DD7C56E
Certificate serial:       06B0
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.mft
Manifest number:          06B0
Signing time:             Thu 05 Jun 2025 16:42:28 +0000
Manifest this update:     Thu 05 Jun 2025 16:42:28 +0000
Manifest next update:     Thu 05 Jun 2025 22:42:28 +0000
Files and hashes:         1: Dyhlg1nJdzIhcfQCMyNCwx3XxW4.crl (hash: 3c9vCIDaNYxQLjjNnCyqYlF/eoHasj8hsUi2oMI5Yp8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1712 (0x6b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F28658359C977322171F402332342C31DD7C56E
        Validity
            Not Before: Jun  5 16:42:28 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=944E1C38AFE2E230952C6488E7634B3C0D46DAAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b2:bf:39:ef:ea:19:21:97:bf:5d:97:ce:93:
                    81:d6:bf:9d:4a:29:d2:34:01:33:c8:a7:bb:48:af:
                    f2:bb:99:a9:7a:70:87:2e:53:bb:e2:64:38:38:ec:
                    52:08:cf:bd:d5:5e:8d:25:e0:84:7f:a1:07:46:1c:
                    32:52:cf:d6:e0:b3:ba:d5:f0:18:49:16:0d:ce:5d:
                    e2:ea:f5:b3:6a:28:c8:31:d1:04:b5:cf:2f:05:30:
                    93:4c:9c:21:98:42:d9:a2:35:08:65:c8:3b:02:20:
                    ba:01:e2:31:80:ee:1c:2d:50:1b:d9:18:e3:cb:42:
                    7a:ed:40:66:2d:b6:04:f7:06:a4:f2:df:a7:d4:d2:
                    47:af:a9:8b:72:90:bd:77:b9:92:e0:31:65:01:ad:
                    57:e8:be:7e:f6:0c:73:d5:39:e7:6b:2f:8a:52:50:
                    4d:7e:25:ba:da:e8:e4:94:03:8c:15:e0:ed:d8:27:
                    df:cf:40:c0:12:69:ed:58:fe:cc:8f:89:28:96:a9:
                    fd:46:15:0e:bd:40:b0:a8:d5:6e:b6:f4:51:7f:84:
                    53:f0:ca:fc:1d:7b:6e:09:71:67:bc:b6:b4:ab:3b:
                    cc:42:df:c3:23:1c:53:0e:09:8d:0a:f3:e5:ba:a1:
                    d3:f9:2d:22:6b:6e:27:41:91:44:20:85:96:3c:9d:
                    cf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4E:1C:38:AF:E2:E2:30:95:2C:64:88:E7:63:4B:3C:0D:46:DA:AE
            X509v3 Authority Key Identifier:
                keyid:0F:28:65:83:59:C9:77:32:21:71:F4:02:33:23:42:C3:1D:D7:C5:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:49:bc:e4:e1:89:35:5d:9b:90:40:9e:7b:75:00:91:ae:87:
         9d:16:0f:0d:26:fb:4f:31:1c:5c:c8:3e:3f:9a:df:d4:d6:72:
         08:ad:2f:d5:e8:7d:5c:98:b2:a3:12:a9:fd:3f:f7:3d:a2:0b:
         62:24:da:2f:18:63:31:82:18:68:8e:26:17:4d:c1:2f:8e:5f:
         4a:8f:fe:27:ba:b1:e2:22:72:41:57:c9:a3:c8:b9:86:fe:ed:
         d6:a7:b4:7c:b6:78:97:f7:2a:4b:e9:b1:be:a2:95:f8:ff:9d:
         3f:02:50:24:df:60:70:58:5e:e5:dc:c5:b9:8c:6d:46:f9:4e:
         46:0b:0d:f4:67:d2:56:85:1e:7e:97:2c:88:4e:61:7b:60:54:
         4a:79:1c:f7:1c:91:9a:13:54:50:30:e7:74:c6:18:04:35:4c:
         5d:73:4b:48:48:f3:8c:cf:ab:64:ce:cd:64:b2:3b:61:23:f0:
         07:32:35:1d:4d:69:64:9f:05:32:e7:ae:09:59:38:4b:42:b9:
         14:ae:2e:8b:a9:43:52:6f:f6:a3:ac:bd:a6:27:cc:c6:16:79:
         e3:e2:51:da:71:f1:79:df:db:dd:90:9e:15:0c:6d:21:50:c1:
         57:90:0c:5e:8b:ed:28:22:ae:80:d8:3b:d2:ad:cb:11:d7:67:
         02:ea:a0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:17:39 2025 by rpki-client