Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft
File:                     fCewZFm5zh-8LzSJoPxnKF1942A.mft (raw, json)
Hash identifier:          wnjsGWcONvxm9eJzEp94tUY6pex7YLpcfYs2TFjcRpQ=
Subject key identifier:   70:01:E5:87:1E:36:F7:31:E2:19:A4:80:CB:7C:61:AD:FD:6C:CD:6A
Authority key identifier: 7C:27:B0:64:59:B9:CE:1F:BC:2F:34:89:A0:FC:67:28:5D:7D:E3:60
Certificate issuer:       /CN=7C27B06459B9CE1FBC2F3489A0FC67285D7DE360
Certificate serial:       0555
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fCewZFm5zh-8LzSJoPxnKF1942A.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft
Manifest number:          0555
Signing time:             Sat 29 Mar 2025 10:27:08 +0000
Manifest this update:     Sat 29 Mar 2025 10:27:08 +0000
Manifest next update:     Sat 29 Mar 2025 16:27:08 +0000
Files and hashes:         1: fCewZFm5zh-8LzSJoPxnKF1942A.crl (hash: RVDsq2iVHNDIEOtQSERb+g2jkHBiTiLP1GS6MWDUzww=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1365 (0x555)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C27B06459B9CE1FBC2F3489A0FC67285D7DE360
        Validity
            Not Before: Mar 29 10:27:08 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=7001E5871E36F731E219A480CB7C61ADFD6CCD6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:80:90:72:05:4e:a9:49:22:a5:80:29:93:b0:
                    a0:68:a4:6f:df:bc:f8:b7:18:cf:00:01:5d:6a:82:
                    16:ae:f1:d2:95:e9:79:77:92:df:fc:8f:a9:12:04:
                    91:60:3a:ae:f4:81:f0:ee:0d:7a:d7:48:ae:56:43:
                    6c:7b:d7:51:d2:cd:c3:33:43:40:31:37:67:18:9a:
                    17:d2:1b:e1:bc:6d:f4:29:08:8c:be:cc:52:60:96:
                    cc:7f:f4:a8:c0:cf:6a:8a:b6:b4:7d:b2:9f:4a:fe:
                    0d:53:1c:b8:e8:80:ee:62:62:04:b6:12:bf:89:af:
                    ec:3f:ea:0c:fb:a5:38:bf:af:ca:f3:b7:1a:8b:a3:
                    0c:67:1d:27:d8:9f:9f:3f:5a:4f:50:cd:db:4a:47:
                    d0:c6:a6:05:b4:95:e1:a9:5b:55:04:d6:a8:da:d5:
                    ab:9e:fd:71:ab:58:ad:8e:ee:29:13:d2:7d:1f:22:
                    61:78:9d:bf:d7:34:5a:0f:ef:31:8c:df:47:1d:eb:
                    d7:bc:4f:03:d9:18:3d:a4:bd:b4:66:a4:b8:33:f9:
                    da:79:4d:75:f4:d3:40:6e:6d:1a:26:f5:71:fc:8d:
                    7d:8e:26:ca:a8:bc:39:5a:40:1f:34:da:79:c1:61:
                    87:0d:8d:1f:f7:d3:f2:06:8b:4b:90:5a:c6:53:75:
                    1b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:01:E5:87:1E:36:F7:31:E2:19:A4:80:CB:7C:61:AD:FD:6C:CD:6A
            X509v3 Authority Key Identifier:
                keyid:7C:27:B0:64:59:B9:CE:1F:BC:2F:34:89:A0:FC:67:28:5D:7D:E3:60

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fCewZFm5zh-8LzSJoPxnKF1942A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:9a:c2:e4:be:57:bc:89:ac:3b:0f:69:1b:f9:19:7b:97:2b:
         08:17:e1:10:06:2f:f1:83:2c:d3:42:68:05:b4:7b:14:c2:43:
         fc:56:84:8a:62:fd:70:4f:b8:25:3a:09:16:28:1e:8b:29:12:
         8f:d5:e9:84:ac:b8:b9:0d:dd:b5:d1:c4:a3:1f:d0:c4:88:51:
         80:88:33:48:4b:b6:69:e2:fd:74:4e:52:70:62:30:7b:09:52:
         e6:37:e2:21:30:f7:60:c5:bd:7a:ac:bf:0f:b0:26:31:e9:c8:
         12:3e:f5:23:41:7c:cb:35:3a:99:c6:18:3c:46:e2:51:6b:03:
         18:8c:17:ea:71:1b:85:1b:8d:52:20:7b:70:74:ec:da:4e:c6:
         c4:9e:09:d5:fd:c8:29:b5:35:31:b9:6f:a7:a7:7c:b2:26:d6:
         69:2d:c3:b7:79:4a:3b:69:02:69:1d:e5:1f:a3:ad:88:83:61:
         c1:25:b9:b1:3e:36:a3:36:0f:ff:61:bf:3f:a5:95:f9:53:f7:
         ff:0f:91:12:19:3a:4e:9c:84:61:bf:b3:da:4c:49:e5:e0:a9:
         98:13:bf:de:04:c8:b8:d9:ad:14:e3:42:7c:04:01:f9:e8:31:
         92:69:4a:5e:dc:4b:3a:3b:d4:88:a3:69:c1:1f:84:9e:02:e5:
         49:1e:db:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:31 2025 by rpki-client