Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3301/d8dGei7gNDZsV_rH8mea6-bWobo.mft
File:                     d8dGei7gNDZsV_rH8mea6-bWobo.mft (raw, json)
Hash identifier:          AIH4J17NQjztcx73j1TyFkctGWCGJFI6aq6+eggjPL8=
Subject key identifier:   23:81:2E:6F:73:7D:32:E0:ED:69:64:01:B0:F6:7A:47:41:8B:C6:97
Authority key identifier: 77:C7:46:7A:2E:E0:34:36:6C:57:FA:C7:F2:67:9A:EB:E6:D6:A1:BA
Certificate issuer:       /CN=77C7467A2EE034366C57FAC7F2679AEBE6D6A1BA
Certificate serial:       0509
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d8dGei7gNDZsV_rH8mea6-bWobo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/d8dGei7gNDZsV_rH8mea6-bWobo.mft
Manifest number:          0509
Signing time:             Fri 21 Mar 2025 00:27:09 +0000
Manifest this update:     Fri 21 Mar 2025 00:27:09 +0000
Manifest next update:     Fri 21 Mar 2025 06:27:09 +0000
Files and hashes:         1: d8dGei7gNDZsV_rH8mea6-bWobo.crl (hash: r+yL5V6UC5ukMAEkfKuc/P8Yx6VYzbKYyoBJV16Ic0c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1289 (0x509)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77C7467A2EE034366C57FAC7F2679AEBE6D6A1BA
        Validity
            Not Before: Mar 21 00:27:09 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=23812E6F737D32E0ED696401B0F67A47418BC697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:94:3f:73:8b:b9:dc:95:55:ff:75:68:16:8c:
                    09:97:6b:a2:3c:81:ad:cb:cc:e7:58:64:76:9d:35:
                    e6:b2:48:af:9c:47:3a:9a:81:f5:f9:38:ea:9b:f3:
                    f6:e6:3f:03:61:fe:32:0e:71:31:26:19:c3:83:15:
                    ac:d8:5f:7e:a8:01:62:5b:5e:e6:16:a1:4f:e2:cd:
                    3f:b9:55:a7:9f:ac:3d:0e:c7:32:c1:58:ec:d8:d7:
                    aa:fb:75:da:d7:51:32:6b:75:6a:a6:92:2c:40:63:
                    f9:07:a5:dc:40:22:df:de:a0:4f:88:54:c4:40:4b:
                    bb:24:cd:63:db:e1:16:61:03:59:5f:13:e7:d4:fa:
                    d0:88:32:01:d2:8c:61:b7:fe:3b:12:b0:a1:35:78:
                    ae:2f:1a:26:eb:e5:dc:2d:3f:59:2f:e5:8c:48:19:
                    1e:76:a4:9d:8f:e3:47:6f:e7:aa:be:44:2b:92:24:
                    20:0d:14:7f:20:aa:aa:66:31:84:13:62:d2:1a:3f:
                    e4:ab:74:fd:8f:4a:cb:03:93:f7:4c:49:09:ae:c1:
                    6c:b3:c5:f8:42:ba:34:83:21:bd:69:41:93:e5:52:
                    2d:f5:07:62:6f:3d:f8:83:40:0e:07:f0:13:fc:a4:
                    6d:07:d9:69:58:59:bc:b2:ae:78:87:6b:47:c8:1f:
                    a0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:81:2E:6F:73:7D:32:E0:ED:69:64:01:B0:F6:7A:47:41:8B:C6:97
            X509v3 Authority Key Identifier:
                keyid:77:C7:46:7A:2E:E0:34:36:6C:57:FA:C7:F2:67:9A:EB:E6:D6:A1:BA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/d8dGei7gNDZsV_rH8mea6-bWobo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d8dGei7gNDZsV_rH8mea6-bWobo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/d8dGei7gNDZsV_rH8mea6-bWobo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:0d:49:7f:a7:64:54:99:99:95:ed:0e:51:01:05:90:f5:3c:
         93:b8:b9:ce:a9:a5:94:7d:3d:a5:59:7e:0c:50:36:b9:e8:7e:
         0d:f3:64:7e:33:3d:9f:66:5a:18:ea:8d:0c:41:0b:27:99:6c:
         6e:12:45:6b:a4:4d:44:f6:d0:36:4b:4f:2d:fa:40:e0:9e:66:
         09:cb:2e:6f:7c:bd:e9:24:eb:7b:8a:95:10:e1:a1:c3:87:12:
         23:11:40:13:df:e6:ad:d5:af:fe:1b:18:56:36:e7:ec:c0:51:
         21:c2:82:63:12:cc:a9:fb:e9:ac:f9:fd:49:06:0f:50:9e:21:
         1c:68:c4:bb:de:2d:fa:26:0f:92:68:e6:e1:25:2a:de:26:53:
         39:1d:57:76:df:93:71:0b:44:7a:cd:db:d3:c2:70:7a:7f:5e:
         fa:27:be:3e:65:8f:dd:83:2b:fa:51:13:05:c1:df:12:44:f9:
         54:12:6a:17:3f:6d:1d:d7:e0:42:b3:62:e3:b5:33:ba:d1:24:
         d0:51:97:32:df:81:04:88:62:75:82:cc:46:e1:20:c6:b7:51:
         30:3b:c2:a5:09:31:9d:dc:81:f1:a9:28:85:6b:e4:1b:10:8e:
         91:be:88:6d:17:3f:8e:4d:07:8d:4e:04:8b:d2:df:b0:35:47:
         0d:16:9f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:11:07 2025 by rpki-client