Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3323/FHL6rKoK1qRgcZi5A594VETZ_WE.mft
File:                     FHL6rKoK1qRgcZi5A594VETZ_WE.mft (raw, json)
Hash identifier:          zBcTjczQHL6JhivTslk7Ge6tdWaFbNhXpWS9NgDKgro=
Subject key identifier:   C9:4D:4D:8C:A9:58:E4:B9:90:E9:7A:0B:CF:0C:E4:7B:3B:BF:A0:67
Authority key identifier: 14:72:FA:AC:AA:0A:D6:A4:60:71:98:B9:03:9F:78:54:44:D9:FD:61
Certificate issuer:       /CN=1472FAACAA0AD6A4607198B9039F785444D9FD61
Certificate serial:       0303
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FHL6rKoK1qRgcZi5A594VETZ_WE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/FHL6rKoK1qRgcZi5A594VETZ_WE.mft
Manifest number:          0303
Signing time:             Fri 21 Mar 2025 00:31:18 +0000
Manifest this update:     Fri 21 Mar 2025 00:31:18 +0000
Manifest next update:     Fri 21 Mar 2025 06:31:18 +0000
Files and hashes:         1: FHL6rKoK1qRgcZi5A594VETZ_WE.crl (hash: yeyuMSyHv1Edln1CxGWQkRQuWEcMCJAd/5Y9Vl7KGF8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 771 (0x303)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1472FAACAA0AD6A4607198B9039F785444D9FD61
        Validity
            Not Before: Mar 21 00:31:18 2025 GMT
            Not After : Oct 16 11:48:52 2025 GMT
        Subject: CN=C94D4D8CA958E4B990E97A0BCF0CE47B3BBFA067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:36:a1:c8:83:f6:a3:0b:72:71:9c:63:5c:08:
                    c3:f1:eb:d9:be:56:84:cc:ac:90:be:c9:30:bf:e0:
                    3a:e4:73:d7:ab:7f:8b:e2:aa:05:d0:ad:4f:6d:34:
                    0f:9a:6b:81:38:df:04:b8:a8:15:fa:cf:13:2a:09:
                    d6:56:fe:e5:81:7b:4f:81:41:48:77:05:c9:82:51:
                    e2:d7:89:ec:67:1d:f1:05:e5:3a:f7:0b:13:87:bc:
                    9a:1c:a8:08:91:1d:4a:63:7c:6d:23:21:73:68:3d:
                    72:ea:54:b7:5a:2f:d3:b5:14:6f:db:67:d8:e1:43:
                    9f:3e:51:be:be:fe:08:a9:4f:49:2f:ff:c4:f5:91:
                    3f:b4:fa:ac:69:db:0c:7b:bb:ce:48:a8:bc:b3:58:
                    13:32:11:4b:61:91:be:75:8c:cc:77:0e:59:f1:e8:
                    d6:9e:ac:45:a5:c5:7a:02:1e:3c:bd:b6:45:79:ca:
                    f7:b5:f2:11:94:6c:2e:fb:5e:b9:94:8d:42:c2:65:
                    c1:a6:6b:63:12:07:4c:b5:0c:67:b5:01:3c:5b:2f:
                    7b:1a:cd:e4:3a:80:76:ce:29:37:8b:60:6a:11:4f:
                    76:23:22:44:fb:2e:65:ee:57:f6:bb:9d:23:f2:83:
                    eb:91:45:fd:0e:0b:1c:c6:e0:f3:e8:34:f5:98:b4:
                    df:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4D:4D:8C:A9:58:E4:B9:90:E9:7A:0B:CF:0C:E4:7B:3B:BF:A0:67
            X509v3 Authority Key Identifier:
                keyid:14:72:FA:AC:AA:0A:D6:A4:60:71:98:B9:03:9F:78:54:44:D9:FD:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/FHL6rKoK1qRgcZi5A594VETZ_WE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FHL6rKoK1qRgcZi5A594VETZ_WE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/FHL6rKoK1qRgcZi5A594VETZ_WE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:6d:f8:e2:be:b7:6c:37:19:8c:ba:9c:c1:c3:ab:58:31:2c:
         ae:26:50:d0:2f:c1:e4:e5:c9:af:0a:e6:a8:29:d6:e1:51:98:
         2b:3b:2f:11:34:fc:b8:81:10:39:7b:dd:a3:ca:c2:9a:05:c5:
         73:a0:53:1d:93:2c:4f:f9:f2:92:6f:2c:f7:77:11:7a:6f:47:
         c8:f7:3a:55:08:2a:dc:59:db:d7:7b:bc:51:86:b3:02:76:4c:
         01:a4:e2:6f:81:53:29:eb:9d:fa:9d:48:02:73:c5:3e:d3:fe:
         36:29:26:99:9b:2b:04:c7:b8:24:0a:06:29:2c:d6:ca:a7:7c:
         9c:20:d6:e0:4e:51:8e:42:ba:cb:71:4b:84:0d:4f:bf:81:a3:
         ed:76:ad:1a:67:d5:85:5d:cc:8b:d0:81:8b:f2:b2:dc:78:27:
         12:af:79:19:34:16:64:4b:a8:a1:a7:14:10:80:4f:95:5e:36:
         85:2d:c4:36:14:0d:09:47:a0:11:fd:16:da:1d:c2:7e:22:52:
         3a:da:bb:6a:3a:f4:32:37:85:df:8d:56:a1:9e:26:00:fd:65:
         61:3f:04:b7:64:d3:7e:f0:c5:1b:d2:2b:46:1b:b4:10:f3:d8:
         b9:4d:ed:5a:1b:87:0d:42:6a:34:c6:49:62:15:d6:85:e3:c6:
         47:ea:85:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:10 2025 by rpki-client