Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.mft
File:                     cpmiC6yLYYyo2Ezz_N9swmyV_iw.mft (raw, json)
Hash identifier:          tyOYEe4lcx8zjmzEKIhHQzML7Qsqem78sD5vAf4r3I8=
Subject key identifier:   C9:3F:2E:53:87:A0:22:2D:27:A2:4B:D4:D7:AC:B6:00:9A:49:9D:BB
Authority key identifier: 72:99:A2:0B:AC:8B:61:8C:A8:D8:4C:F3:FC:DF:6C:C2:6C:95:FE:2C
Certificate issuer:       /CN=7299A20BAC8B618CA8D84CF3FCDF6CC26C95FE2C
Certificate serial:       019C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpmiC6yLYYyo2Ezz_N9swmyV_iw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.mft
Manifest number:          019C
Signing time:             Mon 17 Feb 2025 19:27:19 +0000
Manifest this update:     Mon 17 Feb 2025 19:27:19 +0000
Manifest next update:     Tue 18 Feb 2025 01:27:19 +0000
Files and hashes:         1: cpmiC6yLYYyo2Ezz_N9swmyV_iw.crl (hash: 7gtho2HiLKvN+d0Rmh7cjSD35T+PnIt2avUDa/7tTkM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7299A20BAC8B618CA8D84CF3FCDF6CC26C95FE2C
        Validity
            Not Before: Feb 17 19:27:19 2025 GMT
            Not After : Nov 27 00:59:02 2025 GMT
        Subject: CN=C93F2E5387A0222D27A24BD4D7ACB6009A499DBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:78:69:0c:54:06:49:2c:cf:ed:c9:48:01:
                    3b:b7:d3:9b:4d:80:cb:34:32:c2:96:28:be:e7:b4:
                    c1:c4:85:d2:e0:cd:84:73:a2:b1:31:5e:38:59:85:
                    e8:98:ac:3c:17:10:8c:1e:5f:53:b7:4f:de:f5:29:
                    d6:e0:43:a8:03:32:54:a8:3f:83:66:fb:a5:49:04:
                    4a:2d:6a:75:26:44:7b:b7:69:60:f8:66:08:80:03:
                    3f:61:64:c0:fd:bd:ab:ef:e0:69:8f:26:28:f1:19:
                    a0:a9:2a:1b:14:d6:68:05:5c:73:8a:93:04:b9:4d:
                    a0:70:f7:54:a4:c8:9a:c6:94:52:1c:70:8d:b4:9a:
                    5f:b9:46:47:1a:e8:91:12:84:b0:ed:e2:2c:72:ba:
                    e4:ee:de:0a:2a:f8:26:51:ea:1d:9d:50:24:ca:f5:
                    95:17:5a:6b:6f:fa:47:04:04:5e:b0:a1:05:28:f5:
                    3c:27:e8:6b:e9:f8:16:24:08:4d:52:71:ce:04:b2:
                    cd:69:6f:b3:90:3b:dd:0a:54:ba:60:82:72:fa:42:
                    3f:65:87:18:7f:88:99:8a:10:a5:7a:f0:0c:47:dc:
                    d0:40:9f:68:b1:e2:34:eb:90:cb:bf:b3:79:f7:fc:
                    54:cf:b5:13:55:14:26:a7:6f:4c:de:4a:dc:31:6d:
                    2d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3F:2E:53:87:A0:22:2D:27:A2:4B:D4:D7:AC:B6:00:9A:49:9D:BB
            X509v3 Authority Key Identifier:
                keyid:72:99:A2:0B:AC:8B:61:8C:A8:D8:4C:F3:FC:DF:6C:C2:6C:95:FE:2C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpmiC6yLYYyo2Ezz_N9swmyV_iw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:04:d6:07:67:42:30:09:ec:42:20:a4:38:26:18:8a:e5:29:
         f4:21:7b:25:c4:42:86:7d:e3:a1:95:b1:69:13:2a:6a:47:e6:
         40:61:9f:29:36:9a:9d:45:ab:17:dc:36:b2:dc:b4:ee:9a:a6:
         6c:0a:74:58:16:29:fb:40:2e:e7:e9:dd:0e:58:d6:39:d0:74:
         99:10:46:ab:04:b1:36:05:d0:2b:0e:8a:cb:80:a5:ea:a6:8c:
         13:35:70:8a:9f:31:59:23:ef:6f:c7:1b:a2:68:de:32:95:3d:
         4c:48:a3:e0:86:1d:1d:a2:8f:8b:e2:ed:f1:2c:d9:bc:97:86:
         21:1c:5f:45:25:ca:da:d0:29:06:ed:ca:55:f6:a2:77:4c:2c:
         1a:b7:f8:f9:9a:0d:73:ee:92:4f:03:3d:0a:51:c8:e8:79:1c:
         ea:3d:eb:7b:c1:35:46:fa:37:1c:97:e3:d0:6e:5a:de:85:2b:
         40:1a:af:3b:5a:b8:02:af:e8:be:d5:04:aa:69:e9:c4:38:7f:
         0b:d6:35:9f:23:1a:8e:d0:06:0a:a8:5c:ec:db:94:a7:2e:79:
         76:74:a2:63:49:b6:bf:8c:a5:f2:15:a0:60:77:2e:a0:f6:68:
         82:42:47:4e:84:eb:c1:54:c6:05:35:97:a2:ea:5b:b3:4b:10:
         60:88:7e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 03:54:15 2025 by rpki-client