Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft
File:                     bHGFaWGICFmFIGtbw8RT4SftD94.mft (raw, json)
Hash identifier:          n6paC9t3DL0x5mijuZRMZzqF/HRVD5Pt6Bg3W17KnfE=
Subject key identifier:   EB:D0:97:5A:7B:EC:69:43:E8:DF:59:34:27:6D:EB:7E:DD:3A:0A:2D
Authority key identifier: 6C:71:85:69:61:88:08:59:85:20:6B:5B:C3:C4:53:E1:27:ED:0F:DE
Certificate issuer:       /CN=6C7185696188085985206B5BC3C453E127ED0FDE
Certificate serial:       03B2
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bHGFaWGICFmFIGtbw8RT4SftD94.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft
Manifest number:          03B2
Signing time:             Thu 05 Jun 2025 16:44:04 +0000
Manifest this update:     Thu 05 Jun 2025 16:44:04 +0000
Manifest next update:     Thu 05 Jun 2025 22:44:04 +0000
Files and hashes:         1: bHGFaWGICFmFIGtbw8RT4SftD94.crl (hash: ufQ7JceaRhfXIXEoHuXMaQcn5gh1DvhIk6QAPR7LHSU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 946 (0x3b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C7185696188085985206B5BC3C453E127ED0FDE
        Validity
            Not Before: Jun  5 16:44:04 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=EBD0975A7BEC6943E8DF5934276DEB7EDD3A0A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:94:43:31:63:6a:f6:8a:7d:c3:cf:84:c1:85:
                    81:04:6f:3d:bf:3a:c9:34:64:5f:2b:3f:24:76:db:
                    0d:dc:01:fe:7b:bc:11:e5:2d:5f:3b:de:e7:87:14:
                    70:a5:35:bf:7d:29:a0:b8:16:16:5d:de:ad:c3:b2:
                    0f:0f:39:ff:1d:32:0d:f4:c5:6f:19:9e:62:c9:d6:
                    90:bf:33:57:c3:60:ea:8b:06:54:6f:5f:31:7a:9d:
                    de:68:26:c3:2c:d2:5a:e0:9e:d8:c7:b6:8f:90:e1:
                    97:29:7b:aa:28:8b:1d:e1:0c:4c:50:f9:cc:a0:6b:
                    d3:a6:a3:23:63:09:e9:4f:7d:0e:de:19:0e:76:00:
                    4c:17:04:d5:35:3e:3e:87:20:1c:46:bf:ca:34:b4:
                    9d:40:af:26:97:9e:8c:24:31:54:59:8e:6c:04:59:
                    fe:c1:05:dc:1d:d3:6e:47:8d:55:7a:d6:45:87:b1:
                    e8:f3:84:03:47:4a:60:83:e1:d4:c4:c8:81:e5:e9:
                    ed:b5:20:e1:03:87:7d:5d:13:89:77:3d:81:a6:14:
                    06:b3:c4:92:09:8a:e2:76:28:48:b9:2e:b3:61:85:
                    c0:dd:96:22:bf:85:d3:cd:7a:9b:e0:55:c5:6c:8f:
                    1b:86:69:74:8e:f5:90:5a:7c:89:2e:95:76:b3:60:
                    6b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D0:97:5A:7B:EC:69:43:E8:DF:59:34:27:6D:EB:7E:DD:3A:0A:2D
            X509v3 Authority Key Identifier:
                keyid:6C:71:85:69:61:88:08:59:85:20:6B:5B:C3:C4:53:E1:27:ED:0F:DE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bHGFaWGICFmFIGtbw8RT4SftD94.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:30:f4:16:50:de:35:30:4c:8b:67:47:4e:96:97:64:fb:db:
         55:40:cb:97:44:ce:05:aa:d0:fd:3a:0b:64:b8:77:d1:c2:e8:
         01:8a:1d:e6:29:43:52:db:89:c3:34:59:56:e1:c6:ac:3b:3d:
         9d:1c:c8:e3:69:a3:96:95:64:4f:d3:92:0a:52:5a:18:7f:2c:
         41:78:78:0a:89:74:f1:df:d1:d4:c0:e0:ac:b1:17:41:6b:8e:
         5d:df:2f:a5:ea:74:73:af:78:8c:76:6e:23:b6:5d:a9:a6:67:
         4a:e1:fe:9e:10:3b:8b:a3:33:f3:41:5e:c4:a1:ec:fa:0d:c9:
         c2:be:e3:75:1c:b9:e9:cb:61:15:78:be:28:ae:51:56:af:23:
         07:b5:cd:ad:72:e7:0c:07:b5:46:f1:bf:90:50:50:b0:8d:f9:
         be:a9:9d:7e:6c:60:46:6c:7c:4f:f2:75:f1:6d:50:d5:c9:f6:
         fe:28:74:09:66:b1:7d:8a:51:ad:43:06:d2:6d:b5:b1:ce:12:
         38:5b:87:4b:a4:4a:42:56:b1:b8:fc:eb:07:b6:c2:ea:a9:f0:
         c3:12:50:e7:7e:47:df:b4:86:ff:f2:1b:91:7b:d8:d7:f1:fc:
         da:3d:e2:98:25:5a:61:4f:af:b9:e0:c7:f4:58:27:83:01:bc:
         be:cd:8d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:09:14 2025 by rpki-client