Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3337/VjBf8HDLOTCObGfBHw-2pS_W2zQ.mft
File:                     VjBf8HDLOTCObGfBHw-2pS_W2zQ.mft (raw, json)
Hash identifier:          BeB7seOnHHG+7586bzUnqM6jx0DmyMzZxefjgB1W0OQ=
Subject key identifier:   DF:1A:4B:E5:AD:A8:A3:7B:9E:4B:4C:15:AE:20:AE:3E:D8:D3:A5:5E
Authority key identifier: 56:30:5F:F0:70:CB:39:30:8E:6C:67:C1:1F:0F:B6:A5:2F:D6:DB:34
Certificate issuer:       /CN=56305FF070CB39308E6C67C11F0FB6A52FD6DB34
Certificate serial:       0175
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VjBf8HDLOTCObGfBHw-2pS_W2zQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3337/VjBf8HDLOTCObGfBHw-2pS_W2zQ.mft
Manifest number:          0175
Signing time:             Mon 17 Feb 2025 19:27:22 +0000
Manifest this update:     Mon 17 Feb 2025 19:27:22 +0000
Manifest next update:     Tue 18 Feb 2025 01:27:22 +0000
Files and hashes:         1: VjBf8HDLOTCObGfBHw-2pS_W2zQ.crl (hash: wpcnuf+azPgP8KS7uA4BCifHQFhMOgCZRYLBKEhqQ8E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56305FF070CB39308E6C67C11F0FB6A52FD6DB34
        Validity
            Not Before: Feb 17 19:27:22 2025 GMT
            Not After : Dec  5 02:28:39 2025 GMT
        Subject: CN=DF1A4BE5ADA8A37B9E4B4C15AE20AE3ED8D3A55E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:83:56:5c:22:40:1a:85:21:c6:22:dc:38:2c:
                    8a:30:3e:eb:51:6d:a8:d1:d0:a8:44:66:a9:53:94:
                    c0:bc:99:b4:da:aa:f3:13:85:36:46:b3:8b:4e:dc:
                    f7:18:b7:8a:e9:e7:cc:b0:3c:e3:d4:de:b8:67:23:
                    28:eb:f7:4c:c0:08:63:da:53:af:37:66:69:b7:64:
                    a1:81:d4:5f:17:f4:fa:c8:39:dd:6d:7c:42:ea:5e:
                    7b:52:f7:6d:68:7b:63:cf:b8:95:24:10:45:ef:d2:
                    65:49:ab:f8:fc:b0:8b:fa:8c:d0:eb:13:db:05:84:
                    f6:e8:45:ea:79:e5:ea:14:69:10:4b:b5:c6:f5:b8:
                    b7:b6:cf:f6:d6:ab:e7:58:41:6c:69:d8:b5:93:54:
                    62:bf:34:2b:23:1f:03:d3:14:fa:46:56:54:6b:3b:
                    78:a3:5a:ea:e5:4a:fa:50:e4:ec:88:a4:93:ed:97:
                    c8:cd:6a:81:42:db:14:6d:3d:1d:27:8b:c2:1a:92:
                    b4:98:d8:b9:98:41:fc:e9:5b:e7:b1:78:17:3a:b9:
                    96:b6:ea:be:93:6d:fc:3e:84:48:e4:80:5d:db:3d:
                    60:3c:20:89:e9:5a:0b:74:14:91:53:f0:13:97:b0:
                    e9:89:82:8a:c6:71:5e:1b:2e:0f:66:03:fc:d6:62:
                    dd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1A:4B:E5:AD:A8:A3:7B:9E:4B:4C:15:AE:20:AE:3E:D8:D3:A5:5E
            X509v3 Authority Key Identifier:
                keyid:56:30:5F:F0:70:CB:39:30:8E:6C:67:C1:1F:0F:B6:A5:2F:D6:DB:34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3337/VjBf8HDLOTCObGfBHw-2pS_W2zQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VjBf8HDLOTCObGfBHw-2pS_W2zQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3337/VjBf8HDLOTCObGfBHw-2pS_W2zQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:df:30:f9:e6:af:3c:4c:54:5d:88:2e:a7:25:5c:9a:38:56:
         e8:a2:8a:7a:52:b2:de:d2:66:ca:3c:23:dd:99:cf:fe:4f:33:
         8a:0f:c7:c1:9a:06:e1:62:46:b5:9b:1e:cc:a7:83:8d:e5:83:
         59:b6:c2:a4:6c:3c:0e:50:4e:5a:26:0d:99:ff:a4:98:d5:37:
         d9:b7:1b:fb:88:b1:fd:15:84:03:5a:fe:17:81:8e:66:1f:ef:
         6b:d0:13:3d:f3:6a:f8:60:13:db:a6:a2:f9:67:77:4e:1c:e2:
         dd:a5:16:1d:ac:2e:60:f4:fa:5a:f0:9c:59:af:43:1a:86:da:
         db:d7:2f:95:03:4c:b5:a9:e0:65:da:80:8c:5a:70:29:19:2d:
         d9:36:c2:63:bf:2a:26:ac:34:89:87:62:dd:29:2f:85:5e:15:
         1b:9e:1d:28:b5:5e:71:ab:fb:4a:1b:b8:a3:ba:29:f9:85:03:
         8c:a1:a6:33:ba:6f:5d:63:ec:07:1a:0c:eb:0b:15:65:d4:bf:
         13:e1:06:25:b8:82:f5:4d:23:8e:c6:71:ef:4b:a6:93:9e:f5:
         6c:21:0f:79:7e:59:c5:b6:18:d5:dd:ce:a1:61:31:21:bc:32:
         eb:29:64:8e:04:57:2c:c7:20:f5:27:74:0b:30:80:05:ea:a8:
         9d:42:65:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:16:33 2025 by rpki-client