Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3345/j-YA_2Nd9MNVGBnOzRZIJuoWZZQ.mft
File:                     j-YA_2Nd9MNVGBnOzRZIJuoWZZQ.mft (raw, json)
Hash identifier:          30EIkBYPl565bCiESSaso08nsy8asvdgkCyCLZH1HlU=
Subject key identifier:   63:66:43:5F:6D:5E:9E:C0:B9:35:A1:5E:F3:2E:D7:C9:41:AE:86:B7
Authority key identifier: 8F:E6:00:FF:63:5D:F4:C3:55:18:19:CE:CD:16:48:26:EA:16:65:94
Certificate issuer:       /CN=8FE600FF635DF4C3551819CECD164826EA166594
Certificate serial:       E9
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j-YA_2Nd9MNVGBnOzRZIJuoWZZQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/j-YA_2Nd9MNVGBnOzRZIJuoWZZQ.mft
Manifest number:          E9
Signing time:             Mon 17 Feb 2025 20:27:38 +0000
Manifest this update:     Mon 17 Feb 2025 20:27:37 +0000
Manifest next update:     Tue 18 Feb 2025 02:27:37 +0000
Files and hashes:         1: j-YA_2Nd9MNVGBnOzRZIJuoWZZQ.crl (hash: xdxyl7Yh5nq+1/P3WcfyupbdWO3tajcVAIiAKOZyFS4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FE600FF635DF4C3551819CECD164826EA166594
        Validity
            Not Before: Feb 17 20:27:37 2025 GMT
            Not After : Jan  2 02:11:12 2026 GMT
        Subject: CN=6366435F6D5E9EC0B935A15EF32ED7C941AE86B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f2:21:72:c2:04:1e:88:ee:77:6e:aa:c8:46:
                    46:fb:bf:69:8c:84:cc:15:f4:7a:07:ac:58:c2:05:
                    24:e2:be:98:8b:77:11:4f:21:90:27:b1:39:f8:5b:
                    43:3c:af:bc:31:83:b3:86:68:df:f8:70:22:30:82:
                    4e:e9:b0:c7:38:76:ee:6b:9e:c3:7b:f5:2c:ed:72:
                    7d:3c:ed:ee:8c:0e:db:77:44:cf:23:e1:e1:c5:77:
                    e2:1a:b4:de:01:13:9e:dc:a5:98:d2:9f:f2:90:2a:
                    d9:be:87:62:07:29:70:26:a9:e6:3a:de:7d:12:c4:
                    66:a1:40:3d:73:90:d9:de:5f:29:51:e8:31:a8:a4:
                    99:cd:d1:8a:69:d8:6b:d0:c1:ec:54:50:32:4d:ba:
                    c9:4c:66:8a:1f:3e:ab:79:ae:31:49:e2:d7:15:48:
                    eb:b3:66:ed:47:ff:87:a9:e8:60:13:ad:fc:78:c8:
                    db:6c:18:fe:97:4c:5f:92:f3:75:e5:b9:f8:b9:d4:
                    18:fb:5c:61:1a:d6:fc:e7:c0:8a:69:46:f8:21:28:
                    e5:66:df:b0:14:51:72:76:1b:e0:e9:83:96:23:d1:
                    a0:b1:8a:a5:15:15:9d:94:39:36:a8:aa:d7:13:15:
                    36:47:1e:37:be:77:74:66:61:35:64:6a:5d:92:40:
                    7c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:66:43:5F:6D:5E:9E:C0:B9:35:A1:5E:F3:2E:D7:C9:41:AE:86:B7
            X509v3 Authority Key Identifier:
                keyid:8F:E6:00:FF:63:5D:F4:C3:55:18:19:CE:CD:16:48:26:EA:16:65:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/j-YA_2Nd9MNVGBnOzRZIJuoWZZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j-YA_2Nd9MNVGBnOzRZIJuoWZZQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/j-YA_2Nd9MNVGBnOzRZIJuoWZZQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:9d:0c:a1:dd:1b:5c:0f:0c:56:e8:17:64:2e:ad:45:6e:c4:
         60:41:87:eb:04:d0:1b:3c:76:26:32:20:85:4a:53:af:fc:99:
         51:0d:0a:af:7d:18:fb:c2:59:55:16:4e:73:1e:79:a4:01:49:
         5d:64:38:bf:15:b2:be:c3:d1:c0:53:d1:f0:87:a6:38:00:96:
         37:0d:4e:e0:b7:88:b7:1b:d5:b6:51:da:c3:03:d4:07:7d:5c:
         23:66:ad:76:c3:b5:42:65:5d:0e:07:91:40:d1:85:7a:99:b0:
         3d:ed:3b:9a:58:e6:06:7d:3d:84:16:80:c3:dc:a0:ca:5a:da:
         88:62:38:74:fc:c1:ef:40:87:b1:66:84:b9:27:3b:70:00:d2:
         d2:26:08:ff:c9:72:23:05:0a:99:c3:af:c4:c3:97:62:59:07:
         b0:50:2b:93:ba:09:39:cb:d5:6d:64:ae:72:10:f3:16:ab:33:
         40:1f:4f:8f:10:70:5d:9b:90:79:4e:d6:4d:1e:df:3c:6b:d7:
         f6:be:c3:72:71:ea:08:28:24:2b:70:99:7d:39:c8:9f:5e:49:
         98:f0:79:dc:3a:c6:38:14:b3:8f:2f:a4:9b:94:dd:62:b9:47:
         e1:70:7d:7d:b3:1b:f4:7a:25:a6:5b:03:a8:7c:b9:a1:59:4d:
         25:e5:3f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 09:59:53 2025 by rpki-client