Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft
File:                     v53ECbEbmTO6Vq39mHrqjUQseeY.mft (raw, json)
Hash identifier:          y5znhwwQ2xZBc5fbHIEZRqnc8PPkl6dmipgavb+BN40=
Subject key identifier:   F8:E2:2E:50:F9:3E:41:5F:34:59:D2:35:81:18:CB:2C:26:31:0B:8E
Authority key identifier: BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6
Certificate issuer:       /CN=BF9DC409B11B9933BA56ADFD987AEA8D442C79E6
Certificate serial:       01CB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft
Manifest number:          01CB
Signing time:             Thu 05 Jun 2025 13:39:14 +0000
Manifest this update:     Thu 05 Jun 2025 13:39:14 +0000
Manifest next update:     Thu 05 Jun 2025 19:39:14 +0000
Files and hashes:         1: v53ECbEbmTO6Vq39mHrqjUQseeY.crl (hash: ZkWG9zCnCMCauDtr5naq3PL0x+/uzERKJWY8aM6DKd8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF9DC409B11B9933BA56ADFD987AEA8D442C79E6
        Validity
            Not Before: Jun  5 13:39:14 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=F8E22E50F93E415F3459D2358118CB2C26310B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cf:77:2d:29:68:98:00:29:fe:22:7e:7d:b9:
                    3a:e9:2b:47:d5:25:b3:7f:94:ee:92:e0:3d:94:40:
                    25:7f:40:5d:2e:bb:c1:fa:cd:e2:64:93:ee:a0:1d:
                    21:33:4e:76:b5:7e:71:6c:39:77:d8:56:9b:1a:3a:
                    ac:e1:95:97:b5:d7:9f:c4:04:05:c6:d8:6d:46:e5:
                    b1:85:ef:64:e5:f8:2d:1e:00:b4:79:cb:c3:86:73:
                    0a:05:36:dd:c5:67:41:83:03:df:ef:fe:9e:14:e7:
                    1d:d0:a3:50:3d:77:a7:ca:73:d8:53:48:71:d5:76:
                    a0:dd:b9:cb:6a:82:db:3b:82:c7:33:8d:b6:42:2c:
                    cb:05:ca:e4:95:b7:9f:fd:64:a4:7b:d9:dc:21:5b:
                    ee:0e:b2:d8:0c:81:b5:98:55:41:90:b2:cd:d4:35:
                    68:1b:5b:38:63:03:b8:5b:0c:a3:ba:e3:94:fd:c8:
                    ae:81:69:50:99:9c:b9:cd:7f:28:14:d6:b0:60:9a:
                    9f:25:35:77:fa:63:91:5c:5c:cf:a3:25:97:2f:0e:
                    5d:f1:8a:68:49:0b:94:89:74:0e:c7:ce:77:9c:8a:
                    84:14:46:4e:56:ee:f9:e4:4b:1c:d1:3c:df:94:e4:
                    8b:c8:ce:ae:af:7b:80:34:ff:6e:8a:de:a2:b3:10:
                    e7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E2:2E:50:F9:3E:41:5F:34:59:D2:35:81:18:CB:2C:26:31:0B:8E
            X509v3 Authority Key Identifier:
                keyid:BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:de:8f:9a:cc:f2:fc:c5:01:ca:08:a3:3b:c8:02:0d:2f:23:
         18:65:b1:9a:7a:85:e5:17:b0:39:d1:fa:30:03:eb:08:e7:02:
         8e:72:fc:a5:1f:38:89:6e:f7:bd:04:ab:f9:ea:4b:b2:68:38:
         87:b4:b8:55:d4:c0:a1:e0:c4:b1:d9:32:3e:f0:56:87:d5:21:
         2a:9e:8e:41:83:48:78:11:b8:f8:2b:92:cd:a9:62:22:ea:29:
         cb:ef:4b:44:64:e5:d4:d9:50:4a:fd:1a:e7:79:65:49:0d:9e:
         e9:b9:f5:bb:af:d8:f0:85:e9:c7:d2:5f:04:d8:1e:e8:37:64:
         89:2b:03:3a:fc:97:c9:52:1b:dc:39:5b:7a:87:12:65:74:07:
         03:93:86:e4:2e:8e:56:56:48:d0:8c:4c:6a:dc:52:4a:48:d6:
         87:16:9f:0a:5a:9d:93:0a:dd:96:c5:3d:96:15:02:b4:e9:62:
         e6:ad:1f:6c:bd:e1:cf:4d:3e:ac:57:c0:d7:ee:17:87:46:a0:
         88:24:b7:21:16:2f:70:3c:f3:d4:14:a6:ad:9f:d0:ec:96:89:
         ab:88:72:3d:88:22:af:3e:4c:92:07:53:8b:8c:80:0f:1d:d3:
         ce:6d:57:08:da:86:c3:ac:77:4e:2e:64:f4:6e:9a:37:d8:34:
         e7:94:46:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:24:19 2025 by rpki-client