Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3373/5g85izrHlIpRlL0UagWKQt9rtjo.mft
File:                     5g85izrHlIpRlL0UagWKQt9rtjo.mft (raw, json)
Hash identifier:          W2KIfi0Pyq+uZSD0jqmyYrvAvr5hSqWgs3OygKtHkdk=
Subject key identifier:   C2:49:B7:9B:19:35:03:F7:55:9C:F2:30:4A:85:5D:3D:2A:29:56:8B
Authority key identifier: E6:0F:39:8B:3A:C7:94:8A:51:94:BD:14:6A:05:8A:42:DF:6B:B6:3A
Certificate issuer:       /CN=E60F398B3AC7948A5194BD146A058A42DF6BB63A
Certificate serial:       06
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5g85izrHlIpRlL0UagWKQt9rtjo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3373/5g85izrHlIpRlL0UagWKQt9rtjo.mft
Manifest number:          06
Signing time:             Tue 27 May 2025 03:08:13 +0000
Manifest this update:     Tue 27 May 2025 03:08:13 +0000
Manifest next update:     Tue 27 May 2025 09:08:13 +0000
Files and hashes:         1: 5g85izrHlIpRlL0UagWKQt9rtjo.crl (hash: H9WY1a92k3GAO3SZhUW997G0pA5NETw/qPs3Ykykqr4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E60F398B3AC7948A5194BD146A058A42DF6BB63A
        Validity
            Not Before: May 27 03:08:13 2025 GMT
            Not After : May 26 07:04:52 2026 GMT
        Subject: CN=C249B79B193503F7559CF2304A855D3D2A29568B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:31:a3:83:b5:a3:a5:db:ef:c8:4e:a8:cb:26:
                    76:ca:f5:55:5c:fc:90:44:ce:1f:5f:74:c2:7c:71:
                    ae:e3:af:7f:e0:50:a1:e5:87:f9:c9:51:8c:08:cb:
                    9f:fa:ab:31:ff:38:21:f2:81:df:51:d9:29:ae:d9:
                    95:55:92:23:68:16:f6:c8:0b:44:66:c1:8e:b1:91:
                    4e:d1:3f:9b:b4:e7:fe:1e:90:11:1c:5b:0e:a4:a6:
                    b9:41:ba:c8:5d:1c:8a:13:f0:48:3b:3e:0e:f2:23:
                    8d:5b:8a:57:ae:a6:b8:79:c3:87:09:1c:81:f0:55:
                    24:3b:e0:cd:33:14:12:1d:42:85:75:01:0c:47:f3:
                    8d:70:a2:da:53:b0:2f:86:12:b9:d8:06:e4:36:fc:
                    ee:a7:9d:2b:93:68:55:f0:31:ba:f3:a6:f7:2d:ef:
                    05:90:08:e6:89:56:ad:9b:29:5e:49:c9:f9:2f:3d:
                    b3:b0:4e:a8:43:c2:8b:31:e1:14:b9:57:7a:61:ac:
                    e3:a3:13:a6:ab:17:dc:79:19:21:f0:56:aa:24:34:
                    81:e8:94:47:04:21:18:c3:fe:de:e0:97:55:7a:8c:
                    59:81:b7:a0:3f:dd:43:d9:d6:05:ae:e2:f8:0b:c0:
                    29:66:24:a6:9c:dd:19:34:5c:cb:e8:92:63:ca:59:
                    71:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:49:B7:9B:19:35:03:F7:55:9C:F2:30:4A:85:5D:3D:2A:29:56:8B
            X509v3 Authority Key Identifier:
                keyid:E6:0F:39:8B:3A:C7:94:8A:51:94:BD:14:6A:05:8A:42:DF:6B:B6:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3373/5g85izrHlIpRlL0UagWKQt9rtjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5g85izrHlIpRlL0UagWKQt9rtjo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3373/5g85izrHlIpRlL0UagWKQt9rtjo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:0d:43:e8:6b:dc:fb:10:12:d7:0b:23:16:4f:58:85:33:f4:
         ad:61:c4:ec:a4:ed:eb:01:b0:88:d6:1e:c3:4c:b8:a1:62:61:
         ea:2d:79:7e:83:b1:42:97:48:b8:48:4b:78:e3:bd:47:7f:c9:
         e2:e3:86:fb:ce:8e:7b:d7:f1:62:db:98:d3:5c:68:4b:7b:4f:
         c2:cf:b8:cc:ce:d0:f8:b0:75:d3:f0:69:47:94:cb:75:29:a4:
         da:dc:d8:bb:38:30:25:3e:a9:48:82:e1:7d:63:94:76:8f:f8:
         37:48:0f:16:76:10:cd:e4:f1:02:b9:0c:a5:96:e8:21:5c:56:
         b4:cb:4f:0d:60:f7:f2:6a:c1:af:19:27:6d:c0:f5:63:9a:c4:
         c8:2b:b6:00:e5:64:a5:8a:5d:22:59:4a:54:7c:7e:5d:85:58:
         1b:a6:d0:8b:c8:55:15:82:4b:e9:6d:b2:9f:a2:22:ee:02:4b:
         57:df:f6:9c:53:56:3a:df:f8:2d:df:15:a0:9c:ea:ec:49:a7:
         fe:83:20:a2:95:97:c0:e9:06:84:48:30:92:72:dd:c3:ff:ad:
         d4:9b:b5:f3:91:3d:cc:10:3e:f7:59:4d:91:17:0d:d2:b2:ad:
         e9:89:f3:c9:e4:fc:2a:25:46:2e:c3:0e:ab:a1:69:bd:82:f9:
         63:fa:e6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:55:41 2025 by rpki-client