Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft
File:                     GubvWysCBd1fK0KBGsYIANaP1KA.mft (raw, json)
Hash identifier:          1qgNlF9MjxRyZcGDl95PL6aSmRORire7PvUnm6oh2JQ=
Subject key identifier:   41:8C:E5:76:B9:9D:09:44:43:58:38:0C:FC:60:C0:20:97:54:64:F6
Authority key identifier: 1A:E6:EF:5B:2B:02:05:DD:5F:2B:42:81:1A:C6:08:00:D6:8F:D4:A0
Certificate issuer:       /CN=1AE6EF5B2B0205DD5F2B42811AC60800D68FD4A0
Certificate serial:       0523
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft
Manifest number:          0523
Signing time:             Wed 18 Mar 2026 00:59:51 +0000
Manifest this update:     Wed 18 Mar 2026 00:59:51 +0000
Manifest next update:     Wed 18 Mar 2026 06:59:51 +0000
Files and hashes:         1: GubvWysCBd1fK0KBGsYIANaP1KA.crl (hash: tQh6eoPYrI6vDntqG8ktXSOTljc7VZ/tQ4vcVF5VvMs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1315 (0x523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AE6EF5B2B0205DD5F2B42811AC60800D68FD4A0
        Validity
            Not Before: Mar 18 00:59:51 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=418CE576B99D09444358380CFC60C020975464F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e2:40:9a:f8:12:e4:af:91:de:39:48:7c:61:
                    59:4a:26:ff:1c:35:d9:00:a7:47:dd:46:4c:c1:e0:
                    99:69:4e:e8:b1:ed:eb:8e:38:f5:09:9c:19:02:86:
                    90:ed:13:8c:09:75:46:c7:47:09:d3:93:c7:02:a8:
                    9b:58:c3:52:09:40:0d:28:22:58:8f:26:8a:ae:b3:
                    49:61:7c:ed:2e:31:d2:e5:0e:0c:c2:34:27:9c:7e:
                    ea:de:93:30:70:30:24:ab:25:fd:86:24:b3:44:1b:
                    eb:dc:bd:73:ef:41:5a:d9:82:5e:44:c9:10:52:60:
                    76:4e:43:e2:be:88:68:48:e5:85:07:3b:4b:37:fc:
                    ed:1e:d4:55:48:40:8d:f1:d2:e7:1f:76:01:2a:ae:
                    82:d4:dc:bb:3e:68:c0:a7:c9:46:72:4f:76:bb:07:
                    b1:a4:75:19:85:0c:a9:ea:cc:22:53:c8:be:34:bb:
                    1f:e7:1c:5c:1d:54:6d:a3:d2:68:03:cb:cb:76:2d:
                    44:e5:04:88:13:e7:f8:55:b7:fb:00:db:94:49:e2:
                    1b:23:48:0d:61:67:0c:8c:8a:2a:f9:73:cd:a2:24:
                    0a:e1:f1:94:bd:40:be:f9:21:25:fa:aa:9f:8d:9d:
                    a0:7e:65:79:02:d1:25:2d:88:af:5b:cf:37:cf:ca:
                    ff:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8C:E5:76:B9:9D:09:44:43:58:38:0C:FC:60:C0:20:97:54:64:F6
            X509v3 Authority Key Identifier:
                keyid:1A:E6:EF:5B:2B:02:05:DD:5F:2B:42:81:1A:C6:08:00:D6:8F:D4:A0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:27:1e:ba:a4:06:e3:73:26:8d:63:62:59:b6:56:de:4c:2e:
         92:71:00:35:ab:1c:da:6f:73:3d:17:b5:55:76:f4:47:5f:56:
         0d:79:5a:46:c6:7b:26:3e:c2:29:e7:bf:60:44:c6:98:b9:f3:
         30:a2:36:be:bd:69:36:b7:ff:b6:c0:75:33:cc:53:5e:3d:88:
         9b:86:3a:3e:e0:1d:68:1b:17:d4:97:d1:27:d9:af:25:ee:29:
         19:b5:f7:b6:7e:57:87:2c:56:df:c7:44:c1:73:01:17:52:b1:
         83:21:fd:5d:14:08:af:ce:8c:1b:b2:5f:fc:97:ff:31:e3:a5:
         c5:69:a8:34:00:39:7c:ef:c1:3b:02:d6:f2:ef:d2:40:e6:c8:
         85:fd:69:f6:12:86:99:7e:1b:9a:e4:11:85:d4:21:99:ea:c2:
         23:e3:88:4c:df:7f:9c:f9:37:f7:64:94:9e:dd:44:af:5e:d4:
         ca:dd:50:f7:38:21:e7:5e:bd:9b:1e:f4:d2:0d:dc:b8:46:0c:
         b0:5a:67:da:4f:5c:86:c5:c8:92:78:14:6d:5f:d8:f0:61:33:
         69:36:cf:42:6d:04:55:96:d0:8f:73:91:80:a4:14:88:2b:6a:
         bf:7e:ea:fe:c6:4b:96:a2:53:8f:92:ae:ff:4c:3d:f6:ee:9d:
         86:f3:af:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:14:41 2026 by rpki-client