Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft
File:                     O3WyLEecFpumBZHB3tRCDFNoHbo.mft (raw, json)
Hash identifier:          l4+eeeu6A+iCN8nOBZWTZi9RQFS7llVTmkLzpde/IrI=
Subject key identifier:   61:99:02:73:76:5A:15:69:FB:91:24:EC:D4:1D:1E:65:A3:BC:E2:4A
Authority key identifier: 3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA
Certificate issuer:       /CN=3B75B22C479C169BA60591C1DED4420C53681DBA
Certificate serial:       35C6
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft
Manifest number:          35C6
Signing time:             Fri 04 Apr 2025 19:06:21 +0000
Manifest this update:     Fri 04 Apr 2025 19:06:21 +0000
Manifest next update:     Sat 05 Apr 2025 01:06:21 +0000
Files and hashes:         1: O3WyLEecFpumBZHB3tRCDFNoHbo.crl (hash: MLZpFKqkNvuRXJlj72wXBGEWAZyopv79YEmlK8opDeU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13766 (0x35c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B75B22C479C169BA60591C1DED4420C53681DBA
        Validity
            Not Before: Apr  4 19:06:21 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=61990273765A1569FB9124ECD41D1E65A3BCE24A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:70:c3:51:fc:45:f6:3c:42:41:cc:6c:c6:
                    f6:3b:10:a6:ea:4b:8e:1f:ba:3c:c1:40:0d:be:20:
                    29:e6:25:c3:ca:cb:c3:76:ac:d2:25:66:29:21:46:
                    eb:59:9c:04:f5:69:a0:fa:f2:b1:89:20:64:58:c2:
                    5e:33:bd:dd:5f:69:6b:f3:f7:a0:79:01:9f:40:cc:
                    9f:b1:20:ea:97:1e:de:52:46:dc:2e:5b:be:59:77:
                    e1:1f:85:64:97:c8:5c:de:26:9e:79:50:a4:42:c7:
                    b0:05:b2:6a:7b:80:97:0a:00:0d:8a:64:a3:cd:8d:
                    5e:18:f5:6c:3b:7f:6f:27:5f:27:5d:42:99:f6:d9:
                    96:9e:11:90:35:96:31:9f:a2:5f:4a:3b:20:19:c6:
                    33:3a:1a:0e:4a:73:79:e5:75:75:9e:4c:9b:c7:c5:
                    d2:ae:88:5a:d9:98:aa:2b:6d:50:19:c7:bd:86:11:
                    fa:c6:05:27:aa:e9:15:56:e6:61:7c:63:07:53:6f:
                    5b:9c:99:0c:db:35:a5:78:b7:e9:1e:2f:6b:1d:6d:
                    e7:7a:ae:54:ba:24:fe:8a:ed:ad:90:21:a2:f7:15:
                    11:11:cb:4a:53:ba:79:08:99:27:53:ae:af:d2:aa:
                    e7:cb:25:89:ec:b1:50:fe:77:31:69:09:85:6a:6f:
                    07:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:99:02:73:76:5A:15:69:FB:91:24:EC:D4:1D:1E:65:A3:BC:E2:4A
            X509v3 Authority Key Identifier:
                keyid:3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b1:72:db:68:12:cb:64:a6:2d:f2:5e:0b:75:5f:ad:17:8b:
         26:4a:25:24:b6:7e:e3:9f:f3:65:7f:56:10:18:de:c0:60:e2:
         f2:da:14:9e:bf:96:75:20:94:62:59:00:f0:b9:9e:f8:2a:7a:
         f8:62:d9:68:8f:82:1b:5e:fa:0c:44:5b:1b:bd:cd:20:2a:79:
         12:a4:01:ca:70:3d:a1:ce:f9:70:8e:4c:b7:a9:d1:42:f0:36:
         de:cb:34:62:8f:be:ec:31:65:46:e3:d7:09:8a:11:12:3e:c7:
         c0:ab:3f:9f:a8:bd:fd:1a:9c:4f:35:df:9c:aa:b0:06:56:6d:
         52:ba:99:bb:56:e0:a5:5e:3d:03:78:2d:14:ae:de:35:92:bd:
         44:d0:3c:92:4c:42:07:26:45:a0:4b:d1:09:4f:25:70:02:27:
         29:4d:2e:10:8b:ef:37:41:e9:fb:f5:e3:79:3d:3b:c2:0f:7b:
         69:63:06:88:a7:7d:e3:78:00:54:58:4a:2e:2d:0d:df:02:8c:
         2b:60:03:a4:14:ba:94:f6:d0:23:69:69:ac:22:76:7d:be:11:
         0a:db:3d:65:5f:54:6f:e1:f3:66:0c:1e:b0:82:43:a6:9f:62:
         e2:46:89:3e:fd:0a:48:fd:ae:e8:b3:0b:c6:c1:c0:01:32:29:
         0d:0b:30:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:38 2025 by rpki-client