Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/46/WEWiGKzSkgohXNUjz5m9fdFBmd8.mft
File:                     WEWiGKzSkgohXNUjz5m9fdFBmd8.mft (raw, json)
Hash identifier:          59MNepVqkbEFdyXraSRlbCj7eGUlADFvJUw4colx/gY=
Subject key identifier:   8B:23:8E:98:D0:AF:FA:52:2B:6A:A3:F8:6D:1B:6F:38:A5:7F:69:6C
Authority key identifier: 58:45:A2:18:AC:D2:92:0A:21:5C:D5:23:CF:99:BD:7D:D1:41:99:DF
Certificate issuer:       /CN=5845A218ACD2920A215CD523CF99BD7DD14199DF
Certificate serial:       140D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WEWiGKzSkgohXNUjz5m9fdFBmd8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/46/WEWiGKzSkgohXNUjz5m9fdFBmd8.mft
Manifest number:          140D
Signing time:             Sat 29 Mar 2025 10:28:24 +0000
Manifest this update:     Sat 29 Mar 2025 10:28:24 +0000
Manifest next update:     Sat 29 Mar 2025 16:28:24 +0000
Files and hashes:         1: WEWiGKzSkgohXNUjz5m9fdFBmd8.crl (hash: ZmsNvXAzRxg1/qp0Rs+CmzqoMfUj3XdRPMGGVySr4iI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5133 (0x140d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5845A218ACD2920A215CD523CF99BD7DD14199DF
        Validity
            Not Before: Mar 29 10:28:24 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=8B238E98D0AFFA522B6AA3F86D1B6F38A57F696C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1f:c3:d2:d1:63:06:a5:17:b9:e4:84:4d:c3:
                    8b:18:8c:dd:20:47:fa:5b:81:cf:c2:f3:3b:7b:0a:
                    d9:26:8a:30:f2:94:35:3e:4e:3a:51:03:10:c8:7b:
                    99:f3:ea:a0:0a:62:f3:98:c4:e6:5a:2e:0a:dc:3e:
                    2b:06:85:4e:01:c2:45:39:39:9c:f4:f5:de:d6:79:
                    20:9b:47:2b:a2:e4:ef:87:ee:c0:2b:7b:29:f5:9e:
                    28:82:b8:5f:40:0b:b3:5a:3b:83:94:b9:65:89:b7:
                    11:00:3d:f4:ed:58:29:ef:b8:e7:57:9e:8d:af:e4:
                    42:1c:3d:b8:82:bd:be:ca:19:e8:ec:47:ba:ed:ef:
                    26:be:4c:7a:0d:11:04:fb:99:ed:c8:28:7b:67:fc:
                    78:49:eb:ae:0a:da:a9:43:ab:01:b6:ed:33:70:11:
                    99:1c:01:50:05:64:b0:3f:24:a0:53:ed:fd:c5:37:
                    61:cd:62:e6:aa:12:b7:ec:f4:99:82:04:6a:b0:c4:
                    cd:a0:2b:71:dd:84:9c:c5:37:95:2b:94:aa:35:06:
                    44:5c:02:54:53:5e:13:9e:44:f2:b4:14:2b:6d:6c:
                    74:cf:47:5f:16:fb:94:45:7d:34:68:ba:cd:32:cc:
                    ff:38:c3:16:09:08:73:6d:a5:1c:5f:24:b6:5d:8a:
                    fd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:23:8E:98:D0:AF:FA:52:2B:6A:A3:F8:6D:1B:6F:38:A5:7F:69:6C
            X509v3 Authority Key Identifier:
                keyid:58:45:A2:18:AC:D2:92:0A:21:5C:D5:23:CF:99:BD:7D:D1:41:99:DF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/46/WEWiGKzSkgohXNUjz5m9fdFBmd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WEWiGKzSkgohXNUjz5m9fdFBmd8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/46/WEWiGKzSkgohXNUjz5m9fdFBmd8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:85:ef:15:97:67:1c:64:72:d2:da:fd:3f:cb:3b:61:6d:eb:
         07:34:d8:d3:14:97:28:f3:7e:d5:d6:e6:ef:aa:d5:a6:e2:f7:
         b7:2f:69:14:6e:fa:3c:09:ba:b2:c1:19:99:b3:c5:b0:30:89:
         1f:8a:ac:73:63:2f:f7:d4:f3:52:fd:11:bf:38:51:f0:8f:01:
         e2:c3:90:b3:bd:89:4e:27:90:4d:04:82:92:b8:ea:d7:05:dc:
         23:7e:5d:32:91:da:07:7d:bb:ba:cc:93:47:ee:ef:1b:77:e6:
         58:a8:fc:2b:ab:95:2b:92:b7:a0:ce:bf:97:20:bc:73:34:07:
         24:ad:6b:f2:e0:e7:05:84:dd:a2:ee:b9:db:e1:5f:1a:f8:9a:
         55:63:b2:08:2b:18:49:55:e2:e1:bc:23:bd:9a:f3:ec:76:08:
         1b:27:8e:86:d5:a7:ac:86:ca:e3:5b:c9:e0:3e:cb:57:f3:72:
         44:a5:8f:53:88:b5:f4:6a:24:11:4a:ec:90:eb:f3:41:71:54:
         09:c3:43:71:ac:c3:3d:2a:3b:bb:ab:df:d2:df:1f:26:8c:98:
         c1:67:6e:12:f2:1b:68:25:c6:6c:dd:d3:01:80:29:92:c2:e2:
         b3:fa:ea:c8:54:0a:fc:79:61:7d:d7:16:c4:5e:ee:55:2d:1f:
         e5:d0:9f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:46:15 2025 by rpki-client