Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
File:                     vevthkDLplk9qfmj3SKNOJEkWOo.mft (raw, json)
Hash identifier:          GAyq7Y4goVg21WRaa2i/cb5NAw51pZLLjMqb7vM2xZ8=
Subject key identifier:   E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Certificate issuer:       /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial:       6C15
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
Manifest number:          491E
Signing time:             Sun 15 Jun 2025 07:25:45 +0000
Manifest this update:     Sun 15 Jun 2025 07:25:45 +0000
Manifest next update:     Sun 15 Jun 2025 13:25:45 +0000
Files and hashes:         1: C0D6CXYS2dOxG-_2oFtn5DMJLs0.roa (hash: lqFhg7neDUr+koiH/n+ugzqzMQG4VLa29UXJJCpIoCo=)
                          2: uVgk8t-O2k60XCEaCsMauOlrBAo.roa (hash: owHUj/RmYqUVmV7ohWesDrEdgk+fQY/BCNEPtGgDvC4=)
                          3: vevthkDLplk9qfmj3SKNOJEkWOo.crl (hash: eD2qphqcclRbl2LZaB+teHZy7WY3nChxppQG4vsw3Og=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27669 (0x6c15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
        Validity
            Not Before: Jun 15 07:25:45 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=E892465B0A4F35613D692B3B68536E8EC10E0BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2f:d1:e8:f6:24:57:3c:ef:97:6d:d5:2b:6c:
                    a0:43:f7:62:68:e2:1a:b2:45:65:5e:23:9b:ef:ef:
                    6f:f8:4f:e5:a0:c5:16:77:ae:b9:40:6d:d2:ec:5d:
                    e8:22:56:4e:fb:f3:2c:d2:21:f5:4c:e2:31:de:06:
                    74:58:9c:d1:2c:39:10:7c:8a:23:b3:4d:7b:a7:fe:
                    aa:4a:f0:65:09:b9:5b:b2:09:d3:01:18:53:fc:2a:
                    f1:cf:04:ed:ed:09:eb:7a:94:4a:8f:e7:76:d8:7c:
                    74:e3:f8:2d:52:45:b0:57:fc:8f:5d:ed:fc:ab:86:
                    4c:1a:d4:e7:24:b7:00:86:7d:89:b0:2a:df:0b:ab:
                    21:f8:b4:42:82:cd:ed:c4:73:34:ee:9f:c9:84:2c:
                    3b:49:c6:b8:64:46:8f:82:9b:c8:80:ed:4f:05:7c:
                    d3:e0:23:00:7d:52:4b:26:12:68:09:26:58:58:70:
                    45:bf:d7:26:7d:05:7f:60:d7:79:78:7b:49:0f:ed:
                    42:71:86:b3:fe:5f:7b:e7:42:fa:6e:e8:76:8c:0c:
                    95:8b:59:fb:88:e9:4a:6a:f2:12:bb:78:82:36:ce:
                    e9:40:51:2f:09:2c:a5:c8:6c:2b:fe:61:5b:54:e4:
                    4a:c0:cd:b3:ac:60:48:f5:bd:2a:93:0a:fc:aa:ad:
                    8e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3
            X509v3 Authority Key Identifier:
                keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:64:bf:48:8a:ee:80:b4:0d:e9:23:e8:f1:f3:7b:13:a4:cf:
         f3:f3:ac:7f:d3:f1:96:0f:e5:18:3a:4c:15:61:9a:15:d8:63:
         98:e4:1f:96:58:e1:e1:42:bf:a4:32:1f:d1:f3:c6:bc:94:12:
         cc:9a:9e:0d:78:49:8f:b0:87:98:51:2f:3a:50:9d:95:b5:d1:
         3e:32:6a:92:ce:c5:ba:de:d7:e0:4f:bd:5d:0b:b6:4c:19:92:
         74:0b:ee:f7:38:8f:c9:a2:86:aa:7a:fa:37:6b:fd:4e:f9:9a:
         bb:62:4b:eb:0a:d4:57:19:4e:28:f8:29:1b:21:a5:7f:34:25:
         d4:ea:26:ee:d0:34:b9:35:e2:4b:18:17:70:9a:40:59:ba:a1:
         32:89:d8:7b:22:4c:f2:d9:b6:f2:5b:8c:e7:a2:89:c5:d8:08:
         b3:5f:4d:de:37:2d:99:f2:b9:3a:73:ff:73:ac:8a:cb:73:f2:
         0b:c9:3d:eb:e3:77:ce:6b:3d:39:46:4f:31:b9:48:a7:e4:b8:
         16:df:56:7f:07:c3:13:bd:6b:9e:1e:25:4b:64:0a:8a:4d:0b:
         8d:35:64:1e:00:97:f4:45:80:b1:49:62:ad:77:43:08:9d:b5:
         a9:fd:0b:fc:af:23:51:0e:79:85:33:49:8d:5b:e3:f3:2f:bb:
         63:e2:3a:ce
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICbBUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MTUw
NzI1NDVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEU4OTI0NjVCMEE0RjM1
NjEzRDY5MkIzQjY4NTM2RThFQzEwRTBCQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7L9Ho9iRXPO+XbdUrbKBD92Jo4hqyRWVeI5vv72/4T+WgxRZ3
rrlAbdLsXegiVk778yzSIfVM4jHeBnRYnNEsORB8iiOzTXun/qpK8GUJuVuyCdMB
GFP8KvHPBO3tCet6lEqP53bYfHTj+C1SRbBX/I9d7fyrhkwa1OcktwCGfYmwKt8L
qyH4tEKCze3EczTun8mELDtJxrhkRo+Cm8iA7U8FfNPgIwB9UksmEmgJJlhYcEW/
1yZ9BX9g13l4e0kP7UJxhrP+X3vnQvpu6HaMDJWLWfuI6Upq8hK7eII2zulAUS8J
LKXIbCv+YVtU5ErAzbOsYEj1vSqTCvyqrY79AgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQU6JJGWwpPNWE9aSs7aFNujsEOC7MwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3ZldnRoa0RMcGxrOXFm
bWozU0tOT0pFa1dPby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBwZL9Iiu6AtA3pI+jx83sTpM/z86x/0/GWD+UYOkwVYZoV2GOY5B+WWOHhQr+k
Mh/R88a8lBLMmp4NeEmPsIeYUS86UJ2VtdE+MmqSzsW63tfgT71dC7ZMGZJ0C+73
OI/Jooaqevo3a/1O+Zq7YkvrCtRXGU4o+CkbIaV/NCXU6ibu0DS5NeJLGBdwmkBZ
uqEyidh7Ikzy2bbyW4znoonF2AizX03eNy2Z8rk6c/9zrIrLc/ILyT3r43fOaz05
Rk8xuUin5LgW31Z/B8MTvWueHiVLZAqKTQuNNWQeAJf0RYCxSWKtd0MInbWp/Qv8
ryNRDnmFM0mNW+PzL7tj4jrO
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:21:11 2025 by rpki-client