Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft
File:                     SUSbRsrs510cVYBhOU20ArbQCb4.mft (raw, json)
Hash identifier:          7ZtZNU02tGwm6u3y1IjuR5y14TdKOE844X6n04GRlAM=
Subject key identifier:   64:D4:85:8D:6B:95:A7:BB:F9:F5:8A:6E:82:24:FE:0E:8A:BF:61:96
Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE
Certificate issuer:       /CN=49449B46CAECE75D1C558061394DB402B6D009BE
Certificate serial:       1E14
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft
Manifest number:          1DD4
Signing time:             Sat 26 Apr 2025 14:37:21 +0000
Manifest this update:     Sat 26 Apr 2025 14:37:21 +0000
Manifest next update:     Sat 26 Apr 2025 20:37:21 +0000
Files and hashes:         1: 6Cg7vrfLUbx1bEkIDCoYYjgRMz4.roa (hash: jvxNASBJ8HYeMGwdmuE0Do8y27av35KDualjxDl1ZZc=)
                          2: ATDiQVa7Jj6pl5_4jJGxxS0F_7s.roa (hash: BCuFDNtjX7hVl/3kgchlrCUKd45djLfUOZoxOoF5UZE=)
                          3: BsKRKSP14HMV2MuJplyiqG8gZe8.roa (hash: UZCCmKzoNzVaF2WPr86X28fx6/jvUYBNDRxL0CpmKdU=)
                          4: EwjhYV-CmPQQud2H6Crvi5nsZSM.roa (hash: MQr8WPZZ5OJm434/duoDl2GetDpNQEyk5dgxTJcEf9Y=)
                          5: LGzL1dFEcgx2HvjRnHZUEaqM0a0.roa (hash: VXfqzQ0y8qqt7GB0EUujrXiDsSRGCYb15YbbiSOlh0M=)
                          6: SUSbRsrs510cVYBhOU20ArbQCb4.crl (hash: dzn80j0n3PuCHXXBJkXiopjBNmmlRNaq3c6deUeOUw4=)
                          7: TNM0bOx89sqLGF8ArkipUAnlSkI.roa (hash: QWfrGSwlS5yPilKaM/EJFjH27owGMxOaXZC8OOAcQgI=)
                          8: X4JvVuGdcXsbxEDv2fu1SDsj7-o.roa (hash: nS17ZYrG5GzmGNKneTnDmM0UG1AAyXiPtyrsoY0sJ8s=)
                          9: bgutjGAyJGJRePju94GFjM0Usg4.roa (hash: hepbNeV+GkI0UGcTbTCzuchd2lmlX9j9lBveUHGi5Zg=)
                          10: ewPuzfo9SfVGDnCVq5QDcf5FnRc.roa (hash: 58YVeTq2wuprv93yVJiYQlI6hmLc19F2MhjQwYFdoH0=)
                          11: f0ZGUO9bch1Jbut4POBt4zNBCHQ.roa (hash: HGksMQn/YUxBt47YKCnsegoZZk895LLzuOqfQcOcZp4=)
                          12: fKRKWoNVHasenYqVwcXvWJub9rk.roa (hash: eci49L3yuoD5uSyBYLh0DekEYnElRTpgQGCzlKAVBPc=)
                          13: pz76TCk7H2wZdRts-v6maSBGQ8U.roa (hash: K3HUiDbVrYBIfzs+mzByHwCzFokHC+XMNvlObDassGU=)
                          14: wLav8diVujIwKx1aw07gOQsWsL4.roa (hash: DyvLuJFL609u79QsP8lUNkZDdfhgx1CbYAFHu7rGoFo=)
                          15: wtvTPuhmzVJCd_X7b2rh9ryeHF8.roa (hash: l8TmmsUONvk+RcsfGvugUdYcEvXw0az+pgPY+bq0Rko=)
                          16: zlTbfC8OutzwAyWNWihTKaBFQHU.roa (hash: CF6792H/L28ug8uEoZfWiV67r6POVtN9sNK2zJHxNEI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7700 (0x1e14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE
        Validity
            Not Before: Apr 26 14:37:21 2025 GMT
            Not After : Apr  9 06:41:08 2026 GMT
        Subject: CN=64D4858D6B95A7BBF9F58A6E8224FE0E8ABF6196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d4:f5:c0:ae:a2:40:72:b9:e9:14:9c:0e:27:
                    46:5f:84:d5:95:35:96:1c:2d:fe:c1:e3:69:f2:e1:
                    70:84:14:e9:c2:67:ff:96:04:2a:7a:46:37:a3:30:
                    20:90:11:51:e0:42:a4:26:b2:b7:7d:17:1c:76:12:
                    48:a3:8f:a3:66:5e:aa:b1:a1:c1:dd:e4:7a:7e:4d:
                    84:ed:84:e8:87:49:59:03:71:a1:24:47:9e:d7:07:
                    9b:95:ae:f8:c8:3c:bc:77:d3:6d:0b:e2:1e:56:2c:
                    82:60:be:11:dc:ee:79:ee:cd:97:c4:46:d4:64:1b:
                    68:0d:11:81:5e:11:2e:c8:d2:21:63:d9:9e:c7:54:
                    bb:e1:a7:16:1d:0e:94:74:3c:f9:4b:10:3b:43:eb:
                    6e:d2:77:7f:57:46:42:57:e1:44:67:99:04:44:9e:
                    23:46:2c:08:ce:34:8a:60:5c:10:7a:eb:55:15:13:
                    7f:4d:d8:7f:f8:e5:e8:38:31:fc:bd:1b:31:7c:4e:
                    b7:9d:9b:e2:25:26:7f:8e:22:a0:8c:e4:09:5e:8c:
                    0a:e0:40:a5:0b:e3:2a:83:85:54:b0:6b:12:43:10:
                    24:9e:a0:b7:b7:86:c3:f9:73:27:d7:36:54:59:23:
                    c3:f9:34:a6:99:6e:a4:d2:a3:ce:12:bf:2e:cd:2c:
                    b3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D4:85:8D:6B:95:A7:BB:F9:F5:8A:6E:82:24:FE:0E:8A:BF:61:96
            X509v3 Authority Key Identifier:
                keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c4:f9:e9:9b:ae:bf:56:38:64:da:98:70:4b:88:7d:09:02:
         e5:dd:0b:2d:52:5c:f6:7b:22:77:8b:6b:bb:ff:37:c8:a1:5f:
         5c:64:ac:b5:73:af:76:e8:4e:2e:66:a9:52:3e:57:a9:85:b6:
         dd:64:31:0b:12:8f:1d:27:80:0e:6a:25:89:97:9d:5c:21:d4:
         e6:31:b6:24:f0:26:51:10:8e:88:a2:f0:37:ca:15:e1:e1:27:
         d0:a8:07:93:49:0f:08:cc:14:ec:f0:2f:35:e4:70:b2:cd:50:
         c7:2c:bd:b6:e6:1d:9d:5d:ba:4b:b9:9b:b1:14:15:6a:40:d9:
         06:33:89:22:41:74:25:6c:85:cb:cc:7c:86:4e:0e:cd:5c:a9:
         7f:31:08:f9:b9:b8:48:11:76:38:db:8f:74:54:43:f4:98:85:
         93:2a:eb:f7:ab:02:ec:9b:21:bf:a5:6b:28:61:f6:a2:78:b4:
         74:4d:f8:f0:54:f2:a8:da:24:08:69:0d:23:b7:50:2f:55:fd:
         b6:b5:85:d7:36:a9:bd:6a:fd:95:c4:7a:01:61:34:ca:ef:82:
         e8:7d:b3:53:bc:97:fb:86:78:72:4d:5a:ed:34:46:30:80:16:
         3f:38:6f:2f:f3:f8:3a:e0:0b:45:74:bc:24:9e:34:a4:4d:32:
         0a:e5:3e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:16:12 2025 by rpki-client