Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/23/wMvSeKkeuDXc9AHfRczjD-cAVyE.mft
File:                     wMvSeKkeuDXc9AHfRczjD-cAVyE.mft (raw, json)
Hash identifier:          ioxQpsIDGXLcdmJFoIBoZGfoYE0id0B2CszCfXwRArA=
Subject key identifier:   6A:D8:91:BB:95:8F:7A:98:87:B1:A4:F2:7F:25:9F:C9:4C:44:0A:47
Authority key identifier: C0:CB:D2:78:A9:1E:B8:35:DC:F4:01:DF:45:CC:E3:0F:E7:00:57:21
Certificate issuer:       /CN=C0CBD278A91EB835DCF401DF45CCE30FE7005721
Certificate serial:       17F6
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wMvSeKkeuDXc9AHfRczjD-cAVyE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/23/wMvSeKkeuDXc9AHfRczjD-cAVyE.mft
Manifest number:          17F6
Signing time:             Sat 26 Apr 2025 14:36:42 +0000
Manifest this update:     Sat 26 Apr 2025 14:36:42 +0000
Manifest next update:     Sat 26 Apr 2025 20:36:42 +0000
Files and hashes:         1: wMvSeKkeuDXc9AHfRczjD-cAVyE.crl (hash: +C5ojY54kjiSaNL0vn2gznf90lo7248b5y9Kmx3Gya8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6134 (0x17f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0CBD278A91EB835DCF401DF45CCE30FE7005721
        Validity
            Not Before: Apr 26 14:36:42 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=6AD891BB958F7A9887B1A4F27F259FC94C440A47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:ad:ca:5b:c2:0c:0c:d3:27:fe:f7:e7:96:
                    17:6b:58:61:4d:96:7b:ef:75:65:c8:b2:ee:ba:d9:
                    66:5f:a7:0f:6f:63:a2:70:bc:50:44:44:2e:98:ac:
                    72:76:99:54:35:5c:dc:de:06:ce:9e:30:2c:17:da:
                    07:64:08:b7:1f:ef:09:b8:cf:ee:ed:46:d4:a3:b1:
                    5b:e8:72:7c:dd:82:a3:03:9d:08:27:b2:de:30:c4:
                    81:b7:c4:51:37:a6:04:81:65:77:67:47:cd:09:23:
                    0c:4c:06:9b:44:87:37:ff:df:43:9b:0e:33:83:5f:
                    9c:68:22:9d:38:5d:c1:91:65:4f:41:cb:a1:cb:41:
                    3a:68:de:3d:a1:88:32:90:f8:d2:9c:5c:53:8a:6f:
                    7c:25:e2:27:89:bb:53:a9:2c:6d:9a:34:49:b3:d2:
                    61:b5:a2:62:28:80:a0:d9:63:f1:a6:6e:4e:be:c0:
                    b9:ba:3f:dd:eb:35:2a:af:7a:50:02:df:38:f2:fa:
                    db:73:d2:44:a1:01:c0:98:1a:27:ad:22:9b:39:9a:
                    28:cc:86:bf:fd:b2:45:29:4d:9d:75:b7:f5:86:2f:
                    8a:72:95:18:bb:f4:1e:9b:44:88:60:f9:b7:26:29:
                    6f:a2:bc:83:02:57:95:e6:3a:1e:23:d5:2c:37:2b:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D8:91:BB:95:8F:7A:98:87:B1:A4:F2:7F:25:9F:C9:4C:44:0A:47
            X509v3 Authority Key Identifier:
                keyid:C0:CB:D2:78:A9:1E:B8:35:DC:F4:01:DF:45:CC:E3:0F:E7:00:57:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/23/wMvSeKkeuDXc9AHfRczjD-cAVyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wMvSeKkeuDXc9AHfRczjD-cAVyE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/23/wMvSeKkeuDXc9AHfRczjD-cAVyE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:bf:23:46:1a:97:d6:b8:62:75:8d:4a:a3:a1:7d:d4:6c:e1:
         c0:87:ff:40:ba:01:45:34:c5:1b:e3:c5:31:df:f9:68:ee:4d:
         ca:ed:92:d8:d8:b7:3f:e0:84:04:31:24:2b:3f:cf:f0:ad:a6:
         99:2a:e8:06:36:39:e3:8e:dc:c0:dc:7c:3a:1a:2a:90:4c:29:
         20:ec:f9:5e:11:52:86:8d:15:a8:7f:4b:09:b7:fa:26:0c:db:
         55:a0:c8:24:d7:5e:aa:22:5e:bf:4f:61:15:75:02:3d:e2:54:
         84:f0:76:32:80:ff:45:b6:d7:43:fc:81:20:38:c3:c6:2d:df:
         c6:3a:8f:6a:28:fb:a3:9a:ff:4b:0e:f4:ef:39:6c:f9:bb:a0:
         6d:52:e3:61:0d:9f:63:8c:1d:0e:dd:6a:5f:cc:c9:85:ba:19:
         f2:06:dd:08:12:4e:0a:7b:0d:25:e4:dd:21:7b:66:c8:14:4f:
         dd:41:77:ae:38:74:9d:73:53:5e:37:4a:9b:15:11:15:d1:99:
         14:4d:6f:ec:67:97:e4:67:18:ba:0c:2e:07:e2:47:1b:b6:1f:
         d3:47:e4:84:f6:29:86:a0:51:06:19:56:8a:46:14:eb:27:8d:
         0e:f4:04:5a:2b:9d:80:1d:3b:55:ec:36:71:09:98:a6:f8:1f:
         fe:5e:43:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:22:37 2025 by rpki-client