Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft
File:                     UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft (raw, json)
Hash identifier:          AiZCJ2MYTrqGLi5SJABaqBHjHv2NMCyfDv0xcpXefBE=
Subject key identifier:   08:D4:14:59:3F:3D:C6:9E:2F:07:0F:CA:2F:84:00:7D:00:76:19:11
Authority key identifier: 51:EA:B2:8F:23:8F:D7:40:7C:2F:66:39:60:48:9D:D6:D9:51:DA:74
Certificate issuer:       /CN=51EAB28F238FD7407C2F663960489DD6D951DA74
Certificate serial:       3140
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UeqyjyOP10B8L2Y5YEid1tlR2nQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft
Manifest number:          3140
Signing time:             Sat 26 Apr 2025 13:10:25 +0000
Manifest this update:     Sat 26 Apr 2025 13:10:25 +0000
Manifest next update:     Sat 26 Apr 2025 19:10:25 +0000
Files and hashes:         1: UeqyjyOP10B8L2Y5YEid1tlR2nQ.crl (hash: JGqFlCXnjVAFqUHEUhN6/0WKdJnl6z+MsnwP1yxBkdY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12608 (0x3140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51EAB28F238FD7407C2F663960489DD6D951DA74
        Validity
            Not Before: Apr 26 13:10:25 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=08D414593F3DC69E2F070FCA2F84007D00761911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:17:2a:8f:06:e1:ae:0c:1c:3b:78:88:4e:d3:
                    ca:38:21:47:26:7c:7d:0f:c0:b3:c3:90:a9:d0:63:
                    c8:23:3c:2b:af:71:3f:50:04:09:b0:ae:cb:2b:5b:
                    ae:d9:aa:b3:2a:a3:fc:82:51:0e:c0:09:a9:a9:24:
                    c2:3c:b7:e2:78:40:dc:6e:46:ce:b2:bc:ec:e2:66:
                    4a:d1:22:9e:1d:1a:03:6f:0d:7b:a8:e2:3f:5e:ee:
                    97:86:12:6e:bc:49:b9:2e:48:82:71:cd:1c:f9:9f:
                    5e:c7:9e:0f:fd:7e:b2:35:d2:0d:16:3a:4f:a5:c2:
                    17:fb:fd:37:ad:00:45:88:a9:86:d8:85:00:00:c2:
                    cc:aa:83:2f:cf:75:5c:d4:02:43:8e:f3:a9:53:b2:
                    9c:0d:81:b4:63:24:6a:0a:6d:ae:bb:ae:5d:be:3e:
                    23:21:ce:52:9c:be:1e:b0:72:94:a6:b5:90:25:c2:
                    71:ee:44:98:22:64:26:c8:1a:e6:3c:81:fb:63:25:
                    f3:88:17:e0:b4:f1:7b:88:ed:eb:66:bc:8d:a2:d2:
                    1c:99:7a:3e:db:ed:48:98:00:a8:4e:8d:64:08:31:
                    3d:6d:f8:9b:7a:03:f2:dd:86:9a:97:93:c6:f3:86:
                    c6:a7:32:59:5f:bb:5c:9b:2d:52:75:ab:1b:23:02:
                    07:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D4:14:59:3F:3D:C6:9E:2F:07:0F:CA:2F:84:00:7D:00:76:19:11
            X509v3 Authority Key Identifier:
                keyid:51:EA:B2:8F:23:8F:D7:40:7C:2F:66:39:60:48:9D:D6:D9:51:DA:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UeqyjyOP10B8L2Y5YEid1tlR2nQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ef:74:c8:cf:58:9c:de:50:53:3f:03:42:bb:09:3a:e5:48:
         1d:4d:45:43:76:77:81:8f:21:58:21:50:78:b2:8d:dd:af:fb:
         f3:95:a2:0c:32:01:62:8c:e2:5a:ee:9f:db:85:c7:97:59:5c:
         4d:20:2a:89:4e:8f:a0:e9:bd:f3:08:45:62:70:49:d7:e8:19:
         58:30:4f:60:dc:f4:32:03:f9:5a:66:06:10:11:56:f4:77:7f:
         2b:61:c6:39:ea:b9:a9:10:1e:fc:d8:8a:38:9c:24:d1:f3:9a:
         e2:fa:6e:ed:07:80:d9:3f:dc:12:c5:31:c8:49:c7:69:34:49:
         29:83:58:a1:14:a6:56:d1:08:69:f1:e0:71:2e:08:36:e8:38:
         0c:7c:b6:7c:ca:9b:fe:a8:e1:e3:27:20:21:80:e9:2c:79:b4:
         7a:8d:f5:66:7a:fb:a0:e9:0b:57:75:48:3f:a9:e2:82:2c:7c:
         37:cd:81:27:62:e0:63:c2:69:d4:66:51:db:8a:74:ab:79:e9:
         10:67:72:27:43:1a:d1:75:3a:a5:cf:9b:e7:1c:83:f3:bf:e6:
         6d:53:d2:3b:ea:24:a7:41:c3:d8:ef:88:0d:36:76:f5:21:23:
         f0:ae:c8:6c:c1:9c:8a:b9:27:5d:09:72:d1:8f:e6:c7:5d:ef:
         07:54:71:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:22:26 2025 by rpki-client