Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2742/1t0LRn7o11sVFGYoyZGsMUBVj5Q.mft
File:                     1t0LRn7o11sVFGYoyZGsMUBVj5Q.mft (raw, json)
Hash identifier:          98U/k1oros6M//6M6PIKTzO3hMDPiw5ejY2KI5PDfyQ=
Subject key identifier:   07:FD:51:87:5C:37:F9:3D:2E:40:BF:6E:6E:C6:36:33:78:E0:6E:DE
Authority key identifier: D6:DD:0B:46:7E:E8:D7:5B:15:14:66:28:C9:91:AC:31:40:55:8F:94
Certificate issuer:       /CN=D6DD0B467EE8D75B15146628C991AC3140558F94
Certificate serial:       1E72
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1t0LRn7o11sVFGYoyZGsMUBVj5Q.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/1t0LRn7o11sVFGYoyZGsMUBVj5Q.mft
Manifest number:          1E6D
Signing time:             Sun 22 Jun 2025 01:17:39 +0000
Manifest this update:     Sun 22 Jun 2025 01:17:39 +0000
Manifest next update:     Sun 22 Jun 2025 07:17:39 +0000
Files and hashes:         1: 1t0LRn7o11sVFGYoyZGsMUBVj5Q.crl (hash: iYqGFeSiI6soa0HKMIospOAK3EBusGDIoGmhjnTppt8=)
                          2: b6xYKSLGz18BN2xIrblSCRlue8Y.roa (hash: ZKbFiHS0maTwFnBvd4+Py3hTk8m0FCCWWHKGFVhk4Vs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7794 (0x1e72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6DD0B467EE8D75B15146628C991AC3140558F94
        Validity
            Not Before: Jun 22 01:17:39 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=07FD51875C37F93D2E40BF6E6EC6363378E06EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:26:f7:fb:1c:7a:2f:ad:71:9f:27:07:8e:
                    e1:a8:17:cb:24:31:4f:d5:c7:7f:8e:3a:bd:e6:db:
                    6f:61:94:36:03:28:d0:db:a7:37:28:2b:e9:b2:2f:
                    02:d5:d5:58:27:ec:7f:25:65:10:0b:90:3d:02:b1:
                    2c:71:64:d8:e0:be:b5:55:e8:e0:6c:4d:25:c1:b1:
                    31:1d:0d:78:53:29:3f:a3:b4:f9:e6:1c:81:eb:05:
                    48:c6:f8:5b:8b:2e:3a:01:de:91:06:59:a4:3f:e8:
                    65:e0:85:77:4f:c5:aa:f5:9e:7b:ae:49:e6:b9:24:
                    e2:30:dd:cc:ad:7b:82:5e:1b:0e:16:72:f7:20:be:
                    d2:66:0a:ce:bb:4b:88:2f:32:39:d2:ca:41:ab:60:
                    77:5a:ee:42:ed:10:83:cc:fb:a0:15:b2:fe:0f:5e:
                    4c:5d:44:14:12:77:04:db:7a:c8:b7:97:24:b6:e5:
                    2e:d2:27:3d:cb:2d:bc:81:ac:ba:9c:87:c3:b0:f3:
                    b0:38:5c:9e:3f:33:4c:c6:db:4e:cd:c5:f5:94:a1:
                    97:0c:a3:e7:ed:5f:ad:83:8d:a5:28:d2:d9:56:f4:
                    8b:23:27:b8:3d:88:3b:9c:0e:6a:a3:0e:8b:a9:ec:
                    0e:62:a8:0d:9e:fc:d1:83:42:c2:ed:b7:1b:f8:28:
                    ff:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FD:51:87:5C:37:F9:3D:2E:40:BF:6E:6E:C6:36:33:78:E0:6E:DE
            X509v3 Authority Key Identifier:
                keyid:D6:DD:0B:46:7E:E8:D7:5B:15:14:66:28:C9:91:AC:31:40:55:8F:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/1t0LRn7o11sVFGYoyZGsMUBVj5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1t0LRn7o11sVFGYoyZGsMUBVj5Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/1t0LRn7o11sVFGYoyZGsMUBVj5Q.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:e8:93:11:b4:cd:fa:42:35:c8:44:ae:ca:f9:c4:48:08:4e:
         e3:ee:1b:c4:5d:80:f3:96:88:64:e6:5d:7d:7a:ce:a6:96:cd:
         8f:32:74:7f:3c:13:4b:11:de:09:3e:e7:a2:f7:4d:ad:38:99:
         23:f3:af:a9:80:fa:da:d0:52:ab:3d:c4:84:bf:33:23:e0:5b:
         72:b1:0a:4d:d9:03:fa:62:83:a5:fe:ad:67:ff:71:da:42:2d:
         8e:93:2b:62:73:2c:f0:53:fe:bd:2c:f3:77:4d:f1:50:98:11:
         01:51:44:f3:c8:82:79:5b:34:ca:f2:b5:27:fd:1c:ca:09:81:
         d9:8e:c3:07:74:cf:d8:8e:78:de:56:60:8e:9c:3a:40:ea:5d:
         e8:83:fe:18:02:26:3f:30:9f:68:09:c9:de:d0:78:41:29:a8:
         3a:95:bd:ce:3e:7d:4f:6f:f6:e6:af:f4:43:0f:f9:98:fb:ea:
         6b:c2:5b:5a:54:9b:6d:c5:cf:35:29:f1:37:64:70:a6:c5:99:
         04:f9:e6:7f:67:90:9e:85:a5:ee:19:9b:b4:db:21:07:92:94:
         7c:dc:5a:ba:87:35:ef:2d:97:5b:99:a3:19:90:0c:36:d0:8c:
         1e:f7:bf:7d:4a:45:5a:77:67:00:e0:ba:05:bc:05:03:d9:82:
         f9:9d:fa:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:11:27 2025 by rpki-client