Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
File:                     SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft (raw, json)
Hash identifier:          9Ufrow+RHg0DgenzGYHmxu7i9PsHCd67PiGUApmESqU=
Subject key identifier:   CA:8E:99:CD:4C:5E:2D:C1:E6:09:CE:6F:9D:9B:89:9D:53:5A:62:9F
Authority key identifier: 49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB
Certificate issuer:       /CN=4986242B03FB4A9C1906127EFC4C05E3B9BDFEBB
Certificate serial:       1D8A
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
Manifest number:          1D8A
Signing time:             Sun 15 Jun 2025 07:24:13 +0000
Manifest this update:     Sun 15 Jun 2025 07:24:13 +0000
Manifest next update:     Sun 15 Jun 2025 13:24:13 +0000
Files and hashes:         1: SYYkKwP7SpwZBhJ-_EwF47m9_rs.crl (hash: pSySsCsi8h4KNPevCt5Yxx7vd1T64SlR/0yOfRoexOs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7562 (0x1d8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4986242B03FB4A9C1906127EFC4C05E3B9BDFEBB
        Validity
            Not Before: Jun 15 07:24:13 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=CA8E99CD4C5E2DC1E609CE6F9D9B899D535A629F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:d5:ff:ef:f0:c9:b2:23:3f:f9:52:85:8e:
                    0a:5c:11:71:ac:1e:5b:93:af:0e:be:8a:f6:13:04:
                    0b:36:3b:33:cd:85:b7:ce:a4:20:c5:df:3f:c7:14:
                    38:32:0a:f6:51:83:df:e2:6e:fb:71:ce:37:4f:3e:
                    b8:2a:91:64:8e:2b:80:db:a9:9d:a3:c9:8d:45:c4:
                    4f:42:e1:77:83:07:12:6f:7e:a8:03:fe:d7:f8:97:
                    16:56:21:89:1f:80:27:56:23:5d:9e:39:21:dd:8b:
                    c6:97:00:fd:b9:6f:c6:77:45:3a:cb:ec:38:58:f3:
                    65:3d:81:0e:d9:e9:74:4e:fc:b5:83:15:97:00:2e:
                    a7:76:f3:e6:3e:0c:c0:b7:f9:5b:91:f8:b7:85:ec:
                    cd:1a:05:db:65:ae:08:28:6d:ac:0a:04:10:b1:c2:
                    aa:7a:80:a2:92:6a:a7:00:3a:62:a9:49:94:9a:73:
                    8a:52:5a:b5:e7:43:df:f0:3a:9f:7b:51:27:27:c0:
                    4f:df:c1:26:36:72:96:0e:c7:47:15:d7:3d:fa:25:
                    34:4b:10:18:c3:c7:62:6d:49:58:46:42:19:d7:e1:
                    13:7f:cb:e4:51:da:b9:df:b8:cc:e3:63:dc:30:1b:
                    96:90:51:e7:88:fd:f7:1a:93:b8:05:60:59:4e:40:
                    62:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8E:99:CD:4C:5E:2D:C1:E6:09:CE:6F:9D:9B:89:9D:53:5A:62:9F
            X509v3 Authority Key Identifier:
                keyid:49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:61:1a:78:af:37:e9:54:6b:51:30:a1:48:fd:09:f9:2d:ff:
         29:6b:5e:43:4b:e6:e7:e1:7e:1d:b5:ab:ac:e3:1e:d7:5d:99:
         90:35:f7:4c:bf:de:47:88:3c:de:bb:fa:56:96:76:be:1a:90:
         40:23:a0:dc:d7:e0:98:d6:e2:60:ba:8e:cd:d2:2f:18:3d:b5:
         45:bf:20:92:80:a7:5a:b9:e2:46:7e:f7:86:ed:ea:87:81:83:
         e5:af:89:a7:a3:e5:b8:85:ef:ae:4c:83:34:20:a8:88:66:6f:
         b1:fa:27:63:7f:3d:84:c1:b0:39:ea:87:de:de:38:cc:7f:96:
         20:c0:43:1f:dc:4d:b6:d7:19:74:49:30:f5:d5:88:f8:b0:1b:
         1e:ed:4f:b0:53:33:16:10:20:f1:75:a5:fb:48:a1:ff:5d:cf:
         ce:3c:7b:3b:1c:b2:68:d1:8e:37:37:c7:62:51:d9:57:3b:68:
         7f:89:2c:09:48:f9:7c:91:2b:33:3c:4e:e5:eb:2e:85:c0:ad:
         1a:db:b4:18:47:9c:d1:c6:a7:b5:8d:9a:e6:9e:4b:47:25:1d:
         32:de:cc:86:54:db:10:72:f2:21:d5:1d:17:6a:d6:0e:5b:ba:
         69:e8:4b:21:9b:70:03:60:cf:97:01:2e:dd:e5:91:f3:90:54:
         a0:e1:e8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:28:36 2025 by rpki-client