Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2819/gCe95DsmEINygDhROPrr_6CBFGg.mft
File:                     gCe95DsmEINygDhROPrr_6CBFGg.mft (raw, json)
Hash identifier:          inU1i8sYyghZKdyybwflQn6nn5rXRaA0ZmDHl6sNzHw=
Subject key identifier:   D7:14:0B:32:01:F3:55:7E:1F:E8:60:19:77:0B:44:4D:76:AA:9E:CD
Authority key identifier: 80:27:BD:E4:3B:26:10:83:72:80:38:51:38:FA:EB:FF:A0:81:14:68
Certificate issuer:       /CN=8027BDE43B2610837280385138FAEBFFA0811468
Certificate serial:       11FB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gCe95DsmEINygDhROPrr_6CBFGg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/gCe95DsmEINygDhROPrr_6CBFGg.mft
Manifest number:          11FB
Signing time:             Wed 05 Nov 2025 15:13:49 +0000
Manifest this update:     Wed 05 Nov 2025 15:13:48 +0000
Manifest next update:     Wed 05 Nov 2025 21:13:48 +0000
Files and hashes:         1: gCe95DsmEINygDhROPrr_6CBFGg.crl (hash: 8t8qA5r1HgLesONZ8sMW41HkX1UjhyPiPVEmZA+v4Js=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4603 (0x11fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8027BDE43B2610837280385138FAEBFFA0811468
        Validity
            Not Before: Nov  5 15:13:48 2025 GMT
            Not After : Oct 23 09:21:57 2026 GMT
        Subject: CN=D7140B3201F3557E1FE86019770B444D76AA9ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:03:22:62:11:fe:8e:43:76:2b:69:9a:f3:
                    12:99:7d:6a:b4:f3:89:14:83:2d:7d:2b:ad:9b:86:
                    b6:43:2a:43:1d:19:e0:57:aa:9c:9c:39:aa:40:55:
                    82:b9:d1:21:c8:c3:56:6f:30:86:61:33:6b:28:23:
                    85:aa:a9:2a:33:15:5e:5e:30:50:1c:03:d9:67:30:
                    da:c7:d3:7e:d4:3c:b6:2a:40:91:b8:45:37:1b:b1:
                    4a:fc:77:b8:0a:cb:10:6b:1e:61:7d:01:fd:1d:1b:
                    b8:0b:33:d5:34:6c:58:34:ea:34:79:9b:7e:47:c7:
                    17:b8:e0:96:df:61:f3:18:94:51:d8:dc:4e:23:8e:
                    ba:54:d9:bd:da:cc:67:06:9d:69:81:aa:47:32:37:
                    bc:f2:cf:97:71:17:38:08:a5:84:81:ad:f4:ca:9d:
                    0e:45:5d:c9:18:74:0b:86:3f:f6:04:e0:41:cd:fc:
                    21:9c:fc:28:b4:84:41:53:03:5e:ea:20:7c:15:12:
                    29:c5:b9:b8:42:a3:30:79:c5:cc:6c:24:09:d8:5a:
                    51:37:ea:70:27:b2:43:ee:d0:38:7e:a6:d0:37:8a:
                    ac:cd:33:a8:15:66:e5:a5:71:2e:7c:65:55:95:51:
                    fc:68:c2:3a:a7:ae:fd:fd:34:a3:a3:fa:be:70:86:
                    0c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:14:0B:32:01:F3:55:7E:1F:E8:60:19:77:0B:44:4D:76:AA:9E:CD
            X509v3 Authority Key Identifier:
                keyid:80:27:BD:E4:3B:26:10:83:72:80:38:51:38:FA:EB:FF:A0:81:14:68

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/gCe95DsmEINygDhROPrr_6CBFGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gCe95DsmEINygDhROPrr_6CBFGg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/gCe95DsmEINygDhROPrr_6CBFGg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:8b:36:f7:1a:4b:94:f6:4b:05:fb:51:92:a0:cf:d1:43:ff:
         f2:07:0e:1e:ae:de:57:59:d8:8a:8b:d2:2b:a5:63:83:fb:af:
         b1:30:c5:6c:80:9c:e1:90:7e:a9:66:d7:11:4d:d6:12:9f:0d:
         b9:62:fc:7e:9c:d7:b6:18:d3:f3:30:00:47:7e:ab:87:48:d7:
         da:77:63:5a:e9:20:29:11:4b:03:e0:c8:8b:59:0c:19:c6:b1:
         71:c5:4b:6d:bc:e3:92:68:ff:26:50:c1:71:a9:55:dd:36:07:
         bf:12:3f:61:2c:7e:62:13:89:58:74:5e:d8:eb:41:f6:b9:93:
         ae:a1:27:64:4e:46:22:4f:67:a9:2b:47:d1:10:4e:87:16:55:
         86:bd:32:b3:50:38:ae:8f:97:13:ba:f4:4b:04:92:b0:57:a6:
         61:ed:72:6a:79:78:d2:99:93:98:7b:3c:ba:71:1d:38:76:d4:
         4f:72:3b:df:f9:33:a2:83:f0:30:37:5f:75:d7:f1:5f:d2:aa:
         32:19:01:01:38:fa:ed:ab:2a:ec:40:02:22:2e:d4:0e:28:4a:
         4d:bd:c8:2c:33:9d:f4:2e:7c:31:65:d9:ba:8f:12:5d:b7:dd:
         e3:ee:3b:64:b3:cf:17:38:3d:44:a1:37:71:fe:b9:99:98:f5:
         ad:53:29:a8
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICEfswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODAy
N0JERTQzQjI2MTA4MzcyODAzODUxMzhGQUVCRkZBMDgxMTQ2ODAeFw0yNTExMDUx
NTEzNDhaFw0yNjEwMjMwOTIxNTdaMDMxMTAvBgNVBAMTKEQ3MTQwQjMyMDFGMzU1
N0UxRkU4NjAxOTc3MEI0NDRENzZBQTlFQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9xgMiYhH+jkN2K2ma8xKZfWq084kUgy19K62bhrZDKkMdGeBX
qpycOapAVYK50SHIw1ZvMIZhM2soI4WqqSozFV5eMFAcA9lnMNrH037UPLYqQJG4
RTcbsUr8d7gKyxBrHmF9Af0dG7gLM9U0bFg06jR5m35Hxxe44JbfYfMYlFHY3E4j
jrpU2b3azGcGnWmBqkcyN7zyz5dxFzgIpYSBrfTKnQ5FXckYdAuGP/YE4EHN/CGc
/Ci0hEFTA17qIHwVEinFubhCozB5xcxsJAnYWlE36nAnskPu0Dh+ptA3iqzNM6gV
ZuWlcS58ZVWVUfxowjqnrv39NKOj+r5whgyxAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU1xQLMgHzVX4f6GAZdwtETXaqns0wHwYDVR0jBBgwFoAUgCe95DsmEINygDhR
OPrr/6CBFGgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx
OS9nQ2U5NURzbUVJTnlnRGhST1Bycl82Q0JGR2cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2dDZTk1RHNtRUlOeWdEaFJPUHJyXzZDQkZHZy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTkvZ0NlOTVEc21FSU55
Z0RoUk9QcnJfNkNCRkdnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAGuLNvcaS5T2SwX7UZKgz9FD//IHDh6u3ldZ2IqL0iulY4P7r7EwxWyAnOGQ
fqlm1xFN1hKfDbli/H6c17YY0/MwAEd+q4dI19p3Y1rpICkRSwPgyItZDBnGsXHF
S22845Jo/yZQwXGpVd02B78SP2EsfmITiVh0XtjrQfa5k66hJ2RORiJPZ6krR9EQ
TocWVYa9MrNQOK6PlxO69EsEkrBXpmHtcmp5eNKZk5h7PLpxHTh21E9yO9/5M6KD
8DA3X3XX8V/SqjIZAQE4+u2rKuxAAiIu1A4oSk29yCwznfQufDFl2bqPEl233ePu
O2Szzxc4PUShN3H+uZmY9a1TKag=
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:08:27 2025 by rpki-client