Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft
File:                     E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft (raw, json)
Hash identifier:          W1Y+jAtbezC9dsH3y5a2VfS2H7jMEwke5I6YY2neiis=
Subject key identifier:   B9:43:8C:55:06:FC:B9:C4:7B:7F:7F:60:BA:4C:12:3B:FB:48:4F:87
Authority key identifier: 13:6A:39:C7:63:0A:3C:74:91:05:0D:3E:9D:BD:5B:6F:79:06:FD:75
Certificate issuer:       /CN=136A39C7630A3C7491050D3E9DBD5B6F7906FD75
Certificate serial:       0C93
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft
Manifest number:          0C90
Signing time:             Sun 22 Jun 2025 01:12:52 +0000
Manifest this update:     Sun 22 Jun 2025 01:12:52 +0000
Manifest next update:     Sun 22 Jun 2025 07:12:52 +0000
Files and hashes:         1: E2o5x2MKPHSRBQ0-nb1bb3kG_XU.crl (hash: 2Et+hHJjaeirrls+57gAUCo0SFwv0gHKMjaoSjf0Yt8=)
                          2: dZXEqaGxmzAzSwQfOSuj4GVQ0gg.roa (hash: acKWSIHX1ZbTm99RSURHM2kfCk/nXcKQCe+6vMB1VMY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3219 (0xc93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=136A39C7630A3C7491050D3E9DBD5B6F7906FD75
        Validity
            Not Before: Jun 22 01:12:52 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=B9438C5506FCB9C47B7F7F60BA4C123BFB484F87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:84:3c:bc:71:4c:46:3d:ab:2e:d8:52:f4:
                    b7:ec:1a:b2:26:2c:91:04:ab:9d:e5:db:17:1c:5a:
                    30:36:89:dd:3e:9a:0f:9a:16:e5:8b:34:05:67:0f:
                    da:fe:e5:81:1b:06:9d:46:f5:de:30:76:34:a6:34:
                    ce:34:e5:88:0b:72:dd:0c:e7:11:59:cb:06:28:04:
                    be:61:e0:cf:8a:93:47:cc:16:df:d1:94:62:f7:60:
                    26:f4:c5:25:97:28:90:96:0e:51:0b:f4:56:0b:87:
                    b5:28:e8:ff:45:69:e9:35:08:5c:a5:91:c5:6b:a5:
                    c2:07:fe:f2:c3:6f:cb:44:ec:25:1f:36:e2:4e:de:
                    60:ab:54:cd:87:10:48:68:cb:88:62:d0:f5:4f:4f:
                    ac:92:4b:7a:a6:a4:4e:ee:68:0e:67:4f:f1:2a:36:
                    0e:f1:43:e0:3a:da:78:ee:ca:89:a0:dc:88:54:c6:
                    04:f5:1e:a2:58:04:04:85:8b:8a:b0:9e:21:b8:61:
                    66:42:61:84:53:f6:ef:4f:45:9c:f8:a5:83:ad:9b:
                    9a:1c:a4:0b:1d:63:b8:9e:67:c0:4f:8a:e0:d2:02:
                    88:84:91:d9:06:b0:1c:b3:1e:ed:54:d8:34:e5:34:
                    50:4e:c8:2e:4f:7c:1c:74:a0:e4:65:a5:f7:a5:8e:
                    c9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:43:8C:55:06:FC:B9:C4:7B:7F:7F:60:BA:4C:12:3B:FB:48:4F:87
            X509v3 Authority Key Identifier:
                keyid:13:6A:39:C7:63:0A:3C:74:91:05:0D:3E:9D:BD:5B:6F:79:06:FD:75

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:18:8d:14:69:04:1d:a8:b0:ad:1f:4b:29:f4:d1:d8:c9:ee:
         7e:d5:12:1b:de:3c:c4:33:42:cf:c2:53:3e:7d:ea:ce:a3:b5:
         15:5d:05:d0:ab:bc:7b:4e:5f:8f:15:09:c9:cb:57:81:91:61:
         fe:45:43:77:0f:c7:0d:59:02:1a:5d:75:3d:ef:75:ac:ab:99:
         99:07:1a:8e:3d:aa:bd:56:78:3f:a0:c4:b9:f2:ff:05:58:eb:
         5c:28:e5:a0:af:55:a5:61:09:ab:81:20:da:4b:5c:71:c5:55:
         61:84:cb:d8:26:d8:f0:71:3b:5c:01:d4:b1:3e:5f:45:5c:10:
         d9:7c:51:cd:5d:ee:f8:cd:20:52:57:ea:2b:e0:5d:df:21:49:
         3e:62:75:a6:51:f9:ff:8e:87:79:34:44:5b:fb:46:84:57:6f:
         81:34:9b:53:e3:48:8c:87:26:f7:9b:e8:d6:58:6c:46:67:f5:
         f4:9c:39:5b:7c:b4:11:99:00:9d:e9:38:99:2a:d0:ad:0f:24:
         91:a0:32:dd:15:29:72:8d:b4:41:1d:0f:1a:1e:7a:3e:1c:e4:
         50:36:95:74:98:30:23:be:b6:c0:e9:06:23:d4:89:65:94:ea:
         14:85:c9:2c:2c:e2:4d:53:4a:4c:16:99:ab:3b:79:35:44:d0:
         b8:bc:8e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:10:15 2025 by rpki-client