Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft
File:                     gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft (raw, json)
Hash identifier:          Se9LVh3WWcGw+6wVSlnysYfF5W2LlKxAcx+oKGKQSPM=
Subject key identifier:   DD:62:A6:BE:3E:2F:11:89:37:96:CB:45:53:25:70:6C:C7:E6:E2:0F
Authority key identifier: 80:05:36:27:8B:DF:A4:59:9F:E0:66:67:27:0C:57:D4:85:68:05:F1
Certificate issuer:       /CN=800536278BDFA4599FE06667270C57D4856805F1
Certificate serial:       0C7B
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gAU2J4vfpFmf4GZnJwxX1IVoBfE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft
Manifest number:          0C7B
Signing time:             Sat 26 Apr 2025 13:10:52 +0000
Manifest this update:     Sat 26 Apr 2025 13:10:52 +0000
Manifest next update:     Sat 26 Apr 2025 19:10:52 +0000
Files and hashes:         1: gAU2J4vfpFmf4GZnJwxX1IVoBfE.crl (hash: EY7R+fkLgPdLZSzR9XQnhg2KUdyG/u9UO+3T7Zew29A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3195 (0xc7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=800536278BDFA4599FE06667270C57D4856805F1
        Validity
            Not Before: Apr 26 13:10:52 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=DD62A6BE3E2F11893796CB455325706CC7E6E20F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f3:a8:ff:f6:9c:9d:87:48:ca:a9:48:dd:72:
                    c7:f5:e6:f4:45:8b:25:5e:8d:ab:f7:f7:db:fd:bd:
                    d0:b3:43:09:01:46:d1:da:78:31:e1:c0:ab:16:7c:
                    a6:ad:67:65:11:fe:38:06:ba:fc:ea:2c:ce:e3:74:
                    dd:9f:29:c6:45:36:2d:f7:bb:56:c3:bd:a1:04:aa:
                    14:ba:34:68:a7:68:d4:8b:fc:af:83:89:07:d5:32:
                    42:33:c3:78:f3:80:7c:c0:f7:85:88:ba:b7:42:5f:
                    15:84:0f:4a:0a:75:5c:d1:cb:08:14:47:a6:ab:8c:
                    e6:93:ce:ed:30:cd:02:df:4c:bd:fd:a9:a5:c4:5e:
                    ba:51:22:4d:6b:6c:f6:06:f7:73:b5:ed:e3:9f:a9:
                    bc:27:a5:a0:f9:3f:36:b5:4c:cd:50:a6:61:c1:0d:
                    1f:17:75:db:0b:e4:58:bd:33:13:97:08:77:12:f1:
                    c4:d4:76:94:d5:e8:7a:b0:39:cb:1d:4a:c2:c3:f4:
                    1b:30:20:6f:b6:1a:92:89:56:7b:cc:b7:7a:4f:47:
                    4c:b7:a3:3e:bd:d5:2a:75:45:07:ba:92:59:d6:14:
                    11:d5:ec:bc:4d:e7:0c:26:21:1b:cc:0f:53:d4:25:
                    e2:28:5b:cd:a3:83:c6:51:1b:2a:d3:97:ad:6d:b1:
                    4b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:62:A6:BE:3E:2F:11:89:37:96:CB:45:53:25:70:6C:C7:E6:E2:0F
            X509v3 Authority Key Identifier:
                keyid:80:05:36:27:8B:DF:A4:59:9F:E0:66:67:27:0C:57:D4:85:68:05:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gAU2J4vfpFmf4GZnJwxX1IVoBfE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:c5:b4:ea:bb:51:26:c5:9b:63:7a:4f:e4:21:ca:61:e6:ae:
         db:07:5f:f9:bc:8a:97:b6:59:20:bc:76:be:21:d5:8d:5a:b0:
         7e:08:67:ed:7f:f5:f5:2c:ce:c3:6c:30:e2:ec:ec:a0:8c:66:
         34:80:cf:51:11:53:bc:4e:8f:c7:95:87:0f:53:cc:16:20:dc:
         fd:46:05:87:a8:40:72:be:e5:49:32:a6:e1:9e:4b:c1:31:58:
         d0:1e:09:15:be:c9:4e:45:7e:88:bf:26:6d:65:da:1d:69:e4:
         ac:fb:af:87:e8:0f:16:b8:63:f2:53:e5:e0:34:98:39:60:97:
         04:27:22:d9:b2:93:01:46:56:f1:82:a3:2a:eb:da:0c:b4:5b:
         35:05:5d:3a:f7:61:cd:4d:fe:ff:9f:60:f2:7c:38:de:0e:11:
         02:23:8a:e4:3c:ae:11:3a:b5:4c:ee:5a:82:a1:b9:f6:fe:c0:
         47:ca:85:4e:d9:02:13:35:fe:5e:c6:da:6c:3e:d1:ea:b0:97:
         44:66:30:b5:83:aa:e8:ce:5a:e3:e5:48:9c:ed:70:fe:77:fc:
         8f:5c:df:80:1e:46:7e:11:af:cc:fa:d1:69:d4:1d:b6:6c:48:
         6d:98:8e:43:16:34:75:db:6b:09:4b:94:47:d1:9e:a0:fe:24:
         e9:cf:d1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:22:03 2025 by rpki-client