Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3251/wq4P5eDZls0aR2KmwndP8pw88Us.mft
File:                     wq4P5eDZls0aR2KmwndP8pw88Us.mft (raw, json)
Hash identifier:          tg5HJE3qEtR3xGIJDQ4fDVwiMbfgAdvnPijsfxXTR/o=
Subject key identifier:   5C:84:38:B0:31:C6:80:AE:78:7C:34:7F:36:2C:AF:F1:67:D7:4C:94
Authority key identifier: C2:AE:0F:E5:E0:D9:96:CD:1A:47:62:A6:C2:77:4F:F2:9C:3C:F1:4B
Certificate issuer:       /CN=C2AE0FE5E0D996CD1A4762A6C2774FF29C3CF14B
Certificate serial:       095F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wq4P5eDZls0aR2KmwndP8pw88Us.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3251/wq4P5eDZls0aR2KmwndP8pw88Us.mft
Manifest number:          095F
Signing time:             Sat 26 Apr 2025 11:07:00 +0000
Manifest this update:     Sat 26 Apr 2025 11:07:00 +0000
Manifest next update:     Sat 26 Apr 2025 17:07:00 +0000
Files and hashes:         1: wq4P5eDZls0aR2KmwndP8pw88Us.crl (hash: O/ZFk64X+i35WCNyB597XYHxqEEeZpw5eHUXhQh8gmo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2399 (0x95f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2AE0FE5E0D996CD1A4762A6C2774FF29C3CF14B
        Validity
            Not Before: Apr 26 11:07:00 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=5C8438B031C680AE787C347F362CAFF167D74C94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:21:54:4a:73:20:0f:9e:48:ed:c0:28:29:1d:
                    93:0d:47:df:97:72:60:65:b1:5b:06:6e:8d:f7:8f:
                    88:b7:e4:b5:55:84:14:9a:f7:97:bb:7c:d3:36:31:
                    8e:35:3a:83:85:21:a7:3c:71:e5:25:93:93:a5:a5:
                    08:ac:30:93:76:d1:b4:69:73:28:76:d8:c7:b6:8e:
                    c0:3b:2c:03:f4:9e:18:d4:6e:9f:93:df:7b:4b:8d:
                    dd:a4:07:41:5e:a7:38:7e:4d:0d:2a:97:b5:67:60:
                    0a:2b:8e:72:90:88:8f:0a:ff:d1:fc:81:3a:79:e2:
                    1b:57:9b:d9:eb:e4:cd:2d:d9:78:6d:2e:35:43:e5:
                    db:9a:ca:20:8d:ef:63:f9:97:d6:c1:18:58:e5:53:
                    b9:44:c6:e7:21:72:f2:fd:8b:e6:dd:5f:22:17:33:
                    8e:46:d7:9c:9b:22:24:90:2d:42:b5:dc:47:51:64:
                    ce:96:30:93:25:84:7e:23:69:b6:ca:a4:f9:2b:5e:
                    b6:f6:04:76:d8:23:5d:a8:2b:09:70:5f:33:8f:c8:
                    75:85:4a:52:54:ec:7d:9a:f0:7d:bc:f2:81:bc:3e:
                    1c:90:39:16:a6:94:2d:24:ed:6a:07:f2:12:34:dc:
                    56:7f:58:6f:44:c4:43:91:ef:ae:c5:ac:e3:70:aa:
                    19:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:84:38:B0:31:C6:80:AE:78:7C:34:7F:36:2C:AF:F1:67:D7:4C:94
            X509v3 Authority Key Identifier:
                keyid:C2:AE:0F:E5:E0:D9:96:CD:1A:47:62:A6:C2:77:4F:F2:9C:3C:F1:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3251/wq4P5eDZls0aR2KmwndP8pw88Us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wq4P5eDZls0aR2KmwndP8pw88Us.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3251/wq4P5eDZls0aR2KmwndP8pw88Us.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:04:84:4a:06:8a:b9:01:40:e8:42:e4:85:9e:de:a3:a4:49:
         31:d3:73:1f:51:4f:fe:21:88:37:ad:dd:e7:12:f1:a8:08:1a:
         47:3d:47:42:4f:77:71:c6:ac:b0:57:94:89:a6:6b:32:21:b7:
         c6:ab:67:a1:1c:86:2e:2b:6e:9f:f3:5c:5b:c6:d7:1c:b9:da:
         f3:7f:62:42:50:76:37:5f:c8:7a:07:eb:3c:30:0e:c6:eb:1e:
         29:b5:00:93:1f:80:b6:e9:57:ea:92:c6:aa:ac:24:0b:6d:46:
         f3:aa:86:29:fe:d6:b8:ad:16:2f:1e:24:db:6e:46:a0:51:d1:
         14:b3:37:5f:7f:78:bf:75:30:25:7b:87:c9:3f:a5:fb:f4:54:
         4f:26:b3:46:ab:6f:30:b8:74:a4:f4:27:a5:1c:8f:64:96:70:
         0c:86:18:10:83:98:0a:0d:87:b7:bd:67:01:e8:3c:61:0e:60:
         48:7f:fb:d5:a4:36:45:88:a3:bc:57:66:10:de:45:fa:7c:86:
         8e:c5:15:4b:9f:98:91:8b:2e:11:d4:ea:ac:f1:dc:65:23:c8:
         d0:b8:33:5b:ab:a2:04:67:19:17:79:af:03:e2:7c:7d:09:05:
         9b:6f:da:bd:cd:f6:39:e8:3e:c7:da:11:9e:4f:ac:36:f4:48:
         1f:51:37:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:06:06 2025 by rpki-client