Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3254/zJxrrh4RAiWutPnSb5WBXY-SoY4.mft
File:                     zJxrrh4RAiWutPnSb5WBXY-SoY4.mft (raw, json)
Hash identifier:          596kNauV5tkLsN+sXnINiuv9XtPIoKnpJsoAPy7vPns=
Subject key identifier:   22:32:CE:EE:9F:2C:0E:9D:8E:C6:18:70:CE:6F:50:A9:37:F4:82:C5
Authority key identifier: CC:9C:6B:AE:1E:11:02:25:AE:B4:F9:D2:6F:95:81:5D:8F:92:A1:8E
Certificate issuer:       /CN=CC9C6BAE1E110225AEB4F9D26F95815D8F92A18E
Certificate serial:       0934
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zJxrrh4RAiWutPnSb5WBXY-SoY4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3254/zJxrrh4RAiWutPnSb5WBXY-SoY4.mft
Manifest number:          0934
Signing time:             Sat 26 Apr 2025 11:08:29 +0000
Manifest this update:     Sat 26 Apr 2025 11:08:29 +0000
Manifest next update:     Sat 26 Apr 2025 17:08:29 +0000
Files and hashes:         1: zJxrrh4RAiWutPnSb5WBXY-SoY4.crl (hash: qejH64HGwQMfG705KpGXyhv+OWQNS5iTwSgeL7rHP1s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2356 (0x934)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC9C6BAE1E110225AEB4F9D26F95815D8F92A18E
        Validity
            Not Before: Apr 26 11:08:29 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=2232CEEE9F2C0E9D8EC61870CE6F50A937F482C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:93:7d:69:60:a4:5b:19:24:87:10:8a:4a:9d:
                    bc:c3:45:30:06:4b:14:c8:35:f2:1d:3e:5a:eb:27:
                    9b:4b:ee:c4:7e:1c:70:d5:ec:6f:0a:fe:5d:56:34:
                    22:b2:a0:2b:8d:44:a9:5f:1d:00:9f:16:b5:7a:45:
                    d6:83:a8:fe:fe:84:05:f2:c4:36:60:96:26:f7:cd:
                    1b:0f:f6:3c:8f:41:1f:87:7d:a7:7a:f4:a3:10:85:
                    68:7d:da:85:35:83:53:da:34:4a:06:53:8d:3f:1b:
                    66:ec:bb:31:27:68:3b:eb:d5:8a:2e:51:a2:d6:d7:
                    1b:64:ac:61:49:ed:23:eb:60:6a:3f:07:38:40:92:
                    5a:08:b6:7f:3e:db:13:f7:e5:ea:b6:b8:12:ef:56:
                    ab:bb:1b:49:f3:a7:b4:48:22:c6:ef:12:e1:5b:a9:
                    34:0e:f3:54:b0:49:0f:3b:db:6c:2b:d2:03:77:c8:
                    a2:38:4a:ed:e3:56:75:f6:f2:84:00:cf:2f:52:f2:
                    87:e2:bc:f5:09:6d:63:9a:7a:fc:29:1c:6e:a8:05:
                    1c:c6:9f:3d:f1:86:f2:bc:5b:c8:01:1d:a0:66:61:
                    aa:ba:d2:9e:a4:20:b1:49:7f:58:87:c4:f6:f4:4c:
                    5b:bd:bb:9a:3c:f8:30:e8:82:77:21:90:fd:ec:d8:
                    5a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:32:CE:EE:9F:2C:0E:9D:8E:C6:18:70:CE:6F:50:A9:37:F4:82:C5
            X509v3 Authority Key Identifier:
                keyid:CC:9C:6B:AE:1E:11:02:25:AE:B4:F9:D2:6F:95:81:5D:8F:92:A1:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3254/zJxrrh4RAiWutPnSb5WBXY-SoY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zJxrrh4RAiWutPnSb5WBXY-SoY4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3254/zJxrrh4RAiWutPnSb5WBXY-SoY4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e9:16:a4:3c:03:07:ba:9f:04:2d:9f:2a:b6:36:9a:15:36:
         cf:0c:2b:f0:e6:9f:5a:bb:c9:bf:06:62:c6:36:c5:2c:36:ca:
         ce:ed:60:96:48:99:96:cb:06:c1:97:b3:b7:d5:9f:e0:c7:59:
         2c:33:be:0d:cb:13:9f:b4:c4:e1:b0:5d:6e:b0:ce:a3:8e:90:
         9a:5d:74:82:c5:59:ba:12:20:17:c8:99:a3:97:5f:d6:43:1e:
         dc:f0:da:81:90:61:29:c9:09:8b:45:aa:17:fe:35:29:46:c1:
         ab:ac:26:a1:80:e4:7a:91:15:0e:53:f1:0e:95:bd:74:7a:88:
         a9:a2:63:43:91:2a:61:dd:78:24:fe:b3:c9:d4:fb:a1:e3:31:
         9f:b5:b4:87:2c:8a:87:59:6a:b4:7b:4e:95:2f:ea:1e:c8:80:
         16:0a:b7:73:58:2d:49:70:21:57:1d:89:55:d3:19:58:97:ac:
         6f:45:8e:ea:42:74:df:9c:71:4e:43:aa:26:b4:80:04:b7:fc:
         eb:3d:82:af:f3:cf:e1:8d:28:1f:6a:7c:ae:0b:6d:81:ad:4c:
         24:a9:08:56:44:f9:20:be:97:1e:cf:b0:97:13:30:cd:81:eb:
         6c:66:4d:6a:de:6a:19:18:48:56:b8:69:f4:cd:bf:b5:c0:09:
         fb:0c:97:b0
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCTQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0M5
QzZCQUUxRTExMDIyNUFFQjRGOUQyNkY5NTgxNUQ4RjkyQTE4RTAeFw0yNTA0MjYx
MTA4MjlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDIyMzJDRUVFOUYyQzBF
OUQ4RUM2MTg3MENFNkY1MEE5MzdGNDgyQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvk31pYKRbGSSHEIpKnbzDRTAGSxTINfIdPlrrJ5tL7sR+HHDV
7G8K/l1WNCKyoCuNRKlfHQCfFrV6RdaDqP7+hAXyxDZglib3zRsP9jyPQR+Hfad6
9KMQhWh92oU1g1PaNEoGU40/G2bsuzEnaDvr1YouUaLW1xtkrGFJ7SPrYGo/BzhA
kloItn8+2xP35eq2uBLvVqu7G0nzp7RIIsbvEuFbqTQO81SwSQ8722wr0gN3yKI4
Su3jVnX28oQAzy9S8ofivPUJbWOaevwpHG6oBRzGnz3xhvK8W8gBHaBmYaq60p6k
ILFJf1iHxPb0TFu9u5o8+DDognchkP3s2FoBAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUIjLO7p8sDp2Oxhhwzm9QqTf0gsUwHwYDVR0jBBgwFoAUzJxrrh4RAiWutPnS
b5WBXY+SoY4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1
NC96Snhycmg0UkFpV3V0UG5TYjVXQlhZLVNvWTQuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3pKeHJyaDRSQWlXdXRQblNiNVdCWFktU29ZNC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTQvekp4cnJoNFJBaVd1
dFBuU2I1V0JYWS1Tb1k0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAG7pFqQ8Awe6nwQtnyq2NpoVNs8MK/Dmn1q7yb8GYsY2xSw2ys7tYJZImZbL
BsGXs7fVn+DHWSwzvg3LE5+0xOGwXW6wzqOOkJpddILFWboSIBfImaOXX9ZDHtzw
2oGQYSnJCYtFqhf+NSlGwausJqGA5HqRFQ5T8Q6VvXR6iKmiY0ORKmHdeCT+s8nU
+6HjMZ+1tIcsiodZarR7TpUv6h7IgBYKt3NYLUlwIVcdiVXTGViXrG9FjupCdN+c
cU5Dqia0gAS3/Os9gq/zz+GNKB9qfK4LbYGtTCSpCFZE+SC+lx7PsJcTMM2B62xm
TWreahkYSFa4afTNv7XACfsMl7A=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:18:57 2025 by rpki-client