Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft
File:                     4slCx2IRPXOTmcfzC8gfLWJqobc.mft (raw, json)
Hash identifier:          WlcMDbllR+DOA7hOd6qxiFG4bwPS87KhjyEPF3w6CuM=
Subject key identifier:   EC:D0:88:6A:53:4F:8B:E0:60:B8:9A:2D:32:AB:5A:B1:01:69:2B:FC
Authority key identifier: E2:C9:42:C7:62:11:3D:73:93:99:C7:F3:0B:C8:1F:2D:62:6A:A1:B7
Certificate issuer:       /CN=E2C942C762113D739399C7F30BC81F2D626AA1B7
Certificate serial:       0775
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft
Manifest number:          0775
Signing time:             Sat 26 Apr 2025 08:36:24 +0000
Manifest this update:     Sat 26 Apr 2025 08:36:24 +0000
Manifest next update:     Sat 26 Apr 2025 14:36:24 +0000
Files and hashes:         1: 4slCx2IRPXOTmcfzC8gfLWJqobc.crl (hash: bAKEirONnYsa68QmM6xCLcx0GMxDN9X97v8h4HG9uiA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1909 (0x775)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2C942C762113D739399C7F30BC81F2D626AA1B7
        Validity
            Not Before: Apr 26 08:36:24 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=ECD0886A534F8BE060B89A2D32AB5AB101692BFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5a:aa:25:ff:2a:95:f7:42:70:b9:92:28:4f:
                    59:4f:af:85:d1:d3:ec:1b:97:11:2a:33:9b:99:50:
                    5a:48:e3:ff:41:72:78:0e:8d:6a:0d:09:6a:e7:dd:
                    ad:8b:09:08:95:b6:80:02:8a:11:ff:f1:da:44:0b:
                    03:4e:cf:a9:ec:21:0c:33:02:45:9d:eb:47:a6:42:
                    b2:33:33:ae:c8:8d:16:7a:1e:b0:58:7a:de:98:51:
                    f7:37:00:6c:91:70:f6:9b:77:0d:30:20:e9:20:da:
                    92:1f:98:39:6d:f8:8f:ff:cb:fb:cd:4a:55:11:6c:
                    b9:92:dc:18:e1:8e:f0:76:97:51:ad:bc:0a:69:db:
                    7b:20:9f:3d:1c:4b:54:e1:a9:f6:db:0f:70:d8:f7:
                    89:5d:b7:14:d9:75:d1:12:21:0d:1a:30:3b:2c:5f:
                    ab:e9:1e:7a:1f:b8:58:83:74:99:f8:ec:9e:85:be:
                    c3:cc:05:ae:02:41:6a:be:b5:f8:42:71:a5:df:dc:
                    66:c8:10:2b:24:fc:0c:81:36:9c:37:44:e6:93:54:
                    7f:6b:59:6f:87:12:53:3e:7f:b1:36:c7:14:5a:7f:
                    e2:94:66:da:81:dc:e6:90:a9:ed:6b:93:d3:23:57:
                    39:53:d9:ab:5b:39:94:c9:97:a8:66:c3:be:31:ce:
                    98:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D0:88:6A:53:4F:8B:E0:60:B8:9A:2D:32:AB:5A:B1:01:69:2B:FC
            X509v3 Authority Key Identifier:
                keyid:E2:C9:42:C7:62:11:3D:73:93:99:C7:F3:0B:C8:1F:2D:62:6A:A1:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:16:d4:6c:44:9b:d7:2c:ae:77:0d:96:e4:12:04:64:90:96:
         a3:d9:08:20:f3:d5:c6:66:f8:b3:36:14:5f:46:09:0a:72:f6:
         01:c9:cf:42:ad:0c:73:dd:cb:5a:e8:96:77:21:b5:b1:a3:39:
         ac:11:ff:ca:fd:a8:6a:33:38:2f:59:22:b0:b5:1e:d0:11:96:
         b9:fc:21:bc:27:e1:d1:59:d8:f4:5a:b5:d5:57:9f:95:eb:48:
         9f:c4:b9:e9:54:d2:d8:d3:05:a9:ae:ef:ed:73:2d:d4:6d:75:
         45:34:d4:81:40:1b:11:1b:e0:d8:45:a3:b9:91:ed:2f:d4:63:
         99:7a:ce:66:42:86:a0:47:01:ea:de:57:af:d9:a7:6f:ef:ae:
         cb:c3:16:3d:20:0a:8b:53:09:60:51:00:04:93:85:e5:4a:6c:
         c5:de:d1:77:ee:d9:ab:fa:c3:55:da:e4:fd:e4:15:f9:34:45:
         09:f7:be:9f:46:c5:37:fb:a3:6f:41:f3:b8:5e:72:1a:af:a1:
         f5:62:67:76:04:b7:98:3f:09:92:7c:c4:35:82:51:30:8a:78:
         a0:f4:ed:47:18:b4:c9:e5:59:0b:57:ae:de:16:1d:8c:d5:9c:
         3c:71:4f:f0:2d:41:b8:9a:7e:c1:48:5b:d7:67:fc:5d:b4:3b:
         2c:2f:97:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:09:41 2025 by rpki-client