Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3290/xWg5B3F2O7YxSEuxvd-uSFlvXOI.mft
File:                     xWg5B3F2O7YxSEuxvd-uSFlvXOI.mft (raw, json)
Hash identifier:          goTjzWtYCGC0YzoXJcx07TBR6zv2Qj/SVxQkLsm8aQw=
Subject key identifier:   3A:6B:64:A2:57:5F:AD:47:2E:90:7F:75:1C:F0:18:E7:97:46:1F:16
Authority key identifier: C5:68:39:07:71:76:3B:B6:31:48:4B:B1:BD:DF:AE:48:59:6F:5C:E2
Certificate issuer:       /CN=C568390771763BB631484BB1BDDFAE48596F5CE2
Certificate serial:       0645
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xWg5B3F2O7YxSEuxvd-uSFlvXOI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/xWg5B3F2O7YxSEuxvd-uSFlvXOI.mft
Manifest number:          0645
Signing time:             Sat 26 Apr 2025 11:06:48 +0000
Manifest this update:     Sat 26 Apr 2025 11:06:48 +0000
Manifest next update:     Sat 26 Apr 2025 17:06:48 +0000
Files and hashes:         1: xWg5B3F2O7YxSEuxvd-uSFlvXOI.crl (hash: p7U3pK7KXlRNmLKplyFNJO83uOuzcB3Dhdc2k9tNJ1g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1605 (0x645)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C568390771763BB631484BB1BDDFAE48596F5CE2
        Validity
            Not Before: Apr 26 11:06:48 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=3A6B64A2575FAD472E907F751CF018E797461F16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:63:38:19:15:71:2a:01:f8:db:f8:41:8c:
                    70:db:35:07:d3:25:7a:d2:3b:a7:99:52:c3:81:06:
                    31:60:61:58:c0:40:62:21:80:8c:69:4b:1b:46:16:
                    b5:c6:3a:86:08:84:b0:2e:74:ad:d6:9b:ce:36:8a:
                    bb:de:8d:da:66:33:12:9a:e7:f3:a2:d0:15:8c:02:
                    52:26:ea:0a:c5:f0:ba:c7:ed:82:e1:20:39:67:73:
                    55:77:41:65:7c:73:79:77:f7:cc:c0:5d:e9:f0:c1:
                    00:ae:d3:4f:58:49:31:f3:3d:29:ff:c4:a5:eb:8f:
                    ec:65:13:74:6a:81:6a:ce:9b:ec:32:d4:b9:b2:02:
                    9f:ed:5d:69:43:0a:1f:1b:eb:ee:46:72:f7:ed:38:
                    7a:be:39:64:5a:9c:96:b5:13:98:ac:25:a4:a0:07:
                    0a:66:63:80:be:a3:10:df:39:4d:c7:95:f9:d0:68:
                    6e:a2:05:f6:82:f3:6b:46:7f:2c:91:60:99:23:71:
                    66:79:62:df:7c:27:d9:c8:ef:7a:f4:dd:de:81:d9:
                    2e:29:a9:d7:e8:76:22:7d:af:3c:63:e8:b1:05:42:
                    48:bd:8f:85:5a:a6:32:4c:d7:49:66:dd:7c:4e:a1:
                    70:09:90:8a:00:ef:e7:e2:c1:ce:a3:7c:03:7f:90:
                    20:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6B:64:A2:57:5F:AD:47:2E:90:7F:75:1C:F0:18:E7:97:46:1F:16
            X509v3 Authority Key Identifier:
                keyid:C5:68:39:07:71:76:3B:B6:31:48:4B:B1:BD:DF:AE:48:59:6F:5C:E2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/xWg5B3F2O7YxSEuxvd-uSFlvXOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xWg5B3F2O7YxSEuxvd-uSFlvXOI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/xWg5B3F2O7YxSEuxvd-uSFlvXOI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:0a:00:86:91:92:91:25:1a:4d:d8:75:94:a5:99:ff:d1:ab:
         6c:91:c1:9e:31:63:f6:22:6e:03:41:80:ea:7d:f3:a8:89:2f:
         fe:72:76:ef:6a:c7:25:93:5f:a2:f4:c7:71:f5:fd:0c:43:c0:
         a9:e6:4e:71:1a:be:94:02:35:57:bd:5b:31:92:5e:98:7c:5a:
         28:d6:70:2d:28:56:de:f6:79:a7:fb:90:6b:d7:65:e8:45:95:
         dc:85:72:e2:43:75:0b:f0:ca:eb:73:51:3a:61:c3:1f:ea:77:
         8c:9f:81:1f:b5:91:4c:09:08:fb:e9:d4:f8:93:bf:af:a5:43:
         2c:76:f9:23:17:93:7a:92:c5:d2:9c:22:b3:70:90:51:7e:89:
         ec:d4:ab:75:f8:b1:80:20:8d:8c:67:76:2a:f2:bd:f2:98:5a:
         06:fe:05:ba:3c:5e:ec:9e:66:27:a2:1e:f7:3d:18:75:a3:bf:
         b0:3b:6b:30:0e:d1:c9:c5:7f:25:01:f0:fb:30:15:83:a1:ca:
         e0:c9:b4:03:95:86:5c:26:50:9b:57:b8:51:e3:56:56:64:2d:
         1c:3e:8a:5d:71:ac:93:06:88:af:dd:8c:a3:7d:cd:14:a8:65:
         ae:81:c6:ab:cf:7a:74:23:30:a1:bf:bf:ba:60:e7:76:3f:be:
         ff:c5:01:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:26:04 2025 by rpki-client