Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3291/5rA2up_FkYdletsFx2-HqmMpDDQ.mft
File:                     5rA2up_FkYdletsFx2-HqmMpDDQ.mft (raw, json)
Hash identifier:          s54/5hVg+PJ7y/bH623gEXzwDvFobx58nP3BpYaFfDQ=
Subject key identifier:   F5:4D:C4:F2:48:EA:DE:EE:E0:17:4F:18:52:ED:51:C3:94:E7:B3:4E
Authority key identifier: E6:B0:36:BA:9F:C5:91:87:65:7A:DB:05:C7:6F:87:AA:63:29:0C:34
Certificate issuer:       /CN=E6B036BA9FC59187657ADB05C76F87AA63290C34
Certificate serial:       0627
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5rA2up_FkYdletsFx2-HqmMpDDQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/5rA2up_FkYdletsFx2-HqmMpDDQ.mft
Manifest number:          0627
Signing time:             Sat 26 Apr 2025 11:08:02 +0000
Manifest this update:     Sat 26 Apr 2025 11:08:02 +0000
Manifest next update:     Sat 26 Apr 2025 17:08:02 +0000
Files and hashes:         1: 5rA2up_FkYdletsFx2-HqmMpDDQ.crl (hash: 0OeGaLL0vupMq4RI/Xjn6e5gP4+JmPIW/ogXqrZtDNA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1575 (0x627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6B036BA9FC59187657ADB05C76F87AA63290C34
        Validity
            Not Before: Apr 26 11:08:02 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=F54DC4F248EADEEEE0174F1852ED51C394E7B34E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:99:2b:0d:f6:1c:08:bb:06:b9:b6:f2:37:f7:
                    73:d6:89:bd:d3:7e:37:8b:c2:22:bc:71:5d:ba:4d:
                    3f:47:df:f8:37:6c:95:96:9f:82:9f:09:f4:84:3c:
                    61:fc:8d:ca:a8:bd:4d:b5:41:d7:47:f0:15:c3:03:
                    65:62:44:cd:04:47:c8:ad:87:d1:df:1d:aa:29:14:
                    37:3a:a8:29:3d:eb:20:78:7e:26:a7:ce:d6:4c:55:
                    f1:7a:7c:4a:12:14:f0:d5:78:9d:d3:95:f5:1f:38:
                    3b:71:03:d8:de:93:a6:d5:71:20:dd:9a:fd:2e:81:
                    94:6f:03:18:65:b0:12:9a:ff:c0:17:c4:10:79:45:
                    d1:4d:5b:b6:be:dd:31:6f:64:bf:79:2b:8f:24:9b:
                    c4:99:1d:b2:0d:b4:66:67:85:cc:6f:10:82:ee:61:
                    92:40:52:9e:0f:b9:1a:a1:59:ff:91:8b:83:d7:81:
                    f1:f4:df:69:66:11:e3:a4:08:03:02:46:51:60:d4:
                    28:55:e4:d4:8d:35:42:50:9b:0c:11:6e:13:5c:c6:
                    68:ec:25:3f:6b:08:e7:44:d2:6f:6f:33:8b:bd:1a:
                    09:0a:d3:ef:01:1a:f6:82:df:1c:44:62:67:f5:f4:
                    46:fa:b4:da:70:8b:1d:56:38:b3:5b:d1:65:00:fc:
                    cd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4D:C4:F2:48:EA:DE:EE:E0:17:4F:18:52:ED:51:C3:94:E7:B3:4E
            X509v3 Authority Key Identifier:
                keyid:E6:B0:36:BA:9F:C5:91:87:65:7A:DB:05:C7:6F:87:AA:63:29:0C:34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/5rA2up_FkYdletsFx2-HqmMpDDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5rA2up_FkYdletsFx2-HqmMpDDQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/5rA2up_FkYdletsFx2-HqmMpDDQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:3f:92:a0:16:64:72:85:b1:a8:6a:26:50:fe:ef:cc:d3:3f:
         fc:24:4d:ac:3a:50:38:de:bb:dc:fb:c1:ed:b3:4c:2b:4a:98:
         18:32:53:02:f8:93:b5:94:c3:26:a3:1f:49:c3:a4:43:42:2d:
         01:73:8b:a0:84:d7:e9:61:8e:15:14:f6:5c:98:2f:fa:f2:88:
         84:5b:fc:cf:e1:57:d7:42:3d:ad:ed:a5:63:68:5d:e7:f3:63:
         d4:04:b7:e5:fc:ea:57:0d:23:4c:a0:80:a2:96:76:da:7c:cc:
         da:53:13:c1:1b:bb:84:6f:7e:57:2c:b6:ae:ac:9d:03:93:a4:
         b9:5c:73:6f:f9:06:dc:69:53:b5:24:32:38:53:a7:68:3e:f8:
         c9:b2:e2:0d:39:fc:21:f4:29:a9:38:e2:d8:0a:3e:c0:ea:94:
         23:0e:bc:3c:4c:f0:3d:c1:e0:76:b2:c5:c8:a9:e3:66:f4:d3:
         6f:5c:58:35:a8:97:f7:a3:d3:16:1b:94:05:06:4a:80:3b:8c:
         35:0a:58:a5:38:1d:62:54:ef:a5:7d:23:ea:a5:94:f4:6b:bf:
         ac:ff:a3:4b:5e:b2:40:56:c3:db:e2:d4:3b:4b:3a:86:e6:17:
         65:b5:72:c6:ff:1e:4b:8a:59:e0:4a:46:9b:ef:29:51:73:84:
         b2:9b:d1:57
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBicwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTZC
MDM2QkE5RkM1OTE4NzY1N0FEQjA1Qzc2Rjg3QUE2MzI5MEMzNDAeFw0yNTA0MjYx
MTA4MDJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEY1NERDNEYyNDhFQURF
RUVFMDE3NEYxODUyRUQ1MUMzOTRFN0IzNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDImSsN9hwIuwa5tvI393PWib3TfjeLwiK8cV26TT9H3/g3bJWW
n4KfCfSEPGH8jcqovU21QddH8BXDA2ViRM0ER8ith9HfHaopFDc6qCk96yB4fian
ztZMVfF6fEoSFPDVeJ3TlfUfODtxA9jek6bVcSDdmv0ugZRvAxhlsBKa/8AXxBB5
RdFNW7a+3TFvZL95K48km8SZHbINtGZnhcxvEILuYZJAUp4PuRqhWf+Ri4PXgfH0
32lmEeOkCAMCRlFg1ChV5NSNNUJQmwwRbhNcxmjsJT9rCOdE0m9vM4u9GgkK0+8B
GvaC3xxEYmf19Eb6tNpwix1WOLNb0WUA/M3fAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU9U3E8kjq3u7gF08YUu1Rw5Tns04wHwYDVR0jBBgwFoAU5rA2up/FkYdletsF
x2+HqmMpDDQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5
MS81ckEydXBfRmtZZGxldHNGeDItSHFtTXBERFEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzVyQTJ1cF9Ga1lkbGV0c0Z4Mi1IcW1NcEREUS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTEvNXJBMnVwX0ZrWWRs
ZXRzRngyLUhxbU1wRERRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAKo/kqAWZHKFsahqJlD+78zTP/wkTaw6UDjeu9z7we2zTCtKmBgyUwL4k7WU
wyajH0nDpENCLQFzi6CE1+lhjhUU9lyYL/ryiIRb/M/hV9dCPa3tpWNoXefzY9QE
t+X86lcNI0yggKKWdtp8zNpTE8Ebu4Rvflcstq6snQOTpLlcc2/5BtxpU7UkMjhT
p2g++Mmy4g05/CH0Kak44tgKPsDqlCMOvDxM8D3B4Hayxcip42b0029cWDWol/ej
0xYblAUGSoA7jDUKWKU4HWJU76V9I+qllPRrv6z/o0teskBWw9vi1DtLOobmF2W1
csb/HkuKWeBKRpvvKVFzhLKb0Vc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:28:46 2025 by rpki-client