Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft
File:                     54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft (raw, json)
Hash identifier:          ynLvDW/yPaKS3YLGhKkNL0iY0xKVdq/72Dy+1NmcQew=
Subject key identifier:   AD:37:A1:94:91:DA:8B:F9:37:C9:EE:16:B1:BE:3D:14:58:C2:EE:6C
Authority key identifier: E7:8A:21:26:90:50:FB:55:1B:B9:57:7B:A2:F5:10:10:5A:14:CE:B2
Certificate issuer:       /CN=E78A21269050FB551BB9577BA2F510105A14CEB2
Certificate serial:       04AF
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/54ohJpBQ-1UbuVd7ovUQEFoUzrI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft
Manifest number:          04AF
Signing time:             Sat 26 Apr 2025 11:08:16 +0000
Manifest this update:     Sat 26 Apr 2025 11:08:16 +0000
Manifest next update:     Sat 26 Apr 2025 17:08:16 +0000
Files and hashes:         1: 54ohJpBQ-1UbuVd7ovUQEFoUzrI.crl (hash: 6q/zJzqgcxADk4RjEik8nknFtydcz17584C99vZYGKU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1199 (0x4af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78A21269050FB551BB9577BA2F510105A14CEB2
        Validity
            Not Before: Apr 26 11:08:16 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=AD37A19491DA8BF937C9EE16B1BE3D1458C2EE6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:42:4b:4a:7a:8d:91:a1:88:eb:7b:ca:c2:3a:
                    f9:d6:71:fb:22:2d:ce:76:62:f1:dd:eb:6d:c4:99:
                    ee:92:9d:c3:f3:cb:10:d9:9c:98:00:01:18:b4:73:
                    67:b7:e4:69:e2:c6:af:c5:16:9f:c0:f4:7c:16:43:
                    db:fb:62:a5:44:b6:a1:45:e8:02:16:d5:6d:76:54:
                    87:e3:6b:f3:59:7c:06:fa:90:66:0d:8d:75:f2:2b:
                    57:9d:96:e5:64:d4:df:60:8f:03:cb:8e:00:18:1d:
                    ee:5a:5a:b6:ba:79:c4:bb:69:3a:66:81:61:d8:d7:
                    88:f9:dc:b5:0c:83:59:91:a0:39:e8:96:39:db:6f:
                    70:d0:10:97:b3:84:2f:11:af:1c:ba:6a:e7:cc:30:
                    9f:25:05:2c:0f:53:c4:03:5f:ae:a8:b2:19:eb:69:
                    43:9f:3e:ee:72:5d:c9:78:36:e0:64:f2:4d:b5:87:
                    de:c4:13:b0:c6:f9:6c:cb:e5:88:00:08:37:44:0f:
                    34:59:59:20:1e:86:cb:eb:34:c9:e6:5d:71:fd:7b:
                    bf:7e:fb:5d:5b:77:28:53:dc:c8:47:1a:13:09:de:
                    d1:59:04:57:52:b4:6f:88:55:c2:49:69:ce:6e:ca:
                    f3:10:90:4e:ab:60:41:f4:22:49:d9:a0:ab:d3:cc:
                    b2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:37:A1:94:91:DA:8B:F9:37:C9:EE:16:B1:BE:3D:14:58:C2:EE:6C
            X509v3 Authority Key Identifier:
                keyid:E7:8A:21:26:90:50:FB:55:1B:B9:57:7B:A2:F5:10:10:5A:14:CE:B2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/54ohJpBQ-1UbuVd7ovUQEFoUzrI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:4f:02:88:20:fc:1d:65:1c:db:b9:cd:91:30:c0:e4:bd:92:
         16:e5:3c:cb:a1:ae:72:ae:f6:9d:96:76:c1:ab:a0:b5:7d:3d:
         17:b8:a2:72:a0:f2:b2:83:6c:f1:f4:a1:9d:17:97:d5:ea:cf:
         6d:d5:fa:f4:9c:bc:47:22:a8:52:37:49:7e:b4:d2:d3:11:69:
         17:20:47:26:94:0d:ba:56:99:97:f6:4c:97:9d:ae:c1:c6:1e:
         a6:76:45:91:7f:f2:2d:3c:98:d8:8f:6d:84:2d:69:98:85:6a:
         89:ad:13:30:3a:a7:21:19:3f:e3:d7:b5:33:fc:18:31:01:c7:
         57:88:3c:ff:e1:05:b1:5e:fb:d6:fd:f8:1d:e2:fc:a6:2c:f7:
         e6:b3:ab:0a:c0:78:f5:ba:c8:08:7b:48:71:7f:5a:f1:10:29:
         e5:3d:5a:d4:d5:4c:bb:be:80:18:df:87:e3:f8:6c:91:2a:75:
         b2:f3:d1:9e:2d:f3:f4:d8:4d:cf:e0:49:df:8b:4f:dc:03:c5:
         24:43:4c:51:a2:16:e5:63:00:fe:ff:b9:50:bb:f3:9f:3e:46:
         3f:59:31:a8:5d:c8:4d:50:c3:a0:49:a2:0c:ce:3f:72:01:9a:
         21:05:36:2a:9d:4c:e9:85:15:f8:3e:04:2c:7b:00:33:85:99:
         35:c1:d4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:21:45 2025 by rpki-client