Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft
File:                     fetUO9g1VViFIfIivviJGRdeExQ.mft (raw, json)
Hash identifier:          VdlHoEv8J7pw9+KPTMAejtzjn8NggRvZ98WDysgnpNI=
Subject key identifier:   2B:33:28:67:0B:68:10:E8:C3:9E:2B:64:3D:2E:E6:6F:42:C7:55:10
Authority key identifier: 7D:EB:54:3B:D8:35:55:58:85:21:F2:22:BE:F8:89:19:17:5E:13:14
Certificate issuer:       /CN=7DEB543BD83555588521F222BEF88919175E1314
Certificate serial:       03B8
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fetUO9g1VViFIfIivviJGRdeExQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft
Manifest number:          03B8
Signing time:             Sat 26 Apr 2025 11:08:05 +0000
Manifest this update:     Sat 26 Apr 2025 11:08:05 +0000
Manifest next update:     Sat 26 Apr 2025 17:08:05 +0000
Files and hashes:         1: fetUO9g1VViFIfIivviJGRdeExQ.crl (hash: 1LG6Z/NJjhW87hB9lJamr+sgm7cRWnFM+B8i9Je/IfM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 952 (0x3b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DEB543BD83555588521F222BEF88919175E1314
        Validity
            Not Before: Apr 26 11:08:05 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=2B3328670B6810E8C39E2B643D2EE66F42C75510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7d:a3:8a:82:7f:e4:f3:db:3b:18:f0:4b:f3:
                    87:2a:48:0d:61:80:97:c2:87:93:94:44:b8:36:0d:
                    3d:c3:c9:35:7d:39:09:51:d8:c6:6c:6a:a7:45:59:
                    7f:86:44:7e:e5:af:88:89:d4:c9:99:cf:b7:5a:74:
                    8a:d4:91:3b:c7:3a:e6:ba:95:4d:0d:d5:0d:b7:5c:
                    1d:81:5c:db:33:3b:07:59:b4:eb:b5:37:38:31:24:
                    3f:31:af:63:ba:71:7e:c5:11:a7:41:47:15:83:c7:
                    62:01:a0:fb:7c:6d:c1:5f:67:11:e4:9b:38:df:89:
                    c9:9b:07:66:dc:7b:72:ff:d2:44:26:db:24:f2:8d:
                    cc:44:57:58:d5:95:bd:fb:12:73:a0:ca:65:88:ee:
                    a2:13:a6:4c:68:9d:4a:07:e6:6d:40:5d:e8:14:66:
                    5e:12:65:5c:49:44:80:1d:f1:3d:a6:37:a3:56:dc:
                    6d:f7:dd:ef:6c:49:34:c3:0f:be:30:d1:cb:0c:12:
                    79:2c:c6:71:2b:9d:46:7e:09:ab:7d:55:1d:27:b0:
                    dd:93:58:d3:63:c6:5a:58:b6:ea:e0:b3:15:0d:35:
                    57:b3:71:3d:a3:a3:5b:7e:f3:c9:86:ec:63:0e:9c:
                    5a:71:42:5b:3e:c9:3c:b2:00:2c:b3:91:f8:92:84:
                    79:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:33:28:67:0B:68:10:E8:C3:9E:2B:64:3D:2E:E6:6F:42:C7:55:10
            X509v3 Authority Key Identifier:
                keyid:7D:EB:54:3B:D8:35:55:58:85:21:F2:22:BE:F8:89:19:17:5E:13:14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fetUO9g1VViFIfIivviJGRdeExQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ba:be:49:04:b4:c0:81:db:ca:d4:bb:81:8e:79:20:4d:70:
         36:66:eb:6a:22:0f:99:d9:66:35:41:fc:43:33:7c:f0:a3:64:
         82:f3:c8:2c:23:e7:20:f6:b5:af:cc:b9:6a:c0:64:0a:40:75:
         3d:41:d9:c3:95:ca:95:cc:94:13:d5:84:a4:e5:15:a8:26:01:
         7f:07:50:1b:a9:2a:d3:a4:3c:e9:9f:f9:c6:4b:d8:66:aa:31:
         a9:f1:d7:ba:91:47:0c:89:54:11:bc:69:f6:0a:ea:10:78:fd:
         33:51:6f:c6:b6:03:cf:e9:07:65:40:e3:12:f8:2a:57:df:78:
         25:4a:62:5b:04:da:16:f2:19:2d:74:67:bf:1e:2c:76:eb:7a:
         d9:4b:26:1e:e7:52:14:ea:3b:01:bb:cf:20:0a:5f:c8:5c:19:
         aa:c6:98:80:50:c0:05:33:42:4f:f2:19:9f:fe:78:68:aa:32:
         03:4c:e3:87:12:43:89:c6:d3:f8:37:e7:ca:b9:29:89:95:02:
         e1:de:1b:d2:3b:5c:56:ca:d9:a1:7d:61:50:5c:74:10:f2:f9:
         ba:91:67:f9:b7:eb:da:51:c5:1d:47:dd:1c:7a:da:56:b2:25:
         79:74:e4:08:5e:63:03:0c:1f:c6:98:be:0c:60:f2:5c:79:37:
         d6:7e:85:8e
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICA7gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0RF
QjU0M0JEODM1NTU1ODg1MjFGMjIyQkVGODg5MTkxNzVFMTMxNDAeFw0yNTA0MjYx
MTA4MDVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDJCMzMyODY3MEI2ODEw
RThDMzlFMkI2NDNEMkVFNjZGNDJDNzU1MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDsfaOKgn/k89s7GPBL84cqSA1hgJfCh5OURLg2DT3DyTV9OQlR
2MZsaqdFWX+GRH7lr4iJ1MmZz7dadIrUkTvHOua6lU0N1Q23XB2BXNszOwdZtOu1
NzgxJD8xr2O6cX7FEadBRxWDx2IBoPt8bcFfZxHkmzjficmbB2bce3L/0kQm2yTy
jcxEV1jVlb37EnOgymWI7qITpkxonUoH5m1AXegUZl4SZVxJRIAd8T2mN6NW3G33
3e9sSTTDD74w0csMEnksxnErnUZ+Cat9VR0nsN2TWNNjxlpYturgsxUNNVezcT2j
o1t+88mG7GMOnFpxQls+yTyyACyzkfiShHknAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUKzMoZwtoEOjDnitkPS7mb0LHVRAwHwYDVR0jBBgwFoAUfetUO9g1VViFIfIi
vviJGRdeExQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy
My9mZXRVTzlnMVZWaUZJZklpdnZpSkdSZGVFeFEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2ZldFVPOWcxVlZpRklmSWl2dmlKR1JkZUV4US5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjMvZmV0VU85ZzFWVmlG
SWZJaXZ2aUpHUmRlRXhRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBABq6vkkEtMCB28rUu4GOeSBNcDZm62oiD5nZZjVB/EMzfPCjZILzyCwj5yD2
ta/MuWrAZApAdT1B2cOVypXMlBPVhKTlFagmAX8HUBupKtOkPOmf+cZL2GaqManx
17qRRwyJVBG8afYK6hB4/TNRb8a2A8/pB2VA4xL4KlffeCVKYlsE2hbyGS10Z78e
LHbretlLJh7nUhTqOwG7zyAKX8hcGarGmIBQwAUzQk/yGZ/+eGiqMgNM44cSQ4nG
0/g358q5KYmVAuHeG9I7XFbK2aF9YVBcdBDy+bqRZ/m369pRxR1H3Rx62layJXl0
5AheYwMMH8aYvgxg8lx5N9Z+hY4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:18:52 2025 by rpki-client