Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.mft
File:                     YBt2TrIFMYSt13mb83x-Ctsz99w.mft (raw, json)
Hash identifier:          7CJMBjGKoUh3RwvWKQwD16RlEki9MeB9WXA+1jPT1dY=
Subject key identifier:   B1:7C:3C:F4:4B:F9:80:D1:A0:BF:8E:74:79:DA:90:78:E8:29:0A:73
Authority key identifier: 60:1B:76:4E:B2:05:31:84:AD:D7:79:9B:F3:7C:7E:0A:DB:33:F7:DC
Certificate issuer:       /CN=601B764EB2053184ADD7799BF37C7E0ADB33F7DC
Certificate serial:       03E0
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YBt2TrIFMYSt13mb83x-Ctsz99w.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.mft
Manifest number:          03E0
Signing time:             Sun 22 Jun 2025 01:15:38 +0000
Manifest this update:     Sun 22 Jun 2025 01:15:38 +0000
Manifest next update:     Sun 22 Jun 2025 07:15:38 +0000
Files and hashes:         1: YBt2TrIFMYSt13mb83x-Ctsz99w.crl (hash: xLDfYHVv5oFUxvzY3qUgcVKSEHjyHkC/udO8mtA574s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 992 (0x3e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601B764EB2053184ADD7799BF37C7E0ADB33F7DC
        Validity
            Not Before: Jun 22 01:15:38 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=B17C3CF44BF980D1A0BF8E7479DA9078E8290A73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:43:eb:28:ea:a9:81:15:e8:67:3f:e4:f3:8a:
                    14:e9:34:01:10:18:8d:d3:fb:a9:6a:ed:20:f6:02:
                    72:24:f9:94:e1:cc:e5:9a:94:95:d1:bf:0b:fd:0e:
                    d7:fc:4c:c7:06:e7:99:e1:aa:fd:93:f6:05:76:69:
                    f8:28:79:bc:77:65:1a:1c:da:11:24:68:6d:7f:1f:
                    e8:34:2b:ab:73:bf:ca:23:95:b9:57:40:e3:70:71:
                    f0:02:3c:40:22:9c:ae:65:97:7d:cc:d4:50:41:17:
                    a2:11:16:e8:69:cc:2a:38:eb:6a:6f:98:83:14:99:
                    7e:d1:ec:11:11:5b:a2:42:ed:d7:00:96:5c:51:f2:
                    0a:3c:53:af:c7:16:a2:e5:9c:c4:51:cc:bc:5f:49:
                    e2:f8:6f:4c:c8:12:6e:32:14:23:34:1d:84:77:6f:
                    40:4d:aa:5a:a7:a3:b5:8a:27:62:64:8a:53:b1:60:
                    77:b5:ee:d5:f7:20:1c:35:fc:9e:b7:08:ca:42:34:
                    5f:22:a9:f7:98:2c:3f:eb:40:dc:16:55:97:e9:da:
                    6b:a4:fd:8e:46:7f:bd:a0:94:d2:b4:08:c6:df:a8:
                    61:1a:f2:0a:57:ac:97:65:73:88:d2:3c:2e:3c:63:
                    eb:87:e2:40:0d:58:9a:a8:0a:6b:9e:31:59:d2:36:
                    de:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7C:3C:F4:4B:F9:80:D1:A0:BF:8E:74:79:DA:90:78:E8:29:0A:73
            X509v3 Authority Key Identifier:
                keyid:60:1B:76:4E:B2:05:31:84:AD:D7:79:9B:F3:7C:7E:0A:DB:33:F7:DC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YBt2TrIFMYSt13mb83x-Ctsz99w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:e0:02:c3:bf:9c:35:1a:4b:b6:64:01:3f:6b:18:cc:ca:6f:
         dc:39:1d:e5:38:0a:c0:2a:69:f5:69:8f:26:99:6e:9a:ec:3a:
         92:74:f4:ac:0d:ae:a6:0a:01:0d:7f:6a:e4:c2:7b:d8:98:10:
         a3:89:a3:8d:83:5f:85:73:be:a2:a6:38:ec:0a:80:db:a9:b7:
         33:17:a8:ce:45:89:c4:ec:c5:1b:28:fb:71:56:82:fd:4c:4e:
         50:b3:8f:66:b0:be:d3:9e:f8:33:96:76:6d:6c:ac:66:4b:59:
         77:e6:e0:ad:ba:fd:f5:1a:92:0c:5c:e9:33:3f:98:cb:45:d3:
         3e:ce:1b:31:17:75:26:d5:af:b6:c4:83:b3:bf:29:80:25:5e:
         78:7e:21:c7:21:39:0f:b7:b9:32:ba:cb:93:e0:95:41:1d:c9:
         be:d5:0c:26:a1:57:28:0d:59:81:89:2f:ed:7f:39:05:a2:69:
         69:4d:40:d6:cf:79:9e:8f:8b:fc:80:d1:7b:e4:fb:c8:11:04:
         1b:1b:2c:4f:5b:0c:92:09:97:8d:21:a8:b8:91:dd:3e:ec:5f:
         c4:29:cf:a4:3d:96:01:25:d5:6d:92:15:9d:f5:9b:2b:a0:15:
         c1:50:59:46:36:03:17:2f:f5:58:6c:ac:ce:26:11:b4:fe:b9:
         e7:07:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:10:59 2025 by rpki-client