Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3340/4gVcAoq4tapUsWMav0wjwUIFSro.mft
File:                     4gVcAoq4tapUsWMav0wjwUIFSro.mft (raw, json)
Hash identifier:          7NdEFFl4/OxOduOYymbzcbCNUGTkH4SraDms2ENning=
Subject key identifier:   F0:A9:86:ED:F2:89:F4:96:B6:B6:C7:F3:4A:4E:7A:81:2D:48:11:59
Authority key identifier: E2:05:5C:02:8A:B8:B5:AA:54:B1:63:1A:BF:4C:23:C1:42:05:4A:BA
Certificate issuer:       /CN=E2055C028AB8B5AA54B1631ABF4C23C142054ABA
Certificate serial:       01C5
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4gVcAoq4tapUsWMav0wjwUIFSro.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/4gVcAoq4tapUsWMav0wjwUIFSro.mft
Manifest number:          01C5
Signing time:             Fri 21 Mar 2025 00:32:16 +0000
Manifest this update:     Fri 21 Mar 2025 00:32:16 +0000
Manifest next update:     Fri 21 Mar 2025 06:32:16 +0000
Files and hashes:         1: 4gVcAoq4tapUsWMav0wjwUIFSro.crl (hash: AB7HTPwZZEvkWdNMTHJ+xXdNHHEmwyg1vRpNaql+oi0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2055C028AB8B5AA54B1631ABF4C23C142054ABA
        Validity
            Not Before: Mar 21 00:32:16 2025 GMT
            Not After : Dec 20 00:30:32 2025 GMT
        Subject: CN=F0A986EDF289F496B6B6C7F34A4E7A812D481159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:86:36:19:22:9f:71:ad:7a:63:bb:6d:8b:e7:
                    14:2a:9b:8d:34:51:1c:0e:75:78:49:2e:e6:1f:fa:
                    50:bb:c2:1c:21:41:42:02:70:84:ef:dc:73:16:29:
                    c5:f7:b9:b0:7d:85:66:c8:39:58:34:d1:fe:f8:d9:
                    19:e7:e7:66:9f:22:a7:e5:c4:60:c9:72:73:a9:c8:
                    1c:3e:74:0f:e0:be:69:09:6d:b6:73:75:46:b1:0a:
                    da:32:84:3e:76:c4:9e:4f:c2:a4:45:02:5d:29:cf:
                    e9:bf:a9:f7:24:5e:07:3f:5c:1f:ad:7d:1a:b9:ec:
                    b4:c9:02:8a:fa:bb:c4:53:70:98:5a:c3:76:1f:54:
                    a8:d4:65:a9:28:b9:af:a6:79:39:b2:78:f2:2b:35:
                    5f:69:07:25:b6:70:b1:bd:5d:12:79:5f:00:c9:84:
                    bb:1f:93:d1:a7:ac:bf:eb:78:65:3a:c6:62:f0:ae:
                    e5:ec:e3:d4:93:d5:8e:f2:0c:70:2b:a6:48:00:65:
                    dd:eb:b1:d2:3d:ef:14:d5:87:01:24:a7:fd:92:63:
                    b8:13:f6:f3:8b:96:3b:fb:41:29:d8:b3:d9:26:ae:
                    74:31:3b:56:6d:ea:dc:ec:12:5d:84:67:14:be:25:
                    85:e0:19:49:ad:55:c1:73:ea:e2:94:c1:9d:43:0c:
                    d0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A9:86:ED:F2:89:F4:96:B6:B6:C7:F3:4A:4E:7A:81:2D:48:11:59
            X509v3 Authority Key Identifier:
                keyid:E2:05:5C:02:8A:B8:B5:AA:54:B1:63:1A:BF:4C:23:C1:42:05:4A:BA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/4gVcAoq4tapUsWMav0wjwUIFSro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4gVcAoq4tapUsWMav0wjwUIFSro.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/4gVcAoq4tapUsWMav0wjwUIFSro.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:2e:9f:88:9c:8c:81:1a:06:e4:64:3b:17:53:11:c5:5c:4e:
         bd:d4:ac:73:c1:75:eb:f8:ca:97:8d:62:8e:fc:08:1f:b7:bd:
         db:67:16:49:2d:19:e4:07:92:76:e8:a4:62:35:30:15:c7:5e:
         f8:f9:da:1d:75:86:90:09:56:ab:79:35:d8:2f:c1:4e:88:23:
         04:fd:2b:0b:09:96:e9:67:0f:18:d8:03:9c:8e:9b:90:17:40:
         6d:da:4c:9f:c2:e8:5f:9c:b0:87:2b:aa:33:92:88:38:16:86:
         ab:ce:8a:01:33:5e:44:02:32:07:27:72:01:eb:c3:11:ac:6e:
         43:2d:f2:70:dd:04:d1:69:3b:b5:a0:39:2e:b0:e8:2c:75:19:
         5c:71:05:4b:85:56:f2:ee:29:07:cc:ff:11:68:f2:32:46:5f:
         d9:bb:b6:00:50:30:c2:d5:9b:d0:55:f2:12:10:25:a6:64:e7:
         f9:9d:d8:c3:00:18:3a:a8:a0:50:42:b1:8d:76:54:76:07:12:
         47:e6:64:0b:5c:75:9b:48:5d:24:45:95:62:8b:dc:b6:aa:1e:
         8c:3e:2d:3d:b7:08:7d:8d:a2:42:6f:0d:6a:00:56:f6:db:46:
         ba:98:61:cc:6c:29:f4:6a:a7:4d:ba:a5:a7:8a:88:2a:64:67:
         e1:3d:f0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:34:27 2025 by rpki-client