Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3362/ligWorguOEpZx1jtFLqkwBqsotE.mft
File:                     ligWorguOEpZx1jtFLqkwBqsotE.mft (raw, json)
Hash identifier:          U4EVkaltwzjpXr8aJ1PSXoo04fyowAsmRda+iwHGBwQ=
Subject key identifier:   33:41:44:DB:95:57:55:16:27:02:5A:4F:F1:28:71:4A:45:D5:AC:B7
Authority key identifier: 96:28:16:A2:B8:2E:38:4A:59:C7:58:ED:14:BA:A4:C0:1A:AC:A2:D1
Certificate issuer:       /CN=962816A2B82E384A59C758ED14BAA4C01AACA2D1
Certificate serial:       2A
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ligWorguOEpZx1jtFLqkwBqsotE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3362/ligWorguOEpZx1jtFLqkwBqsotE.mft
Manifest number:          2A
Signing time:             Thu 24 Apr 2025 01:06:23 +0000
Manifest this update:     Thu 24 Apr 2025 01:06:23 +0000
Manifest next update:     Thu 24 Apr 2025 07:06:23 +0000
Files and hashes:         1: ligWorguOEpZx1jtFLqkwBqsotE.crl (hash: KJVbcddU43LpOxJtRSt18cjCpQS82EIq7zCWDLOvrfU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=962816A2B82E384A59C758ED14BAA4C01AACA2D1
        Validity
            Not Before: Apr 24 01:06:23 2025 GMT
            Not After : Apr 14 02:52:54 2026 GMT
        Subject: CN=334144DB9557551627025A4FF128714A45D5ACB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c3:c2:ba:77:cc:bd:8f:40:81:50:dd:39:25:
                    90:9d:57:c5:39:ef:b2:26:4d:82:41:51:02:fb:e1:
                    42:f6:fb:bc:4a:fc:31:76:e2:ba:9a:8f:49:95:02:
                    a1:33:65:f8:c3:8c:2b:e2:da:50:f1:bf:a5:6d:60:
                    8b:6c:66:39:17:ef:63:22:f9:af:76:3e:58:64:d7:
                    7f:7d:ae:52:eb:26:3c:b2:40:4d:1c:1b:dd:c3:84:
                    76:0c:f2:11:a6:0a:78:42:55:35:be:a6:fe:ef:3f:
                    0e:c2:44:ac:9c:29:71:98:6a:53:80:55:dd:15:f6:
                    f8:10:36:e6:bc:fa:91:4b:83:81:09:0a:19:a8:73:
                    5a:2e:69:b7:b7:96:64:db:1d:81:09:08:df:f5:8b:
                    38:5d:d6:f6:47:ae:68:02:f7:a0:ef:40:9c:f3:88:
                    b9:9f:0c:81:88:30:9e:28:0b:b4:36:56:87:01:18:
                    48:74:a9:a5:39:b6:8b:2e:ba:28:48:52:aa:25:95:
                    47:1d:43:bd:98:9f:98:28:19:92:15:fd:f4:09:72:
                    58:83:41:e3:34:97:34:92:ab:99:4c:b2:31:0f:b2:
                    06:6e:68:b4:a4:20:05:2c:a3:0a:1e:68:e8:a4:c4:
                    ff:50:bb:d3:4a:53:5b:e5:b2:f3:78:e0:13:98:86:
                    24:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:41:44:DB:95:57:55:16:27:02:5A:4F:F1:28:71:4A:45:D5:AC:B7
            X509v3 Authority Key Identifier:
                keyid:96:28:16:A2:B8:2E:38:4A:59:C7:58:ED:14:BA:A4:C0:1A:AC:A2:D1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3362/ligWorguOEpZx1jtFLqkwBqsotE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ligWorguOEpZx1jtFLqkwBqsotE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3362/ligWorguOEpZx1jtFLqkwBqsotE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:94:be:97:29:28:de:9a:bb:44:4a:f7:15:0d:06:3c:4d:ee:
         c5:17:6b:57:9f:57:0e:9d:67:5d:44:f5:dc:48:89:4f:af:f2:
         0d:85:99:7a:6b:74:1f:40:fe:30:e2:b1:e0:fd:7e:b5:d1:a3:
         f9:ef:19:ad:91:9d:f4:df:3a:b1:3c:9c:70:44:bf:92:cf:91:
         c9:75:b4:04:97:aa:b8:34:f7:52:47:14:b7:8f:3b:63:04:68:
         bf:8b:19:32:77:66:fa:39:b2:56:71:54:28:fa:b1:7d:ac:1c:
         ed:8c:cf:04:30:3a:be:87:a7:5d:f8:03:23:8d:c9:15:1b:17:
         e4:03:9a:8f:c9:9f:8c:33:cb:eb:1e:40:8f:d8:51:8a:9a:46:
         18:08:da:cc:17:53:a6:29:22:43:55:e3:b4:71:b1:1b:d8:53:
         1f:15:68:3d:7c:b3:89:68:b8:be:e1:bd:26:e9:85:d4:d3:9e:
         b5:e4:a5:e6:fe:90:1a:25:31:fd:e9:14:36:10:95:3b:b6:01:
         ab:b8:b0:4c:ea:2b:0b:2c:2d:97:f7:b8:5e:9c:d1:8b:4c:09:
         57:34:50:30:aa:08:15:45:1f:fc:e1:38:61:53:a6:ee:e3:24:
         9f:4b:7e:c6:60:31:77:db:c9:2a:b8:e6:7a:0f:09:13:e2:b3:
         ee:9e:2c:e8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NjI4
MTZBMkI4MkUzODRBNTlDNzU4RUQxNEJBQTRDMDFBQUNBMkQxMB4XDTI1MDQyNDAx
MDYyM1oXDTI2MDQxNDAyNTI1NFowMzExMC8GA1UEAxMoMzM0MTQ0REI5NTU3NTUx
NjI3MDI1QTRGRjEyODcxNEE0NUQ1QUNCNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK3Dwrp3zL2PQIFQ3TklkJ1XxTnvsiZNgkFRAvvhQvb7vEr8MXbi
upqPSZUCoTNl+MOMK+LaUPG/pW1gi2xmORfvYyL5r3Y+WGTXf32uUusmPLJATRwb
3cOEdgzyEaYKeEJVNb6m/u8/DsJErJwpcZhqU4BV3RX2+BA25rz6kUuDgQkKGahz
Wi5pt7eWZNsdgQkI3/WLOF3W9keuaAL3oO9AnPOIuZ8MgYgwnigLtDZWhwEYSHSp
pTm2iy66KEhSqiWVRx1DvZifmCgZkhX99AlyWINB4zSXNJKrmUyyMQ+yBm5otKQg
BSyjCh5o6KTE/1C700pTW+Wy83jgE5iGJNMCAwEAAaOCAgwwggIIMB0GA1UdDgQW
BBQzQUTblVdVFicCWk/xKHFKRdWstzAfBgNVHSMEGDAWgBSWKBaiuC44SlnHWO0U
uqTAGqyi0TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzYy
L2xpZ1dvcmd1T0VwWngxanRGTHFrd0Jxc290RS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvbGlnV29yZ3VPRXBaeDFqdEZMcWt3QnFzb3RFLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM2Mi9saWdXb3JndU9FcFp4
MWp0Rkxxa3dCcXNvdEUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASZS+lyko3pq7REr3FQ0GPE3uxRdrV59XDp1nXUT13EiJT6/yDYWZemt0H0D+
MOKx4P1+tdGj+e8ZrZGd9N86sTyccES/ks+RyXW0BJequDT3UkcUt487YwRov4sZ
Mndm+jmyVnFUKPqxfawc7YzPBDA6voenXfgDI43JFRsX5AOaj8mfjDPL6x5Aj9hR
ippGGAjazBdTpikiQ1XjtHGxG9hTHxVoPXyziWi4vuG9JumF1NOeteSl5v6QGiUx
/ekUNhCVO7YBq7iwTOorCywtl/e4XpzRi0wJVzRQMKoIFUUf/OE4YVOm7uMkn0t+
xmAxd9vJKrjmeg8JE+Kz7p4s6A==
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:13:53 2025 by rpki-client