Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3363/wTL_TD2yp6fdw4x5D2f8gGZ6E_w.mft
File:                     wTL_TD2yp6fdw4x5D2f8gGZ6E_w.mft (raw, json)
Hash identifier:          uRc+SahwSO0DgduAbJ3AG87lQW5zQJiP0nxX7ocDYsw=
Subject key identifier:   A2:BD:98:1B:35:17:43:D8:F4:DC:24:48:0E:8A:4E:50:AC:18:EF:BD
Authority key identifier: C1:32:FF:4C:3D:B2:A7:A7:DD:C3:8C:79:0F:67:FC:80:66:7A:13:FC
Certificate issuer:       /CN=C132FF4C3DB2A7A7DDC38C790F67FC80667A13FC
Certificate serial:       2A
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wTL_TD2yp6fdw4x5D2f8gGZ6E_w.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3363/wTL_TD2yp6fdw4x5D2f8gGZ6E_w.mft
Manifest number:          2A
Signing time:             Thu 24 Apr 2025 01:06:24 +0000
Manifest this update:     Thu 24 Apr 2025 01:06:24 +0000
Manifest next update:     Thu 24 Apr 2025 07:06:24 +0000
Files and hashes:         1: wTL_TD2yp6fdw4x5D2f8gGZ6E_w.crl (hash: 6CkkgrSnAZhI8Fw03imeP/h77pMUJ+9iG+2mVV8xkDQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C132FF4C3DB2A7A7DDC38C790F67FC80667A13FC
        Validity
            Not Before: Apr 24 01:06:24 2025 GMT
            Not After : Apr 14 02:53:54 2026 GMT
        Subject: CN=A2BD981B351743D8F4DC24480E8A4E50AC18EFBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:11:dc:ad:3b:1e:e1:f3:ad:fd:b3:cd:35:c4:
                    05:a3:06:30:d2:bd:17:d2:fa:e8:ec:9c:22:69:c0:
                    bb:5a:96:db:d6:7e:98:28:56:0b:1c:e3:78:24:22:
                    42:0b:a4:7e:c6:fe:6e:b2:76:ac:d7:7c:d3:78:91:
                    95:11:31:ed:c9:bd:2e:f3:aa:93:e2:2a:b9:fa:cc:
                    a8:2a:f2:a8:88:11:d5:14:94:58:b0:58:45:df:8b:
                    14:fc:3a:57:b4:1c:3e:c0:d7:6f:e4:6d:4c:25:cd:
                    d8:4e:f1:3f:a7:91:a2:a2:eb:74:36:82:90:54:d7:
                    7e:60:a1:6c:11:3a:a2:11:08:82:08:80:95:38:61:
                    6c:f6:21:c7:36:94:a9:e7:cc:39:84:c4:a2:d3:1a:
                    06:99:41:ef:7a:c1:1d:30:cd:5f:55:12:1d:fa:fd:
                    41:d8:3e:bd:d8:4a:2c:3c:c5:68:85:20:08:ce:50:
                    73:3a:3f:3b:04:a4:30:a2:ae:00:ca:df:f3:59:40:
                    01:18:a2:30:02:a8:d9:52:05:42:03:6d:d0:c4:ac:
                    36:7c:89:4e:80:7e:bb:6e:28:de:0d:4a:b1:8a:6c:
                    5b:c2:58:76:bd:ae:cf:a4:fb:83:89:84:72:42:b2:
                    a2:d7:0e:13:c7:5d:24:d6:06:ab:e4:e5:db:c0:a3:
                    ca:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BD:98:1B:35:17:43:D8:F4:DC:24:48:0E:8A:4E:50:AC:18:EF:BD
            X509v3 Authority Key Identifier:
                keyid:C1:32:FF:4C:3D:B2:A7:A7:DD:C3:8C:79:0F:67:FC:80:66:7A:13:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3363/wTL_TD2yp6fdw4x5D2f8gGZ6E_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wTL_TD2yp6fdw4x5D2f8gGZ6E_w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3363/wTL_TD2yp6fdw4x5D2f8gGZ6E_w.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d2:1f:76:a4:46:6f:cb:da:ed:eb:85:16:34:dd:ae:ee:7a:
         e7:9c:41:ff:1b:9e:9f:cb:f1:c9:54:21:f7:be:e0:63:e6:60:
         9d:ee:a7:8e:0c:fa:ee:fb:bf:56:c0:bc:ba:30:2f:70:c5:93:
         b1:16:a1:d2:29:38:2a:1f:ec:65:1a:83:45:23:cf:b1:73:fe:
         15:9f:cf:e8:ee:4e:71:47:0c:74:4f:f4:66:b4:14:9f:61:40:
         ff:cd:9f:3f:0f:24:da:fc:b6:3e:28:7f:ff:7e:90:cd:9e:d2:
         37:49:be:6d:74:0b:0e:59:ff:a4:83:e1:78:93:3d:7e:8d:4c:
         13:25:76:97:fd:5c:10:0b:6d:a1:b1:aa:d5:48:42:b3:87:e2:
         d8:5b:86:b3:54:4e:bb:ad:e0:e9:57:47:20:e6:49:e7:6f:d5:
         6b:24:62:9e:92:87:36:01:59:3b:e8:91:9b:57:a5:84:47:cf:
         ca:21:86:dd:f2:2d:c5:32:e4:82:45:98:60:53:63:5f:8a:a3:
         5f:32:d3:13:85:c5:c4:c8:38:f7:de:bb:1d:b0:5a:05:87:d0:
         15:d0:12:a3:c1:52:c4:04:15:a4:b4:42:99:a8:a1:81:63:52:
         cb:2b:c9:9d:85:ab:eb:c4:55:a2:1d:e0:f0:6c:d3:57:dc:7a:
         71:f0:6c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:46:42 2025 by rpki-client