Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
File:                     WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft (raw, json)
Hash identifier:          ece8L1NTtaizDNlp4kLXIWqdhGmXadIDqang2Oh4F+4=
Subject key identifier:   0F:F7:B4:38:20:EC:B6:8A:F7:93:7C:9B:9C:D6:65:89:B3:C4:2D:8E
Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
Certificate issuer:       /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Certificate serial:       1EE0
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
Manifest number:          1EBF
Signing time:             Sat 21 Jun 2025 07:41:20 +0000
Manifest this update:     Sat 21 Jun 2025 07:41:20 +0000
Manifest next update:     Sat 21 Jun 2025 13:41:20 +0000
Files and hashes:         1: 4DB6b8uYtZlt1s-s0_Kj8Gd-4Qk.roa (hash: SQKRUUQXTT1pPzXIPeZ5Tyb7WMo6EbNpgE1vC8RTOo8=)
                          2: 7PSiNmw4uP5-tCFMOdEnIR7R1mY.roa (hash: //aLn6ijjd0RsSlEJvFmoXmtL59RIBJT5b37RKtCGhs=)
                          3: 8B3ee2zwLOh8s1iFIKMVsnmZuec.roa (hash: iJOgEVfcK047KEt3I/W4CB27slTmoT+pHxQgHjtHKwM=)
                          4: 8s_bHXEkGfDphZK40c_QLrHy7Is.roa (hash: AMCxQuJ5tzynj2ZxB3wziDhXYAJbbKRS+q8CIWOh1kg=)
                          5: 9Bj9UB3C5NwxT6KrRVdQ2YQUous.roa (hash: INv9naWBG6l1s217kvxz8c7uBcSFLeG45Nf22a5KzMs=)
                          6: EC0cSkLvF1XrlKJ5N0KYO0_vabQ.roa (hash: Xawvh5t2K2TS486my8Cy2k18s+hwdhLtgjfxPlzT6ns=)
                          7: IFIcvn9UMKRt83vukpON6Sbhixc.roa (hash: ee53oRxFxX0OVmISpeWc6zEnCZNfNuioeAQEgPEAWCM=)
                          8: IQ3MBoVNoiKyjgv81qd4k1Fq_ZA.roa (hash: Q4Zo416Ok8oARcqbnlhpOSGq67Max3Ojni1CpzqUPcM=)
                          9: IkZF2VORQzlbUojsrTphCdszKqc.roa (hash: 0kC36+mVolBQQCuRyquKEScwAsSkdyyZX4x06kOmSiI=)
                          10: NHT4Ire_F8NAl-Tb7bg1fVCCio4.roa (hash: AOaMGPdwVSY1SaEMTRPF4k/DYj0UzZkZvvG3vvPDmyk=)
                          11: VS17zQHJixrbUv4jioh85SjDNY4.roa (hash: mrVMrRtK8XPKGGEbzwkp5O1/ilSYDWqZNOunXjUgl4Q=)
                          12: WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl (hash: qA+d5O59MpaII2Oo+5wRs54LrTLfy75TI3vqi1r6OJM=)
                          13: YAKlFb8WHzILwfEf2d-vY0XO2tc.roa (hash: ucFbqWELYtFSKLzhoZxsZihUE3mTffRhAPcL5Ho7sU0=)
                          14: YHoC-Ib7VAPfOYMbo8u5Of10E5c.roa (hash: 2QPtUsTGSjLGKyk0f7KmLP5/Lp4ZoaIrEQvVm6IKzOI=)
                          15: e2sv8-TY5f8TwpeWdzOHudhiy7U.roa (hash: Kg2UK+S6W3aXr3C3ZkJLPWOvHhxx8HCuDZ6HqqV4DCU=)
                          16: h6IigAHQTvufsTVGRtf3LVHt5rc.roa (hash: mnjF2uSX2BUy0FUGkbab260johYF3bE+fxzCc9zlpeY=)
                          17: p5exbNsYSmDiln-g7yIyKvynhwU.roa (hash: n2w8Ek5ok0RMeIpd650AJAP9TYepbKHwFbnAgmfM7Bs=)
                          18: st5P2QTIXtGgnx4kVJ6EJ8aqvWw.roa (hash: teKJPwHr+FjeXiLBkvonrKuw/vvZ8PpXoyaipi8yxV4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7904 (0x1ee0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
        Validity
            Not Before: Jun 21 07:41:20 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=0FF7B43820ECB68AF7937C9B9CD66589B3C42D8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:62:d9:20:80:19:0d:73:50:8a:80:17:07:69:
                    25:5f:68:c3:1e:41:10:06:b2:bc:55:45:18:93:0d:
                    9d:99:01:5f:9f:ae:c8:c1:a8:74:ac:02:b9:86:30:
                    a0:44:86:b1:ef:ff:7f:71:f6:5f:67:c5:57:1b:b7:
                    e7:58:33:6a:38:64:a3:6a:c1:39:40:79:14:f2:8b:
                    f3:23:76:79:60:2a:1e:11:a8:04:f4:72:a0:c3:40:
                    8b:42:52:f2:17:ce:6d:b8:1f:f6:50:14:ab:57:a2:
                    c6:e8:c7:f1:e5:ea:fc:15:20:09:6d:d5:6d:19:98:
                    98:71:d8:fe:e2:06:d1:db:a8:50:bc:d9:d1:29:e7:
                    64:08:47:45:8b:39:da:49:ea:66:e6:3b:a7:35:fd:
                    f9:0b:0e:26:9c:31:fe:c6:a4:cf:5f:dc:1b:bf:45:
                    aa:0a:d7:0c:1f:42:db:e9:1c:58:41:5b:ec:b6:36:
                    86:99:55:04:49:34:10:72:5d:b0:93:87:0e:2e:75:
                    5b:5c:72:e8:c9:dc:e3:43:76:8d:a7:2d:ec:9b:24:
                    0a:58:d2:1d:d7:4c:0f:0a:62:1f:2b:60:b4:7f:84:
                    6b:16:16:dd:f4:6c:5c:ce:d9:0d:dc:41:0e:04:a4:
                    56:71:ed:32:45:c0:88:ce:ba:30:65:a4:73:2a:d7:
                    d5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F7:B4:38:20:EC:B6:8A:F7:93:7C:9B:9C:D6:65:89:B3:C4:2D:8E
            X509v3 Authority Key Identifier:
                keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6e:1f:b0:0c:5f:a0:ae:7f:47:85:b3:b2:06:4b:5f:88:87:
         ac:9c:7d:09:dc:d7:19:24:94:ae:e9:86:6e:62:55:7d:71:e0:
         75:9d:cb:7e:b8:48:4e:b8:d2:92:01:fb:c2:f0:0c:fc:a7:6a:
         9e:c0:94:a1:8e:9e:35:07:8c:3a:25:5b:a8:8c:65:3f:b0:f4:
         b3:9b:c5:ae:b9:8c:9b:12:fd:e8:d7:07:56:04:bc:65:d2:4f:
         ae:d3:26:03:c6:e7:0f:10:87:52:6d:18:d5:96:7e:99:ae:b7:
         6f:0b:c4:97:6f:8e:dc:3f:a7:a6:fa:cc:af:03:4e:7c:51:17:
         82:0f:1f:86:c1:ea:5f:f6:e5:68:fe:90:c4:bb:be:09:01:43:
         94:38:bc:d1:36:e5:97:01:3f:08:a2:f3:26:6a:72:d8:17:d4:
         16:00:65:61:66:5b:b3:c6:9b:13:f1:3f:7e:6f:d5:e9:bc:55:
         7e:3e:30:a1:ac:08:5c:02:73:7b:42:21:2a:84:1b:4a:a3:fd:
         c8:bc:c5:1e:fa:10:0d:7f:68:9a:59:ec:85:d5:45:b0:15:c8:
         c3:46:07:7f:57:53:55:b5:46:f3:fc:c5:65:9f:05:b4:d8:b0:
         8b:92:58:94:6b:5e:08:31:3f:c2:89:ee:5b:45:88:53:2f:27:
         6d:bb:40:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 10:24:38 2025 by rpki-client