Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft
File:                     hPLNDLUaQjf34fOuhRnjzCZEi38.mft (raw, json)
Hash identifier:          KKOpYSyJ6mATC/fbX9zw9pF10fuZ7gju6rt1I/DQc6w=
Subject key identifier:   45:D7:AF:E0:26:C8:57:0C:15:6C:22:E7:C7:BB:2B:A9:05:E9:1F:14
Authority key identifier: 84:F2:CD:0C:B5:1A:42:37:F7:E1:F3:AE:85:19:E3:CC:26:44:8B:7F
Certificate issuer:       /CN=84F2CD0CB51A4237F7E1F3AE8519E3CC26448B7F
Certificate serial:       1492
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft
Manifest number:          1492
Signing time:             Sat 26 Apr 2025 13:11:07 +0000
Manifest this update:     Sat 26 Apr 2025 13:11:07 +0000
Manifest next update:     Sat 26 Apr 2025 19:11:07 +0000
Files and hashes:         1: hPLNDLUaQjf34fOuhRnjzCZEi38.crl (hash: wVyFHm/XWYMj+rW/QWK40j+7ImLEa0Y/PVVxuH+Xyvk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5266 (0x1492)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F2CD0CB51A4237F7E1F3AE8519E3CC26448B7F
        Validity
            Not Before: Apr 26 13:11:07 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=45D7AFE026C8570C156C22E7C7BB2BA905E91F14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:64:81:29:9b:33:04:d8:e0:06:be:7b:f6:7f:
                    c6:b1:b8:45:75:d2:d8:ba:d8:83:ce:d8:e2:f7:e9:
                    30:9b:ba:8e:82:1a:4b:6c:f3:c2:11:24:d1:0a:d4:
                    42:b5:91:00:a8:ff:1c:0d:26:a7:74:21:dc:50:3e:
                    7b:5c:fe:01:d6:32:15:54:12:e5:08:02:19:4c:c1:
                    b2:04:ad:76:0a:35:04:a3:9d:37:f7:7e:66:a0:9b:
                    b5:08:a5:6d:66:65:97:57:3f:47:8c:03:59:db:55:
                    da:14:e5:84:43:00:91:be:e2:44:b5:cc:a9:30:7f:
                    5e:e6:25:fb:7d:89:ec:2d:b6:f1:f9:c1:dc:9b:b7:
                    da:d7:81:e5:d9:2e:a9:54:2f:8d:3d:bf:39:b6:e3:
                    a1:b7:4b:85:57:f4:87:ba:79:21:0d:62:9e:60:d0:
                    9e:fe:a6:8a:c2:04:22:aa:2b:8a:fc:41:dc:c9:48:
                    f5:74:fe:d8:25:73:d3:40:d9:f0:a1:1a:6a:7d:54:
                    f1:04:53:ea:bd:a2:48:4d:a8:3d:ad:bd:d4:1f:7d:
                    89:3d:51:70:7c:3e:ef:ef:b2:90:86:55:07:37:66:
                    f2:a8:17:9c:1d:93:41:5e:e4:1b:40:84:6a:87:fe:
                    68:02:df:a0:40:10:47:6d:39:c4:44:ce:53:2d:0e:
                    c8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D7:AF:E0:26:C8:57:0C:15:6C:22:E7:C7:BB:2B:A9:05:E9:1F:14
            X509v3 Authority Key Identifier:
                keyid:84:F2:CD:0C:B5:1A:42:37:F7:E1:F3:AE:85:19:E3:CC:26:44:8B:7F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:84:25:15:5f:76:e2:a6:ea:a4:05:31:08:e7:c6:d4:c5:90:
         14:e0:c2:ba:03:7a:64:71:5d:51:e5:55:ef:1d:07:68:4d:4a:
         6b:fa:be:6f:65:3d:fe:9f:77:58:40:fb:44:36:63:7e:73:4d:
         7e:c7:15:f5:7c:a1:3f:a6:2d:ba:1f:fa:44:f6:38:d6:e7:04:
         67:7c:28:88:e3:3f:af:f8:a4:df:b7:94:9a:fe:1b:19:ed:a1:
         e0:22:94:2d:c3:50:a3:05:7a:8e:8f:da:54:16:dc:3b:b0:f2:
         d3:06:09:bd:71:b5:9b:59:85:5d:f5:02:bc:68:3e:d6:3b:70:
         02:0a:19:ce:f5:bc:b6:e6:ed:fc:d3:d0:bf:e8:de:5c:73:98:
         ab:44:19:59:18:c2:dc:9e:bf:ad:72:69:99:d4:7a:df:19:b5:
         cc:49:09:20:19:d1:29:1a:e2:20:e6:73:1b:a3:83:47:5b:13:
         fc:08:ca:8a:4d:f6:0c:ab:96:83:a4:2d:a3:ee:cd:6f:7f:a7:
         db:e9:c6:e5:a9:a2:2d:c3:99:c0:90:f7:f2:1f:e8:2d:33:4c:
         58:ad:d5:9b:32:b9:b2:59:03:10:f0:8c:d3:06:09:dd:c6:2d:
         62:0e:ab:95:ac:eb:5a:05:a9:7f:91:d3:3d:a6:dc:f2:8e:63:
         49:cd:28:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:22:27 2025 by rpki-client