Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
File:                     UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft (raw, json)
Hash identifier:          ONtcRF5zOGCf8vYtZSTB8WggeVleT45iiMXt4VTUhgU=
Subject key identifier:   0E:11:2D:BB:61:71:02:64:88:46:63:A5:59:99:07:4B:E9:DF:ED:12
Authority key identifier: 50:91:97:2F:AB:6D:1C:45:4E:2B:44:12:DC:44:85:A4:74:58:BE:36
Certificate issuer:       /CN=5091972FAB6D1C454E2B4412DC4485A47458BE36
Certificate serial:       1830
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
Manifest number:          1830
Signing time:             Sat 26 Apr 2025 11:08:21 +0000
Manifest this update:     Sat 26 Apr 2025 11:08:21 +0000
Manifest next update:     Sat 26 Apr 2025 17:08:21 +0000
Files and hashes:         1: UJGXL6ttHEVOK0QS3ESFpHRYvjY.crl (hash: oXCyaVTHifKE0hGwL6utnyv0k2hlwBCm8d1NYhZKUnU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6192 (0x1830)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5091972FAB6D1C454E2B4412DC4485A47458BE36
        Validity
            Not Before: Apr 26 11:08:21 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=0E112DBB61710264884663A55999074BE9DFED12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e7:76:61:d1:03:2b:e3:f6:0c:ce:c3:a5:bf:
                    e0:89:6c:50:37:41:5d:34:7f:a1:ea:ba:9a:de:a9:
                    00:a6:09:28:c9:59:2c:fd:3e:26:2c:7d:1c:e1:9e:
                    71:d2:1e:9e:da:0f:52:76:7a:ec:d3:9a:08:3d:17:
                    2e:da:e0:b2:3b:da:ef:5b:a8:d5:09:db:32:e7:c7:
                    f2:26:66:b0:2a:53:a6:aa:3c:f8:4a:dd:72:f1:e1:
                    31:7e:b0:8b:a1:9f:af:27:20:29:8c:af:cb:61:06:
                    5c:52:f2:8f:c5:fe:ef:38:7f:46:44:2e:db:21:88:
                    6d:d5:9e:7b:4a:2e:94:16:57:c4:fb:67:c3:3c:60:
                    c8:05:00:92:7a:db:84:ec:2b:01:25:68:66:a6:76:
                    73:52:41:e7:3c:80:f7:9e:ce:75:93:f3:c8:50:b8:
                    fa:17:32:06:fe:31:4e:55:f4:0e:57:ff:f8:a5:a5:
                    9a:54:67:dd:ee:1d:e5:06:42:12:23:a0:8f:a6:16:
                    d1:4d:60:62:64:e3:63:a7:b6:91:dd:bd:3e:36:60:
                    bf:fb:44:c7:56:6c:a9:28:81:8f:5c:b1:e8:40:62:
                    b2:0d:3d:77:f1:8a:84:04:d3:88:33:20:21:45:db:
                    d5:d5:68:68:09:ea:58:5d:16:ab:27:6a:0f:ad:f0:
                    64:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:11:2D:BB:61:71:02:64:88:46:63:A5:59:99:07:4B:E9:DF:ED:12
            X509v3 Authority Key Identifier:
                keyid:50:91:97:2F:AB:6D:1C:45:4E:2B:44:12:DC:44:85:A4:74:58:BE:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:5f:6b:8e:67:db:5b:47:6c:1f:d0:06:c7:fe:00:7e:ba:8d:
         ba:65:64:a5:42:5a:01:63:8e:c9:ed:6b:23:43:85:f5:20:b7:
         83:c3:a6:f7:f0:13:74:03:f2:82:02:3d:81:ae:d5:12:e4:cc:
         2c:f3:d6:e6:e4:97:51:17:f5:20:b2:4f:59:32:8b:56:53:c5:
         74:ef:56:96:5b:ea:95:61:af:4a:c1:72:9e:f1:b9:3f:30:7f:
         b6:0f:50:1b:f7:d5:22:12:da:b4:a8:3b:2c:16:23:30:43:45:
         14:fe:26:e8:0c:b2:f6:3b:91:0d:05:73:02:f3:97:23:69:49:
         e5:41:9b:29:fd:30:80:d0:a6:6b:9f:f5:3d:2d:50:cf:85:55:
         56:af:ab:9c:d8:c8:8f:91:5e:8f:f7:e3:5a:30:3b:ae:b5:5c:
         df:16:de:0b:84:20:ad:cf:ef:14:a6:0d:6e:b1:f4:4a:ea:47:
         df:77:d5:de:68:13:e0:53:fa:d9:d6:08:4c:c7:d4:cf:d8:08:
         9d:e3:d7:ff:ca:02:13:23:3c:c4:4e:bc:90:0a:cf:11:70:bd:
         af:93:4f:aa:9d:22:0b:c0:59:ac:59:1f:f7:bd:3a:75:2d:5d:
         8f:3e:fd:85:9d:d0:af:e1:28:ce:35:3e:f1:d4:bc:7a:a0:77:
         ec:9d:ac:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:22:26 2025 by rpki-client