Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/8/zdnD6A790w6RIRaPwiqlCoVA3f8.mft
File:                     zdnD6A790w6RIRaPwiqlCoVA3f8.mft (raw, json)
Hash identifier:          dEwhXTvVXxzC63kuiljaBxOQPxWsZZKxNn9gNQV8EsY=
Subject key identifier:   18:A8:D9:43:81:90:4A:50:7E:3C:78:24:58:45:20:3A:C2:07:87:05
Authority key identifier: CD:D9:C3:E8:0E:FD:D3:0E:91:21:16:8F:C2:2A:A5:0A:85:40:DD:FF
Certificate issuer:       /CN=CDD9C3E80EFDD30E9121168FC22AA50A8540DDFF
Certificate serial:       1E49
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zdnD6A790w6RIRaPwiqlCoVA3f8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8/zdnD6A790w6RIRaPwiqlCoVA3f8.mft
Manifest number:          1E49
Signing time:             Sat 26 Apr 2025 14:37:45 +0000
Manifest this update:     Sat 26 Apr 2025 14:37:45 +0000
Manifest next update:     Sat 26 Apr 2025 20:37:45 +0000
Files and hashes:         1: zdnD6A790w6RIRaPwiqlCoVA3f8.crl (hash: U8AcLxrB28vpWlfTc383smbmR6KhkoHQP5dBK8IXeqE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7753 (0x1e49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDD9C3E80EFDD30E9121168FC22AA50A8540DDFF
        Validity
            Not Before: Apr 26 14:37:45 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=18A8D94381904A507E3C78245845203AC2078705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3b:f5:af:e8:66:b2:be:d7:f0:c6:14:cc:d7:
                    fd:4e:b1:f2:54:14:a0:87:1b:2c:92:4c:b9:de:93:
                    50:7a:a8:f7:d1:44:7a:a7:a1:bb:b7:45:7d:21:d9:
                    3e:fd:26:27:28:49:20:35:54:95:0f:19:7f:d3:8a:
                    08:d8:45:31:f7:5f:9e:37:36:84:76:6a:5a:76:0a:
                    0e:d2:37:d8:2d:ad:57:7c:bc:33:78:48:a8:15:c5:
                    c7:2e:9e:d9:e0:a0:1c:fc:44:2e:02:73:94:5d:0e:
                    0a:ae:96:33:2c:87:2b:fb:b0:ee:f3:b6:be:6e:3d:
                    96:55:00:64:ef:b8:e3:40:09:da:66:7f:c9:df:de:
                    dc:10:42:9c:5e:73:dc:d0:93:0f:3f:e2:55:63:b9:
                    5b:35:40:62:31:38:1c:0d:b5:9a:c6:5a:b7:fe:ec:
                    18:99:c6:5b:1d:34:60:a6:b5:cc:33:a3:87:dd:d5:
                    6b:bf:b4:80:59:fa:7d:c5:00:1a:39:5c:f8:33:d5:
                    20:45:d4:c1:d8:6e:75:d9:43:5b:26:80:a9:81:be:
                    1d:e1:97:9e:fb:0e:9c:78:f7:6d:af:02:24:9f:26:
                    6a:3f:26:09:2b:90:2e:56:fd:5d:8a:69:37:30:6a:
                    33:ab:92:ee:2f:1b:23:a8:34:e3:b8:de:ff:ae:df:
                    0e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A8:D9:43:81:90:4A:50:7E:3C:78:24:58:45:20:3A:C2:07:87:05
            X509v3 Authority Key Identifier:
                keyid:CD:D9:C3:E8:0E:FD:D3:0E:91:21:16:8F:C2:2A:A5:0A:85:40:DD:FF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8/zdnD6A790w6RIRaPwiqlCoVA3f8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zdnD6A790w6RIRaPwiqlCoVA3f8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8/zdnD6A790w6RIRaPwiqlCoVA3f8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:0a:f8:69:1d:8f:2c:80:29:2d:76:74:52:9c:eb:9b:30:6f:
         a9:89:1c:f6:d1:d5:f4:c0:07:8f:74:02:db:6e:ea:17:50:ce:
         8f:9b:f1:47:56:e3:1e:c8:a5:47:1a:b1:ac:3c:99:44:46:3e:
         a1:f2:57:37:a5:ee:e0:d0:ad:68:e2:cd:d4:dd:02:d8:6c:50:
         cb:dd:0c:56:45:c4:8f:16:d5:1c:ca:b0:69:8d:e5:69:01:25:
         43:d2:14:91:d5:d9:2e:09:c8:9e:c5:db:75:cb:77:3b:b4:5d:
         b5:cd:c1:69:42:49:29:df:45:0c:10:85:b0:1a:9b:48:b1:6d:
         3f:87:2d:b4:6f:61:ba:79:c4:4e:72:5f:36:ff:02:34:75:48:
         bd:fe:2e:19:32:98:2a:96:fc:28:20:ea:0f:a3:65:61:ec:b3:
         02:cc:bf:5c:20:c5:1d:41:6d:83:bc:7b:b3:6b:c6:91:fe:f7:
         6b:3e:47:db:67:73:17:e8:da:55:1a:4c:d4:38:55:56:2c:8c:
         64:f8:fb:1e:99:3f:e3:84:72:a3:34:5f:c3:3b:c1:55:72:ce:
         bc:73:31:8a:1d:c4:fc:9d:27:ef:3e:a9:70:36:f6:eb:d5:ab:
         df:06:c0:62:21:09:ec:71:8b:14:07:3a:ce:94:ff:b9:08:1e:
         e7:06:71:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:15:24 2025 by rpki-client