Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1/RstaoMqemvBSLrXYP_vuf88TePA.mft
File:                     RstaoMqemvBSLrXYP_vuf88TePA.mft (raw, json)
Hash identifier:          StyTB+u3PkGqEZlhs60MA9IPEU8OkgivgEi2YOSShnc=
Subject key identifier:   53:F2:7C:C4:34:1B:CD:81:AC:C7:2A:BA:E2:E1:C0:94:6E:F9:27:A6
Authority key identifier: 46:CB:5A:A0:CA:9E:9A:F0:52:2E:B5:D8:3F:FB:EE:7F:CF:13:78:F0
Certificate issuer:       /CN=46CB5AA0CA9E9AF0522EB5D83FFBEE7FCF1378F0
Certificate serial:       16DA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RstaoMqemvBSLrXYP_vuf88TePA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1/RstaoMqemvBSLrXYP_vuf88TePA.mft
Manifest number:          16DA
Signing time:             Sat 23 Aug 2025 11:02:17 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:17 +0000
Manifest next update:     Sat 23 Aug 2025 17:02:17 +0000
Files and hashes:         1: RstaoMqemvBSLrXYP_vuf88TePA.crl (hash: wY23pgDmV2cxgXPHDX3BQKTtZ1ggvwLWnOce7elBsaU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5850 (0x16da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46CB5AA0CA9E9AF0522EB5D83FFBEE7FCF1378F0
        Validity
            Not Before: Aug 23 11:02:17 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=53F27CC4341BCD81ACC72ABAE2E1C0946EF927A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d5:85:e8:31:1b:ff:ba:8e:dc:fb:06:27:33:
                    ac:08:85:14:9c:7c:c2:7c:31:55:a6:15:88:4a:b5:
                    63:b1:64:dc:68:ea:35:4e:1b:da:d1:10:02:4e:02:
                    8c:22:9e:e7:e1:0e:52:5d:73:9b:1a:49:cd:cc:4b:
                    c2:f4:7e:43:da:44:f5:89:74:a1:b1:ed:01:b4:13:
                    02:8a:d9:4c:dd:00:bd:f3:a0:8f:f5:9d:8d:2a:a6:
                    62:dd:af:2f:c3:ed:cf:88:0e:f3:31:1b:6f:a4:b2:
                    7b:54:61:19:74:6f:5b:43:58:24:38:c9:06:2d:fb:
                    58:46:b3:fc:2a:9f:e0:2c:c4:6c:3e:17:61:e2:9a:
                    ec:f7:3f:19:39:16:3d:dc:f4:01:99:b0:73:42:11:
                    43:85:9d:60:97:cc:96:9c:f8:1c:15:1b:b4:81:d8:
                    c5:7d:d1:00:ad:55:f2:c8:60:45:65:60:fb:79:bc:
                    b4:81:b4:dc:b9:82:34:a6:72:5b:77:99:87:82:eb:
                    be:42:23:47:e0:5b:1f:d5:d0:89:95:5b:d0:78:48:
                    79:ca:8d:98:cf:a7:7d:73:e0:8a:90:8f:8a:7c:1e:
                    9a:58:c7:4d:cd:55:e6:b0:4b:8d:c7:ab:65:50:c3:
                    8e:50:6d:77:f7:4d:0e:7d:df:49:25:fb:5d:86:18:
                    ff:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F2:7C:C4:34:1B:CD:81:AC:C7:2A:BA:E2:E1:C0:94:6E:F9:27:A6
            X509v3 Authority Key Identifier:
                keyid:46:CB:5A:A0:CA:9E:9A:F0:52:2E:B5:D8:3F:FB:EE:7F:CF:13:78:F0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1/RstaoMqemvBSLrXYP_vuf88TePA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RstaoMqemvBSLrXYP_vuf88TePA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1/RstaoMqemvBSLrXYP_vuf88TePA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d3:b2:6e:10:6d:42:0b:98:e1:53:36:28:c6:bb:e5:de:63:
         17:03:fa:d2:01:5a:c7:4f:32:2e:e6:77:39:44:97:f1:46:ae:
         15:3d:39:e6:0e:05:93:ac:9f:51:d4:b3:26:a9:ef:15:54:6f:
         b0:3e:6a:58:31:90:85:65:ce:01:28:2c:9c:2a:14:54:c3:88:
         05:85:d4:b0:6c:28:9e:99:2e:e5:68:55:ad:22:c4:82:1a:e5:
         21:c4:c2:00:60:81:8d:5e:dc:c7:f6:2c:88:b1:eb:8e:9b:16:
         70:92:84:ca:64:30:69:f2:d8:66:6f:71:de:13:cf:e6:fa:fb:
         65:e6:b7:1d:be:09:47:e1:d9:ce:65:62:95:e9:7b:24:f2:98:
         63:a8:9f:d7:66:a1:50:eb:f0:1f:b2:68:81:11:08:cb:85:bf:
         ea:0c:c5:52:7d:18:6c:ca:2b:bc:c6:9c:80:d1:03:93:be:9a:
         bd:1b:a6:54:1a:30:e7:d1:67:56:b8:d7:ae:d5:65:4a:73:7f:
         3c:47:6a:53:18:cb:ae:99:33:61:1b:5e:a1:97:fe:62:4b:ab:
         3f:b5:52:56:35:b7:c8:84:25:22:7d:03:e7:8d:95:1e:64:1b:
         d6:52:a3:5a:4f:a5:5a:4f:d2:07:45:4e:54:bb:57:f2:ad:8e:
         8c:eb:a0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:04:35 2025 by rpki-client