Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft
File:                     cpzUo3V_UkXEbNX7sK1MjtG73Us.mft (raw, json)
Hash identifier:          J2r61DfuOaFw5TdyyOJI5pZV0Xh83YnU9wqJ781LCaw=
Subject key identifier:   B2:C5:80:BE:6C:0A:90:D2:88:7C:AE:55:DD:0C:71:A8:1B:E1:C6:A5
Authority key identifier: 72:9C:D4:A3:75:7F:52:45:C4:6C:D5:FB:B0:AD:4C:8E:D1:BB:DD:4B
Certificate issuer:       /CN=729CD4A3757F5245C46CD5FBB0AD4C8ED1BBDD4B
Certificate serial:       16E5
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpzUo3V_UkXEbNX7sK1MjtG73Us.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft
Manifest number:          16E5
Signing time:             Sat 23 Aug 2025 16:02:13 +0000
Manifest this update:     Sat 23 Aug 2025 16:02:13 +0000
Manifest next update:     Sat 23 Aug 2025 22:02:13 +0000
Files and hashes:         1: cpzUo3V_UkXEbNX7sK1MjtG73Us.crl (hash: /jA/SKdnZmdApTvC2g3MmQE0D/RR2esWt3+KEvORN0s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5861 (0x16e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729CD4A3757F5245C46CD5FBB0AD4C8ED1BBDD4B
        Validity
            Not Before: Aug 23 16:02:13 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=B2C580BE6C0A90D2887CAE55DD0C71A81BE1C6A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:67:4b:a7:ea:0e:54:b0:74:1f:43:82:e2:d6:
                    23:41:e9:9f:b0:d1:09:31:5e:92:73:75:78:c5:27:
                    d9:92:38:ab:4f:90:68:4b:94:8f:5c:5f:75:81:3c:
                    2e:2e:01:00:c1:3c:a9:99:d4:b3:5f:8a:f5:23:1d:
                    9c:47:a5:d0:d5:6c:25:77:b8:c5:6b:87:fd:83:f8:
                    d2:98:a7:3d:04:bf:8b:f6:2d:d1:2b:34:51:eb:8d:
                    8a:7e:12:88:e3:2a:99:08:13:30:a9:ca:d8:2e:30:
                    cf:8d:fc:22:7a:a9:c1:21:af:03:b0:e1:5d:ee:74:
                    41:74:c3:ae:80:ae:8a:71:2c:a1:f9:f4:ee:5e:78:
                    87:3b:67:26:77:ee:60:78:32:e4:10:b7:bc:6e:bc:
                    86:dd:5b:61:74:e8:78:cc:a4:0c:7e:99:6a:cc:b5:
                    36:70:ab:48:4f:11:38:a2:a4:16:dd:c9:f6:aa:29:
                    e6:07:e4:b9:f6:68:56:b6:b8:c8:a9:0d:55:0d:b7:
                    68:0a:07:92:06:23:51:f7:2a:c0:30:b7:78:57:75:
                    10:0d:96:65:44:60:af:e9:ac:42:3a:37:6f:da:1f:
                    4d:ea:d6:e8:41:ee:7d:e3:63:7e:9a:58:81:5f:9a:
                    dc:31:35:d1:20:de:3e:b3:88:01:fe:e0:7d:0b:0c:
                    4e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C5:80:BE:6C:0A:90:D2:88:7C:AE:55:DD:0C:71:A8:1B:E1:C6:A5
            X509v3 Authority Key Identifier:
                keyid:72:9C:D4:A3:75:7F:52:45:C4:6C:D5:FB:B0:AD:4C:8E:D1:BB:DD:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpzUo3V_UkXEbNX7sK1MjtG73Us.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0f:39:4e:8b:7c:9c:31:90:6f:6b:7f:73:a6:83:2b:7a:f0:
         fb:10:77:f1:95:7e:9b:cf:cd:07:57:94:f8:84:e6:f8:63:64:
         dd:5f:da:69:14:73:fc:0d:70:f2:3b:c1:40:71:49:1c:42:c5:
         df:41:e4:9a:e1:97:45:d1:6b:bc:70:57:72:39:24:6c:44:37:
         a8:38:e8:0f:04:b2:1c:43:03:e0:09:a8:4a:a6:1a:22:2a:f8:
         5d:e8:8a:56:00:6e:8d:f4:9b:75:5d:08:67:14:de:83:f9:96:
         a2:57:a0:08:32:d7:55:26:cf:f4:4f:b8:71:83:b9:bc:67:1d:
         f5:5e:9c:e1:25:0e:b0:60:ef:5a:0f:ff:24:b9:06:00:42:77:
         d7:ec:47:51:43:4f:6c:77:30:0f:2a:bc:94:7d:2a:63:f4:f6:
         33:93:02:6e:8b:14:31:38:6b:b9:5d:83:65:ef:96:f6:75:01:
         a3:9b:f5:c1:df:1f:81:eb:6b:c4:d1:23:70:ac:c7:82:25:3a:
         5f:b9:cf:d6:c2:d0:ae:32:01:dc:19:5a:5d:7c:b8:87:18:e1:
         9b:9d:34:66:4f:9a:fe:53:52:d5:2f:5f:d9:27:0b:3a:ae:a7:
         b8:43:93:a8:ec:cb:33:bc:73:06:95:f4:1d:66:6a:b6:9a:79:
         e3:03:da:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:40:33 2025 by rpki-client