Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3271/UgcnAEPag5sInL-JHVe0GrI5rYo.mft
File:                     UgcnAEPag5sInL-JHVe0GrI5rYo.mft (raw, json)
Hash identifier:          YTReKyHux2pLM0g5doC6XuD03ce6b73/ncb6iyH1+4c=
Subject key identifier:   07:6B:FC:AB:6C:1B:91:6D:A2:F5:0F:1A:9F:03:3F:91:66:7C:4A:22
Authority key identifier: 52:07:27:00:43:DA:83:9B:08:9C:BF:89:1D:57:B4:1A:B2:39:AD:8A
Certificate issuer:       /CN=5207270043DA839B089CBF891D57B41AB239AD8A
Certificate serial:       0826
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UgcnAEPag5sInL-JHVe0GrI5rYo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/UgcnAEPag5sInL-JHVe0GrI5rYo.mft
Manifest number:          0826
Signing time:             Sat 17 May 2025 22:40:24 +0000
Manifest this update:     Sat 17 May 2025 22:40:24 +0000
Manifest next update:     Sun 18 May 2025 04:40:24 +0000
Files and hashes:         1: UgcnAEPag5sInL-JHVe0GrI5rYo.crl (hash: zKxrnAEx+abFTmeixh9vkIQVqZSWW2NPOM1Peq1sM0g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2086 (0x826)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5207270043DA839B089CBF891D57B41AB239AD8A
        Validity
            Not Before: May 17 22:40:24 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=076BFCAB6C1B916DA2F50F1A9F033F91667C4A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:7c:17:61:a5:b7:97:2d:83:0c:08:aa:14:
                    d8:8c:da:f3:0e:a4:fc:c6:60:69:23:35:d3:df:a5:
                    20:17:4c:f8:ca:fd:24:d5:c1:f9:f7:8c:87:fd:a4:
                    13:37:70:b9:a7:1a:c6:76:5a:ff:65:eb:00:3b:cb:
                    ad:70:e4:62:6e:f6:50:78:0e:c8:91:02:42:ec:a8:
                    27:89:a2:d7:b2:94:c8:85:90:8f:2a:4c:b5:19:14:
                    42:33:cb:83:e8:38:27:72:1b:29:71:b5:41:2e:0f:
                    54:25:dd:8b:f0:ef:4b:32:1f:5f:12:dd:c7:d0:7f:
                    4a:db:7b:a1:21:0e:dd:b8:75:97:d2:05:98:95:13:
                    81:44:09:41:d6:8a:14:c0:b5:a1:f0:1c:8c:a1:a3:
                    d5:ad:fe:da:d8:ac:a9:6b:bf:54:27:b1:96:6b:88:
                    3b:60:23:36:5e:d1:5d:7a:7c:80:9c:f6:84:40:c8:
                    2f:88:31:94:f7:9e:bc:50:d2:2e:15:9a:23:df:9c:
                    20:39:42:88:d7:c5:d7:1a:10:b1:2c:7a:0f:e3:ed:
                    0d:d9:d7:c2:6f:be:8b:a0:84:51:8f:b2:97:b8:54:
                    00:f4:b8:7f:3a:44:5d:5f:5d:2b:6a:25:01:02:73:
                    4c:71:ea:b9:7a:64:61:27:ca:ec:99:79:8a:c1:83:
                    20:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6B:FC:AB:6C:1B:91:6D:A2:F5:0F:1A:9F:03:3F:91:66:7C:4A:22
            X509v3 Authority Key Identifier:
                keyid:52:07:27:00:43:DA:83:9B:08:9C:BF:89:1D:57:B4:1A:B2:39:AD:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/UgcnAEPag5sInL-JHVe0GrI5rYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UgcnAEPag5sInL-JHVe0GrI5rYo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/UgcnAEPag5sInL-JHVe0GrI5rYo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:03:4c:38:d9:18:75:b9:fe:ff:25:3f:aa:18:8e:e4:f7:a0:
         b5:3d:76:6e:0d:68:54:a3:d3:a4:2a:e2:01:81:ff:f3:53:b2:
         c7:23:e3:7d:65:b2:26:20:b4:87:03:dd:c5:e9:ef:4b:e8:fc:
         24:3f:f1:76:9d:de:d5:2e:31:35:ff:e2:cb:0c:0c:f9:53:a9:
         ee:08:c6:33:ca:1c:b3:55:f1:fd:42:4f:d4:d1:ea:21:d9:7f:
         08:14:59:1a:1b:fb:71:58:a0:52:1c:a0:a2:5a:99:53:40:a5:
         d5:bf:0e:78:9f:74:53:90:b5:df:dd:f5:85:e6:d3:48:0e:7b:
         d7:e2:f0:84:6c:8d:cf:df:c2:3a:9e:04:39:ac:96:a4:d9:f5:
         62:c9:9e:bf:c9:d6:5c:bd:df:b3:19:2c:78:38:27:ee:8c:dd:
         cf:d6:e7:cb:e7:4c:64:ee:73:ab:5e:85:09:c6:1b:dc:cd:51:
         61:78:7b:be:ad:7c:c9:ca:db:77:55:2d:92:d9:26:14:24:a2:
         74:d4:51:3e:dc:0f:55:be:02:12:f6:f0:7d:08:17:e3:fa:4c:
         ee:6a:72:2c:f1:95:13:51:3c:9f:58:a0:32:86:98:ab:f6:2f:
         2f:47:7c:b3:73:ea:c7:7e:a0:16:6c:cc:b4:a2:8c:c7:eb:0d:
         fd:9c:a0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:13:29 2025 by rpki-client