Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3291/5rA2up_FkYdletsFx2-HqmMpDDQ.mft
File:                     5rA2up_FkYdletsFx2-HqmMpDDQ.mft (raw, json)
Hash identifier:          vUPjAxt/A8eZ7M8NP59KiGDCaH1Xvaucbbd5iMKIiUI=
Subject key identifier:   F5:4D:C4:F2:48:EA:DE:EE:E0:17:4F:18:52:ED:51:C3:94:E7:B3:4E
Authority key identifier: E6:B0:36:BA:9F:C5:91:87:65:7A:DB:05:C7:6F:87:AA:63:29:0C:34
Certificate issuer:       /CN=E6B036BA9FC59187657ADB05C76F87AA63290C34
Certificate serial:       0874
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5rA2up_FkYdletsFx2-HqmMpDDQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/5rA2up_FkYdletsFx2-HqmMpDDQ.mft
Manifest number:          0874
Signing time:             Sun 24 Aug 2025 00:02:57 +0000
Manifest this update:     Sun 24 Aug 2025 00:02:57 +0000
Manifest next update:     Sun 24 Aug 2025 06:02:57 +0000
Files and hashes:         1: 5rA2up_FkYdletsFx2-HqmMpDDQ.crl (hash: cbym5mfOa6K1wUMYaXXzG1VOU96oTqfzjX6ebb0mf7Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2164 (0x874)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6B036BA9FC59187657ADB05C76F87AA63290C34
        Validity
            Not Before: Aug 24 00:02:57 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=F54DC4F248EADEEEE0174F1852ED51C394E7B34E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:99:2b:0d:f6:1c:08:bb:06:b9:b6:f2:37:f7:
                    73:d6:89:bd:d3:7e:37:8b:c2:22:bc:71:5d:ba:4d:
                    3f:47:df:f8:37:6c:95:96:9f:82:9f:09:f4:84:3c:
                    61:fc:8d:ca:a8:bd:4d:b5:41:d7:47:f0:15:c3:03:
                    65:62:44:cd:04:47:c8:ad:87:d1:df:1d:aa:29:14:
                    37:3a:a8:29:3d:eb:20:78:7e:26:a7:ce:d6:4c:55:
                    f1:7a:7c:4a:12:14:f0:d5:78:9d:d3:95:f5:1f:38:
                    3b:71:03:d8:de:93:a6:d5:71:20:dd:9a:fd:2e:81:
                    94:6f:03:18:65:b0:12:9a:ff:c0:17:c4:10:79:45:
                    d1:4d:5b:b6:be:dd:31:6f:64:bf:79:2b:8f:24:9b:
                    c4:99:1d:b2:0d:b4:66:67:85:cc:6f:10:82:ee:61:
                    92:40:52:9e:0f:b9:1a:a1:59:ff:91:8b:83:d7:81:
                    f1:f4:df:69:66:11:e3:a4:08:03:02:46:51:60:d4:
                    28:55:e4:d4:8d:35:42:50:9b:0c:11:6e:13:5c:c6:
                    68:ec:25:3f:6b:08:e7:44:d2:6f:6f:33:8b:bd:1a:
                    09:0a:d3:ef:01:1a:f6:82:df:1c:44:62:67:f5:f4:
                    46:fa:b4:da:70:8b:1d:56:38:b3:5b:d1:65:00:fc:
                    cd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4D:C4:F2:48:EA:DE:EE:E0:17:4F:18:52:ED:51:C3:94:E7:B3:4E
            X509v3 Authority Key Identifier:
                keyid:E6:B0:36:BA:9F:C5:91:87:65:7A:DB:05:C7:6F:87:AA:63:29:0C:34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/5rA2up_FkYdletsFx2-HqmMpDDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5rA2up_FkYdletsFx2-HqmMpDDQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/5rA2up_FkYdletsFx2-HqmMpDDQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:56:2f:4c:49:db:05:ae:c7:46:a7:18:9d:a4:44:30:59:c3:
         17:c3:51:99:ab:a6:77:a1:ec:f3:2a:5e:6c:ee:67:52:4b:ac:
         60:c2:5f:70:18:eb:3b:f4:1e:68:c3:28:d2:da:77:99:b4:bb:
         6a:fc:cd:47:01:5e:fe:19:df:70:53:72:3e:4c:41:f7:4c:74:
         86:c8:af:a0:d6:d1:b0:38:e7:36:6b:e0:54:04:6f:de:5c:8a:
         43:03:60:0b:ef:21:19:df:f5:ea:be:20:92:96:03:12:31:fc:
         59:08:28:cb:f2:45:06:7c:dd:23:61:45:01:d5:63:b7:8a:68:
         10:88:a5:1c:69:e8:7b:2c:72:d6:61:48:bc:98:04:e9:c5:43:
         d9:64:66:b0:5e:bf:36:55:a5:91:01:58:aa:10:dd:e1:5f:f5:
         43:a9:25:90:d6:d0:5d:45:88:d8:c4:f1:41:f0:99:37:be:67:
         f8:68:f1:6d:14:15:f5:36:68:96:34:e2:ac:64:a1:08:b8:1e:
         09:e9:a3:f7:01:0a:3b:7e:fc:5d:58:87:bd:4e:6f:83:6d:2d:
         c1:a6:79:6e:32:6d:c4:a7:77:af:8a:eb:25:68:7a:82:dd:7d:
         49:34:9f:21:37:55:7a:ce:d7:1b:06:dc:2f:82:64:8e:68:14:
         c8:e1:21:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:17:42 2025 by rpki-client