Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.mft
File:                     YBt2TrIFMYSt13mb83x-Ctsz99w.mft (raw, json)
Hash identifier:          MYG9sZblFRUyWVPduxUqcfPs2FlHrN9f/NzLXRExS94=
Subject key identifier:   B1:7C:3C:F4:4B:F9:80:D1:A0:BF:8E:74:79:DA:90:78:E8:29:0A:73
Authority key identifier: 60:1B:76:4E:B2:05:31:84:AD:D7:79:9B:F3:7C:7E:0A:DB:33:F7:DC
Certificate issuer:       /CN=601B764EB2053184ADD7799BF37C7E0ADB33F7DC
Certificate serial:       0334
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YBt2TrIFMYSt13mb83x-Ctsz99w.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.mft
Manifest number:          0334
Signing time:             Sun 18 May 2025 08:41:08 +0000
Manifest this update:     Sun 18 May 2025 08:41:08 +0000
Manifest next update:     Sun 18 May 2025 14:41:08 +0000
Files and hashes:         1: YBt2TrIFMYSt13mb83x-Ctsz99w.crl (hash: rzvcOev55VQAK7YEbfVfTPl4XgOc1b9zZNt96dI3PY4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820 (0x334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601B764EB2053184ADD7799BF37C7E0ADB33F7DC
        Validity
            Not Before: May 18 08:41:08 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=B17C3CF44BF980D1A0BF8E7479DA9078E8290A73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:43:eb:28:ea:a9:81:15:e8:67:3f:e4:f3:8a:
                    14:e9:34:01:10:18:8d:d3:fb:a9:6a:ed:20:f6:02:
                    72:24:f9:94:e1:cc:e5:9a:94:95:d1:bf:0b:fd:0e:
                    d7:fc:4c:c7:06:e7:99:e1:aa:fd:93:f6:05:76:69:
                    f8:28:79:bc:77:65:1a:1c:da:11:24:68:6d:7f:1f:
                    e8:34:2b:ab:73:bf:ca:23:95:b9:57:40:e3:70:71:
                    f0:02:3c:40:22:9c:ae:65:97:7d:cc:d4:50:41:17:
                    a2:11:16:e8:69:cc:2a:38:eb:6a:6f:98:83:14:99:
                    7e:d1:ec:11:11:5b:a2:42:ed:d7:00:96:5c:51:f2:
                    0a:3c:53:af:c7:16:a2:e5:9c:c4:51:cc:bc:5f:49:
                    e2:f8:6f:4c:c8:12:6e:32:14:23:34:1d:84:77:6f:
                    40:4d:aa:5a:a7:a3:b5:8a:27:62:64:8a:53:b1:60:
                    77:b5:ee:d5:f7:20:1c:35:fc:9e:b7:08:ca:42:34:
                    5f:22:a9:f7:98:2c:3f:eb:40:dc:16:55:97:e9:da:
                    6b:a4:fd:8e:46:7f:bd:a0:94:d2:b4:08:c6:df:a8:
                    61:1a:f2:0a:57:ac:97:65:73:88:d2:3c:2e:3c:63:
                    eb:87:e2:40:0d:58:9a:a8:0a:6b:9e:31:59:d2:36:
                    de:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7C:3C:F4:4B:F9:80:D1:A0:BF:8E:74:79:DA:90:78:E8:29:0A:73
            X509v3 Authority Key Identifier:
                keyid:60:1B:76:4E:B2:05:31:84:AD:D7:79:9B:F3:7C:7E:0A:DB:33:F7:DC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YBt2TrIFMYSt13mb83x-Ctsz99w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:14:04:c5:22:b0:3e:0d:5b:93:8e:4d:d6:b5:af:e6:27:af:
         a9:ed:60:e8:7b:a3:50:ec:39:47:c2:70:cc:b3:93:3a:59:63:
         f0:8c:e0:84:ae:0a:bd:d4:ef:5d:28:5a:2d:75:23:66:cf:d6:
         6e:7e:c5:e6:56:46:94:28:e7:3c:e9:35:5a:b2:87:ef:8e:a1:
         cb:3f:16:44:0b:df:86:24:00:a9:06:06:3f:10:c2:7e:d7:ca:
         92:3a:f4:54:74:88:5f:7a:76:1d:3c:32:b4:09:30:9c:8f:3e:
         36:d2:0e:4e:4e:68:1d:fe:8d:4f:7d:44:d4:76:d4:d5:db:e6:
         c5:10:7a:84:ba:a5:2c:20:85:83:64:78:14:85:9f:c7:50:2e:
         a0:00:d8:a9:8a:1d:37:e0:9d:9b:86:9b:7f:60:7f:ae:3c:38:
         91:a0:f7:27:30:84:59:ee:4a:ff:5a:b2:96:32:88:07:fd:4f:
         91:0a:ec:0a:75:79:7d:ca:02:cb:95:34:69:a1:96:52:fe:54:
         f2:f8:e1:b8:9d:7c:c3:22:d4:6d:2e:5b:4e:d2:a4:e6:de:55:
         66:97:de:b8:f5:1c:ee:a2:3c:57:f5:3a:55:57:46:96:db:7e:
         b7:e8:21:c8:1d:41:ac:03:06:1a:82:de:20:d4:26:aa:d6:3a:
         1a:27:e0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 11:03:21 2025 by rpki-client