Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3348/7BRTzo9P3rT2cWhPomfBhndJeXc.mft
File:                     7BRTzo9P3rT2cWhPomfBhndJeXc.mft (raw, json)
Hash identifier:          uSHpW4oFaFCVbVNGQbTl/kyY6lScP7VWgW4KE88bIQc=
Subject key identifier:   82:A4:98:8F:B6:08:9D:1A:03:36:C1:A0:FC:3B:5E:32:31:88:4B:5C
Authority key identifier: EC:14:53:CE:8F:4F:DE:B4:F6:71:68:4F:A2:67:C1:86:77:49:79:77
Certificate issuer:       /CN=EC1453CE8F4FDEB4F671684FA267C18677497977
Certificate serial:       01F0
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BRTzo9P3rT2cWhPomfBhndJeXc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/7BRTzo9P3rT2cWhPomfBhndJeXc.mft
Manifest number:          01F0
Signing time:             Wed 16 Apr 2025 19:10:59 +0000
Manifest this update:     Wed 16 Apr 2025 19:10:59 +0000
Manifest next update:     Thu 17 Apr 2025 01:10:59 +0000
Files and hashes:         1: 7BRTzo9P3rT2cWhPomfBhndJeXc.crl (hash: zf0Azenpa6cU3MfTqgIz3GcvrxYE/j30rz5F+jEo/BQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496 (0x1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC1453CE8F4FDEB4F671684FA267C18677497977
        Validity
            Not Before: Apr 16 19:10:59 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=82A4988FB6089D1A0336C1A0FC3B5E3231884B5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:26:1f:ff:d0:6b:56:1d:24:31:45:11:0d:d0:
                    ad:f0:ca:85:19:80:54:42:18:15:8d:98:c8:cc:a6:
                    46:b9:6b:d8:e7:e9:78:b3:af:52:09:10:20:df:5a:
                    17:dd:e8:92:9f:62:02:8a:57:af:a0:a5:d8:3e:22:
                    a5:96:87:5c:5e:3e:75:c2:cf:60:95:7c:e6:f8:6d:
                    5d:14:9e:32:9f:e0:a0:a2:f4:ed:e7:09:63:f2:a8:
                    51:c4:31:57:22:46:e4:08:7a:b3:33:05:34:e4:c4:
                    7b:3d:5e:2a:ab:9f:8b:34:ad:95:d7:cf:da:50:a6:
                    f8:04:72:30:02:07:9b:ae:8e:90:3e:a8:f8:ab:cb:
                    08:4d:28:da:4f:38:55:94:dd:59:11:83:e0:d0:2d:
                    f9:a0:85:0b:cb:3a:c9:7e:ff:6e:13:75:40:ee:a7:
                    96:af:d7:cd:cb:38:2f:c3:71:65:06:ee:1a:6d:65:
                    a8:07:00:57:30:9b:78:e8:10:6b:72:43:7a:e3:f2:
                    85:ab:75:59:86:ad:d1:1b:82:6c:bf:47:57:f6:f9:
                    51:49:fb:de:dd:2f:e4:70:44:cb:18:26:bf:ff:88:
                    e0:9b:8d:4e:c5:2c:7a:a6:2f:e8:89:7d:be:8f:36:
                    55:c9:55:07:f1:61:35:71:77:b9:f8:2b:ab:b6:ee:
                    ab:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A4:98:8F:B6:08:9D:1A:03:36:C1:A0:FC:3B:5E:32:31:88:4B:5C
            X509v3 Authority Key Identifier:
                keyid:EC:14:53:CE:8F:4F:DE:B4:F6:71:68:4F:A2:67:C1:86:77:49:79:77

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/7BRTzo9P3rT2cWhPomfBhndJeXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BRTzo9P3rT2cWhPomfBhndJeXc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/7BRTzo9P3rT2cWhPomfBhndJeXc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:13:ca:bf:89:b6:4a:aa:7a:b4:ef:4c:28:07:ac:e2:2a:f8:
         38:79:ab:02:ed:51:43:6a:80:c9:23:91:e7:9b:f3:11:94:8c:
         6e:67:47:ab:4d:1d:f5:5d:0a:ec:e9:49:6c:c1:06:22:b0:f4:
         1a:ec:87:c6:d3:bf:64:5f:ca:69:b3:23:85:36:68:4d:9c:39:
         3b:08:d8:3f:5d:57:f7:96:7b:e8:e4:a4:fa:c1:22:57:a4:24:
         55:51:7a:fb:0d:da:42:66:38:56:2d:cb:1f:5c:6d:55:76:33:
         2c:b7:ed:f4:5e:d5:f7:12:b5:78:4a:bd:c7:9a:e7:1b:01:dc:
         77:27:00:57:a7:1c:e9:02:62:9a:54:c8:72:2f:80:95:65:26:
         7c:3f:b1:5c:7e:d9:14:29:fd:0f:ba:f4:b3:16:d0:8c:b2:f5:
         a8:eb:5c:0c:4b:34:54:cb:d2:54:d3:52:a3:13:c4:0d:df:df:
         7d:2e:5b:03:ce:f8:ef:92:61:3d:d7:2d:f5:aa:fa:fc:36:c1:
         3e:40:df:38:2c:62:1c:b0:18:4a:e3:12:bb:69:84:c8:c7:24:
         bd:1c:1d:b0:f7:82:f9:33:64:b1:27:2a:62:d5:0a:d5:1b:07:
         b5:ec:d1:66:3f:3d:58:cd:e5:67:72:48:02:c5:eb:03:62:ad:
         f1:cb:bd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:01:54 2025 by rpki-client