Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3391/R2fj9DSSQBFPCs03VtVATczdRXg.mft
File:                     R2fj9DSSQBFPCs03VtVATczdRXg.mft (raw, json)
Hash identifier:          FeLqPxOm6m6wFrJ9aR3BbNAOkbCn3ISQdrVlAQRFKWo=
Subject key identifier:   E8:9D:CF:53:FF:1B:FB:2D:40:A3:CC:25:7C:63:BD:59:CA:E3:8B:2A
Authority key identifier: 47:67:E3:F4:34:92:40:11:4F:0A:CD:37:56:D5:40:4D:CC:DD:45:78
Certificate issuer:       /CN=4767E3F4349240114F0ACD3756D5404DCCDD4578
Certificate serial:       EB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/R2fj9DSSQBFPCs03VtVATczdRXg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/R2fj9DSSQBFPCs03VtVATczdRXg.mft
Manifest number:          EB
Signing time:             Sun 19 Oct 2025 22:05:06 +0000
Manifest this update:     Sun 19 Oct 2025 22:05:06 +0000
Manifest next update:     Mon 20 Oct 2025 04:05:06 +0000
Files and hashes:         1: R2fj9DSSQBFPCs03VtVATczdRXg.crl (hash: AEMBXbQ7O7OL8nZ1s4t1ixaMWLUs3JXk8Tou2/7bHc4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4767E3F4349240114F0ACD3756D5404DCCDD4578
        Validity
            Not Before: Oct 19 22:05:06 2025 GMT
            Not After : Sep  2 11:00:59 2026 GMT
        Subject: CN=E89DCF53FF1BFB2D40A3CC257C63BD59CAE38B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:e1:c7:d6:8b:17:9e:26:1b:f9:aa:5c:fe:
                    0b:3d:ad:7d:89:4d:51:22:3f:5b:3e:11:55:67:28:
                    42:1c:08:17:68:c9:78:26:ec:be:03:06:40:33:f4:
                    ef:18:78:2d:30:e4:b0:da:53:4c:1e:86:ca:eb:1a:
                    61:17:4e:85:05:a3:8d:94:ef:6a:f3:c1:d0:cf:df:
                    65:91:e5:f2:e2:10:5e:18:32:07:79:67:b5:32:5d:
                    0b:8f:de:d8:13:c3:15:35:4c:bf:31:ac:17:7d:05:
                    70:0a:bc:30:c6:6f:64:90:3c:f1:3d:e3:fa:fc:76:
                    01:85:61:91:a7:e2:e5:14:c9:02:36:a3:b1:e7:1e:
                    4e:74:ab:75:20:7c:e4:34:98:49:21:f7:0c:42:fa:
                    c7:98:ec:c4:68:e8:a8:5f:1c:ad:8a:ab:93:d8:f4:
                    ba:f8:fd:41:68:f4:1d:ce:79:f3:91:50:ac:bb:e4:
                    de:37:1e:61:48:4f:94:ca:2d:db:63:c7:e0:65:45:
                    e4:2c:7a:54:dd:cf:61:3a:85:2f:65:9f:dc:ba:d6:
                    7d:2e:1c:d1:b7:41:b4:de:6d:f5:88:19:82:a6:d1:
                    60:9b:35:e9:82:5e:49:c1:16:c1:3a:89:36:f6:25:
                    58:09:70:4f:bc:ff:cf:f8:e4:7d:e5:23:7c:b3:4d:
                    44:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9D:CF:53:FF:1B:FB:2D:40:A3:CC:25:7C:63:BD:59:CA:E3:8B:2A
            X509v3 Authority Key Identifier:
                keyid:47:67:E3:F4:34:92:40:11:4F:0A:CD:37:56:D5:40:4D:CC:DD:45:78

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/R2fj9DSSQBFPCs03VtVATczdRXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/R2fj9DSSQBFPCs03VtVATczdRXg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/R2fj9DSSQBFPCs03VtVATczdRXg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:68:a9:0f:b9:23:cf:10:6b:44:7d:f4:5c:b8:db:80:61:a7:
         3a:02:19:41:12:69:71:68:35:39:5e:e8:e4:a0:75:4d:66:91:
         26:51:c0:90:99:40:e3:bc:c2:de:f9:d3:7e:c5:2d:31:c4:82:
         b2:4c:87:ee:95:d9:33:bf:f8:b3:31:13:24:14:fa:34:1d:a7:
         ea:6d:74:be:a6:a6:85:b1:20:74:41:78:85:d8:c5:36:29:b8:
         b7:41:91:e7:70:16:f5:57:20:6a:7e:fd:f6:d5:05:dd:73:65:
         07:9c:64:e0:0e:f2:27:92:cf:ad:e4:51:34:ab:41:41:79:e9:
         85:eb:f6:60:06:ea:2d:b6:85:5c:63:cf:0c:a4:ae:0d:47:d4:
         96:49:14:b4:42:e0:75:62:81:46:16:e7:ad:3c:b1:6f:8b:10:
         75:22:30:41:39:21:5e:8d:f3:0d:86:87:94:28:1f:bc:75:b6:
         94:6f:d3:44:46:2a:85:75:95:df:eb:4c:75:bf:e4:00:a0:b8:
         c7:b5:1b:13:b5:97:cc:32:5b:86:4a:51:91:e3:9f:a1:52:aa:
         49:60:23:b6:53:ab:34:66:fe:cb:1b:e9:27:dc:13:48:eb:28:
         fb:fd:c5:b9:1b:8b:7e:31:52:ab:32:ef:2c:56:88:b0:eb:d0:
         85:ac:21:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:51:51 2025 by rpki-client