Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft
File:                     rvnRXVUWBDHU9wnoqjo61bzM1uU.mft (raw, json)
Hash identifier:          k5HX3LUnkchNp8cPKBQLpS0SM8B+eyEovaujK9f74rY=
Subject key identifier:   0B:8E:04:25:F3:DF:B4:FC:5A:DA:DE:F1:A8:4A:31:CC:41:97:0B:60
Authority key identifier: AE:F9:D1:5D:55:16:04:31:D4:F7:09:E8:AA:3A:3A:D5:BC:CC:D6:E5
Certificate issuer:       /CN=AEF9D15D55160431D4F709E8AA3A3AD5BCCCD6E5
Certificate serial:       16DF
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft
Manifest number:          16DE
Signing time:             Sat 23 Aug 2025 16:04:32 +0000
Manifest this update:     Sat 23 Aug 2025 16:04:32 +0000
Manifest next update:     Sat 23 Aug 2025 22:04:32 +0000
Files and hashes:         1: rvnRXVUWBDHU9wnoqjo61bzM1uU.crl (hash: Xhq68SQB5oSd+SyODF6zCaYAPetywb8VBj2Za2DZJ8A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5855 (0x16df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF9D15D55160431D4F709E8AA3A3AD5BCCCD6E5
        Validity
            Not Before: Aug 23 16:04:32 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=0B8E0425F3DFB4FC5ADADEF1A84A31CC41970B60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:4b:56:fa:21:51:7e:b9:ed:95:52:ab:dd:
                    85:90:94:18:ef:68:f7:fd:2e:8f:8c:93:ac:71:fa:
                    95:e7:7b:21:d5:3d:3f:3d:5f:af:f9:5a:04:d4:c4:
                    0e:4b:f8:b4:73:5d:cb:49:71:70:20:75:7d:a6:37:
                    f6:9c:c8:2d:2c:dc:75:40:20:71:a0:f9:08:73:62:
                    46:bb:f7:c8:2a:e9:45:46:52:4d:20:bb:a5:fa:af:
                    78:48:b6:5c:73:a7:89:7f:7a:da:51:5f:c4:e7:60:
                    2a:74:2b:74:cd:88:8e:6b:4d:75:98:ad:24:22:75:
                    09:27:8d:70:18:ab:e3:58:31:7f:8a:c0:bb:49:68:
                    0d:e1:32:fd:29:2f:33:f9:0b:31:36:db:67:93:cc:
                    00:07:3b:07:6d:42:52:b0:63:e5:a1:c3:58:f2:59:
                    ea:ed:f5:51:1f:86:b1:bf:e3:1d:25:9a:a0:2a:29:
                    33:8f:41:b0:19:63:29:69:a8:24:13:08:34:8f:41:
                    35:8f:65:ad:93:3a:77:7d:83:22:93:7f:64:d8:15:
                    ac:35:25:fe:b9:04:2a:c7:9f:c8:ea:3f:e5:d0:0e:
                    7d:92:9c:2e:97:bf:1d:f6:07:de:f1:ae:33:63:7e:
                    45:4c:cd:60:a9:48:a7:8e:42:58:01:e9:a2:37:d9:
                    59:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8E:04:25:F3:DF:B4:FC:5A:DA:DE:F1:A8:4A:31:CC:41:97:0B:60
            X509v3 Authority Key Identifier:
                keyid:AE:F9:D1:5D:55:16:04:31:D4:F7:09:E8:AA:3A:3A:D5:BC:CC:D6:E5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:3a:0d:10:c5:29:44:3a:57:23:76:4b:f1:65:c7:a9:1a:15:
         49:fa:49:c3:d5:37:94:9f:a2:f8:50:bf:36:1f:a9:db:60:8b:
         36:70:80:b0:67:fb:4a:bd:2e:38:67:0f:f5:35:af:9b:ff:3d:
         b6:3f:91:ce:48:0d:82:bf:de:b8:69:e9:2a:27:45:f3:c5:6f:
         55:28:03:26:48:2a:99:12:f3:39:41:5c:6c:f0:f8:1f:64:53:
         88:86:20:2c:82:d2:d6:8f:50:2c:3f:1f:24:03:df:f3:29:e2:
         d9:ee:76:d2:42:7f:52:e6:71:11:28:74:42:de:cc:31:36:1a:
         03:47:89:2e:f9:b6:f7:94:65:68:61:23:bc:b4:f2:7f:ca:c3:
         65:4e:85:d5:6c:67:76:90:34:01:cd:d3:b2:a2:a8:05:bc:13:
         04:f5:7f:ad:bb:79:ec:6f:ce:74:fc:ae:2c:5b:72:8e:c2:d0:
         46:18:39:2f:2c:f5:4d:fe:92:c6:52:f0:c6:ca:90:78:3d:d5:
         20:9b:95:21:2c:30:93:cd:a0:5b:43:47:01:98:b7:5c:e8:d4:
         8c:4c:23:25:12:15:63:98:eb:39:38:55:c9:33:21:f3:9f:39:
         35:e4:f2:82:8a:da:e2:c9:ef:83:dc:fe:ab:43:3d:fe:30:a7:
         b4:08:bf:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:35:29 2025 by rpki-client