Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/547/9GZUo8iCR6UBa64ysnJws0hfNMU.mft
File:                     9GZUo8iCR6UBa64ysnJws0hfNMU.mft (raw, json)
Hash identifier:          QieF6dasZhAoIqJgW0AWVJWQOcXEPVIT6ddvBixKKdw=
Subject key identifier:   31:82:D6:E3:A7:19:B3:47:F2:EC:DE:08:54:CF:FC:F0:2B:B6:83:E9
Authority key identifier: F4:66:54:A3:C8:82:47:A5:01:6B:AE:32:B2:72:70:B3:48:5F:34:C5
Certificate issuer:       /CN=F46654A3C88247A5016BAE32B27270B3485F34C5
Certificate serial:       1B10
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9GZUo8iCR6UBa64ysnJws0hfNMU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/547/9GZUo8iCR6UBa64ysnJws0hfNMU.mft
Manifest number:          1B10
Signing time:             Sun 18 May 2025 03:42:56 +0000
Manifest this update:     Sun 18 May 2025 03:42:56 +0000
Manifest next update:     Sun 18 May 2025 09:42:56 +0000
Files and hashes:         1: 9GZUo8iCR6UBa64ysnJws0hfNMU.crl (hash: j2ngk+Xt0SYbEY8zuscbiMZtzqbLxQ7Ioglw8RsI3LY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6928 (0x1b10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F46654A3C88247A5016BAE32B27270B3485F34C5
        Validity
            Not Before: May 18 03:42:56 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=3182D6E3A719B347F2ECDE0854CFFCF02BB683E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c1:f3:1e:e4:06:6a:fe:8e:31:88:2f:77:a6:
                    a6:6e:27:df:a3:aa:d6:23:2e:42:3d:f9:4c:f3:c0:
                    a4:f7:c6:58:12:04:63:f8:69:d9:5f:11:30:91:02:
                    36:4e:57:87:10:ff:b4:39:82:cb:d3:72:82:d4:16:
                    24:47:e5:d2:1d:5b:77:a4:90:3e:1d:91:19:ba:00:
                    a7:c4:ab:50:bb:02:51:1f:bb:53:e4:e4:0a:12:58:
                    04:11:9d:86:3a:2b:f3:a3:6e:7a:2e:60:d2:ab:8a:
                    f9:40:ad:4b:64:ce:76:03:08:21:d0:30:89:b4:9a:
                    ef:d8:98:3d:40:41:fa:97:fc:e2:13:64:a2:8b:41:
                    07:17:21:db:ad:81:95:1e:c1:ff:3e:72:d1:c4:23:
                    f5:59:79:16:0b:32:16:0b:a1:cf:99:4c:01:73:2c:
                    40:a1:5f:64:3c:98:17:27:a2:2d:77:eb:c9:42:3c:
                    26:e6:90:99:41:40:ac:ed:74:33:0a:a6:36:f8:42:
                    6c:eb:77:41:7c:f8:17:f5:2f:91:53:39:aa:9a:a2:
                    4f:a7:1b:2f:27:2b:49:0f:d4:ab:fc:cb:6a:2c:73:
                    19:f4:10:71:a8:26:28:c1:9a:e2:3b:1e:d4:03:f9:
                    8c:cb:80:b8:a4:20:8e:8b:ae:4f:60:39:72:74:24:
                    aa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:82:D6:E3:A7:19:B3:47:F2:EC:DE:08:54:CF:FC:F0:2B:B6:83:E9
            X509v3 Authority Key Identifier:
                keyid:F4:66:54:A3:C8:82:47:A5:01:6B:AE:32:B2:72:70:B3:48:5F:34:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/547/9GZUo8iCR6UBa64ysnJws0hfNMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9GZUo8iCR6UBa64ysnJws0hfNMU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/547/9GZUo8iCR6UBa64ysnJws0hfNMU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:bc:5c:a6:34:3a:34:09:b2:ab:2f:91:11:4e:de:9e:11:9f:
         c5:2c:3e:1d:5a:32:01:c0:91:3e:e2:2f:71:98:c3:88:e2:48:
         2b:2c:37:8e:33:07:00:82:6d:ce:ca:55:21:3e:91:83:9c:64:
         8d:11:c4:78:75:b8:9c:4e:b4:44:a5:78:5c:e7:7e:cf:d3:6b:
         1b:68:e5:ed:ba:86:ed:1b:43:c8:b0:63:aa:13:4d:3b:43:5b:
         23:9b:05:f5:b1:67:6a:2d:54:9e:54:1b:c6:3d:87:90:f9:38:
         f0:b0:09:3b:49:73:b1:75:ba:fe:fd:1e:2e:62:5a:5c:d4:78:
         05:09:8c:bc:e8:49:56:cf:7b:90:3b:d7:b1:a8:57:83:85:d9:
         85:28:d5:11:ea:b0:d9:e8:35:21:f8:6f:06:c8:5e:e9:15:e0:
         5a:45:92:fb:6e:dc:ab:c9:90:02:5b:75:d4:3b:6d:93:8d:dd:
         4f:b8:4c:cb:5c:0c:2e:1c:4f:42:af:d0:b7:ea:6d:36:6d:00:
         ea:e5:2e:04:96:9f:5e:df:db:74:13:80:e6:af:c2:2e:d8:4c:
         54:72:3a:97:18:5b:aa:24:a9:c3:5e:9f:06:cc:48:6a:5b:5e:
         93:35:a7:96:38:de:fb:4a:b0:77:e0:a2:20:76:71:3a:2a:97:
         87:94:65:f6
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICGxAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjQ2
NjU0QTNDODgyNDdBNTAxNkJBRTMyQjI3MjcwQjM0ODVGMzRDNTAeFw0yNTA1MTgw
MzQyNTZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDMxODJENkUzQTcxOUIz
NDdGMkVDREUwODU0Q0ZGQ0YwMkJCNjgzRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBwfMe5AZq/o4xiC93pqZuJ9+jqtYjLkI9+UzzwKT3xlgSBGP4
adlfETCRAjZOV4cQ/7Q5gsvTcoLUFiRH5dIdW3ekkD4dkRm6AKfEq1C7AlEfu1Pk
5AoSWAQRnYY6K/OjbnouYNKrivlArUtkznYDCCHQMIm0mu/YmD1AQfqX/OITZKKL
QQcXIdutgZUewf8+ctHEI/VZeRYLMhYLoc+ZTAFzLEChX2Q8mBcnoi1368lCPCbm
kJlBQKztdDMKpjb4Qmzrd0F8+Bf1L5FTOaqaok+nGy8nK0kP1Kv8y2oscxn0EHGo
JijBmuI7HtQD+YzLgLikII6Lrk9gOXJ0JKp7AgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUMYLW46cZs0fy7N4IVM/88Cu2g+kwHwYDVR0jBBgwFoAU9GZUo8iCR6UBa64y
snJws0hfNMUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTQ3
LzlHWlVvOGlDUjZVQmE2NHlzbkp3czBoZk5NVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvOUdaVW84aUNSNlVCYTY0eXNuSndzMGhmTk1VLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTQ3LzlHWlVvOGlDUjZVQmE2
NHlzbkp3czBoZk5NVS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBAvFymNDo0CbKrL5ERTt6eEZ/FLD4dWjIBwJE+4i9xmMOI4kgrLDeOMwcAgm3O
ylUhPpGDnGSNEcR4dbicTrREpXhc537P02sbaOXtuobtG0PIsGOqE007Q1sjmwX1
sWdqLVSeVBvGPYeQ+TjwsAk7SXOxdbr+/R4uYlpc1HgFCYy86ElWz3uQO9exqFeD
hdmFKNUR6rDZ6DUh+G8GyF7pFeBaRZL7btyryZACW3XUO22Tjd1PuEzLXAwuHE9C
r9C36m02bQDq5S4Elp9e39t0E4Dmr8Iu2ExUcjqXGFuqJKnDXp8GzEhqW16TNaeW
ON77SrB34KIgdnE6KpeHlGX2
-----END CERTIFICATE-----
Generated at Sun May 18 05:57:35 2025 by rpki-client