Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1029/A_XQOpMuSOf5T61oEuoovsj1LQI.mft
File:                     A_XQOpMuSOf5T61oEuoovsj1LQI.mft (raw, json)
Hash identifier:          jCUgD3LE2+CuUNlG4Z3OWoioNTYJ6c3BdKpTCAJFQs0=
Subject key identifier:   B1:60:D3:B1:D8:F2:83:E7:40:DB:34:9B:5E:72:62:42:F2:28:DD:F8
Authority key identifier: 03:F5:D0:3A:93:2E:48:E7:F9:4F:AD:68:12:EA:28:BE:C8:F5:2D:02
Certificate issuer:       /CN=03F5D03A932E48E7F94FAD6812EA28BEC8F52D02
Certificate serial:       24D3
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_XQOpMuSOf5T61oEuoovsj1LQI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1029/A_XQOpMuSOf5T61oEuoovsj1LQI.mft
Manifest number:          24D3
Signing time:             Mon 28 Apr 2025 19:41:34 +0000
Manifest this update:     Mon 28 Apr 2025 19:41:34 +0000
Manifest next update:     Tue 29 Apr 2025 01:41:34 +0000
Files and hashes:         1: A_XQOpMuSOf5T61oEuoovsj1LQI.crl (hash: wxkjR7QVRA9BKQjgLqSKEK0fYYeMt36r651r+MVTV5g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9427 (0x24d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03F5D03A932E48E7F94FAD6812EA28BEC8F52D02
        Validity
            Not Before: Apr 28 19:41:34 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=B160D3B1D8F283E740DB349B5E726242F228DDF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4b:5a:0d:2a:fa:2e:90:fc:19:f4:ce:b8:b3:
                    7c:3a:88:3f:a7:a9:e4:07:da:94:8c:e5:58:41:09:
                    16:75:a0:69:9f:e0:be:3b:16:0c:99:f0:7a:01:6e:
                    f7:35:98:45:0c:7e:b8:81:9c:b3:34:17:c7:25:05:
                    f6:d7:e6:16:86:18:ab:71:6b:2d:2a:4f:9c:91:1d:
                    65:cc:c9:96:af:69:3c:6f:83:89:54:ed:08:09:6d:
                    72:49:10:4d:35:1a:28:0c:ec:e5:14:17:06:55:6d:
                    ce:c8:23:c2:00:f7:3c:84:00:d2:3f:5f:da:e3:43:
                    94:57:70:cf:cc:f0:70:9d:88:ac:53:53:23:db:64:
                    7f:03:64:be:95:28:e7:2d:8d:ce:c3:05:44:d0:c0:
                    b9:a0:82:c1:3b:65:c5:c7:89:0b:09:b1:e2:09:6a:
                    32:47:b9:ce:d5:da:2d:6e:7a:57:0d:bf:14:de:b0:
                    51:f4:7c:f7:22:4b:cb:b9:7e:1e:fd:61:f1:7a:d7:
                    35:0e:60:94:b4:39:83:2d:d8:6f:32:72:e2:66:23:
                    d0:7b:ce:a9:c9:69:c8:03:7b:1b:d7:6f:65:f2:69:
                    ca:d9:da:b7:f2:54:c9:eb:7e:5b:65:ab:04:37:01:
                    1e:6f:e8:43:28:b7:be:fe:05:e4:48:af:e2:9f:9a:
                    78:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:60:D3:B1:D8:F2:83:E7:40:DB:34:9B:5E:72:62:42:F2:28:DD:F8
            X509v3 Authority Key Identifier:
                keyid:03:F5:D0:3A:93:2E:48:E7:F9:4F:AD:68:12:EA:28:BE:C8:F5:2D:02

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1029/A_XQOpMuSOf5T61oEuoovsj1LQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_XQOpMuSOf5T61oEuoovsj1LQI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1029/A_XQOpMuSOf5T61oEuoovsj1LQI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:bb:56:80:6d:b2:c1:04:21:eb:44:ba:01:02:0b:82:b6:ca:
         ba:79:a6:0c:7c:14:eb:4b:54:4d:53:c7:5e:5a:74:e8:7a:92:
         ba:d7:70:9e:6d:5c:d4:21:20:96:c3:fa:21:6c:33:fa:e2:83:
         38:be:03:3d:41:bc:1b:71:d1:18:7d:8e:bc:01:25:b7:e9:75:
         90:77:52:e5:26:75:84:46:ea:30:b9:bc:dd:7c:b8:2f:1d:41:
         e9:8b:e2:97:51:a7:11:eb:53:2a:87:e0:e5:2d:04:c9:56:75:
         5c:35:b7:4e:cc:2b:20:4b:91:16:00:b9:ce:56:4f:33:75:7b:
         2f:1d:bf:55:17:74:e5:ba:f4:18:cd:69:46:9e:65:4d:57:6c:
         4c:b2:14:9c:e3:92:ce:4e:39:96:6c:95:02:53:68:56:0c:38:
         ee:7a:22:54:e4:cb:43:f3:0c:84:1e:4c:fb:fe:00:5a:b7:d6:
         fb:c2:ad:6f:56:15:9f:f8:e5:f7:db:ad:df:40:b7:69:62:09:
         8c:76:00:2e:a3:96:85:24:38:02:ae:52:58:74:b2:b7:06:e5:
         03:65:b4:2e:af:e2:cc:7b:30:e8:e7:b1:0b:aa:85:c1:fb:b3:
         c1:d5:1d:a7:1f:4d:d3:89:6b:c0:52:99:f5:4b:4d:02:2c:41:
         1e:f5:e5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----