Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft
File:                     Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft (raw, json)
Hash identifier:          Fg1+a2/4mTOtsDLD0augBnA3vSdBflHEItGA3JdH1+4=
Subject key identifier:   DB:D8:04:EC:B5:B5:B7:C6:D3:5D:78:64:95:7A:B3:0C:B3:75:69:59
Authority key identifier: 45:CF:5B:26:2A:56:F8:51:34:C8:FE:95:D6:4D:F0:89:F1:B7:62:E7
Certificate issuer:       /CN=45CF5B262A56F85134C8FE95D64DF089F1B762E7
Certificate serial:       057D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rc9bJipW-FE0yP6V1k3wifG3Yuc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft
Manifest number:          057C
Signing time:             Mon 28 Apr 2025 19:38:33 +0000
Manifest this update:     Mon 28 Apr 2025 19:38:33 +0000
Manifest next update:     Tue 29 Apr 2025 01:38:33 +0000
Files and hashes:         1: Rc9bJipW-FE0yP6V1k3wifG3Yuc.crl (hash: c4OJHNz+HnwS0XnVHejCTDErowyMrpH9uxYMB+RFyt8=)
                          2: rGX-jlWmT5UXNDCJbyr29sYL8j0.roa (hash: SC8327IqDeIkUpm5PLMYz5uE5ihFgGUKeXxDbb+NB5c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1405 (0x57d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45CF5B262A56F85134C8FE95D64DF089F1B762E7
        Validity
            Not Before: Apr 28 19:38:33 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=DBD804ECB5B5B7C6D35D7864957AB30CB3756959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1e:90:4d:ec:7d:11:9a:79:e8:9d:22:fa:8b:
                    ee:d3:e5:be:21:46:76:b6:55:d3:66:c2:01:85:63:
                    97:ea:fc:c6:b8:d8:cf:30:9e:6a:c4:00:2d:e6:99:
                    a0:21:9f:ab:b6:ca:03:c6:56:32:70:12:32:1a:db:
                    8a:8e:7c:91:8f:9e:1f:c8:e7:9b:e4:c7:8c:a7:69:
                    3f:9a:9a:7f:bc:69:81:2f:ad:0c:4f:94:86:70:62:
                    d7:8b:2e:f5:88:46:f1:19:4f:0c:49:40:05:9d:47:
                    2e:d3:22:b6:f4:2c:b3:4c:8e:5e:d9:18:af:ad:81:
                    75:33:0a:9c:8a:df:16:8b:99:6c:7d:cb:19:07:80:
                    45:79:33:28:f5:b6:2f:10:2c:da:d9:8f:80:8e:05:
                    cb:79:40:88:fd:d5:3a:2b:62:68:eb:bc:87:88:e3:
                    fa:bf:a2:76:f1:38:63:2e:c0:3f:e7:b1:82:db:52:
                    cf:68:db:56:0c:92:7a:95:a3:9a:69:f9:90:45:f9:
                    8c:3f:8b:88:61:7e:40:fa:55:5b:57:b5:71:7c:d6:
                    4a:05:bd:c1:85:42:b3:69:74:6f:d8:e6:da:14:fb:
                    f8:41:67:3f:1d:1b:4c:b4:bc:66:2e:88:85:63:ba:
                    36:ae:bd:1f:a9:03:8b:8e:d2:08:cf:35:3d:80:3c:
                    55:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D8:04:EC:B5:B5:B7:C6:D3:5D:78:64:95:7A:B3:0C:B3:75:69:59
            X509v3 Authority Key Identifier:
                keyid:45:CF:5B:26:2A:56:F8:51:34:C8:FE:95:D6:4D:F0:89:F1:B7:62:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rc9bJipW-FE0yP6V1k3wifG3Yuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:47:74:1c:92:98:90:f8:fe:06:7a:5d:40:3d:c5:2d:30:ce:
         10:50:aa:03:bf:cb:e2:f7:1a:85:75:82:4f:e4:39:f4:5e:40:
         f1:f2:38:e9:8a:09:70:e4:95:ec:ba:1b:84:df:f1:86:0e:f7:
         28:37:b8:45:1d:08:0e:3b:03:86:3a:a6:58:fc:9a:0f:08:8d:
         86:6b:1e:d7:ad:f8:37:86:c3:3d:a9:e7:1d:1f:23:f1:1a:53:
         d7:e2:08:03:7b:ae:69:6e:a1:17:22:26:65:4d:e5:55:f4:87:
         3b:a6:f6:1a:2f:c7:e7:5a:6c:16:31:c8:f4:22:5a:19:f4:a5:
         ad:66:1f:a1:ea:24:e3:55:b0:e9:22:c9:a5:63:78:95:fa:50:
         a4:74:02:52:5d:8b:09:35:55:f0:c3:a9:fa:de:10:f4:c3:7a:
         df:af:30:4c:3d:45:6d:c3:62:e6:fb:7d:04:61:c1:6e:15:29:
         c6:e0:2c:ed:c3:bb:e1:e2:6a:c2:f2:f5:4f:40:c9:5d:fe:c9:
         32:29:45:22:ee:67:2c:1d:ff:f0:d4:f0:19:6c:5a:38:2f:3b:
         dd:ae:54:93:04:db:e6:9a:60:b4:a3:02:28:92:3e:da:aa:73:
         fc:4f:18:ca:69:df:b7:b9:67:1b:49:bc:1e:5d:56:0b:89:1b:
         5e:15:62:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:32 2025 by rpki-client on console.sobornost.net