Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3259/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.mft
File:                     hX8ghpiiSaBZYHneTz2uX6e5Z1Q.mft (raw, json)
Hash identifier:          F5xIRHr3VAW1dq3Bx8Fb3KSrJrZPRiISUou2qY8ftzg=
Subject key identifier:   4D:28:36:42:2D:A4:F1:4F:8E:8A:7E:1D:DA:A1:7B:D2:F2:CF:62:79
Authority key identifier: 85:7F:20:86:98:A2:49:A0:59:60:79:DE:4F:3D:AE:5F:A7:B9:67:54
Certificate issuer:       /CN=857F208698A249A0596079DE4F3DAE5FA7B96754
Certificate serial:       08F8
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.mft
Manifest number:          08F8
Signing time:             Mon 28 Apr 2025 19:37:58 +0000
Manifest this update:     Mon 28 Apr 2025 19:37:58 +0000
Manifest next update:     Tue 29 Apr 2025 01:37:58 +0000
Files and hashes:         1: hX8ghpiiSaBZYHneTz2uX6e5Z1Q.crl (hash: fOEQpUet6mXETBfDGwZIPIOIl9/XK1q+wKe3oG9D4RY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2296 (0x8f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=857F208698A249A0596079DE4F3DAE5FA7B96754
        Validity
            Not Before: Apr 28 19:37:58 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=4D2836422DA4F14F8E8A7E1DDAA17BD2F2CF6279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:61:84:f2:15:6d:fb:f5:6d:1c:83:13:14:
                    46:d6:5f:2d:2e:43:72:41:d8:d1:e4:3a:ce:59:76:
                    0a:bb:77:95:38:9e:b5:ec:4f:d6:b2:17:78:c6:29:
                    03:5e:6c:85:17:f3:8b:5f:28:e8:8e:51:c4:f0:24:
                    56:16:e3:f0:03:d2:e8:f5:da:aa:0e:a7:c6:fa:6c:
                    1f:66:60:7e:72:9c:6e:44:95:00:10:e6:e0:38:90:
                    c1:f1:47:a3:33:63:bc:d6:85:92:5f:02:7c:e6:8c:
                    1e:4c:20:54:a3:77:ed:ca:8e:31:e3:8f:1d:62:14:
                    12:91:24:f2:28:30:a2:e1:70:54:ca:81:f1:3f:07:
                    4c:1f:e6:18:c0:df:9b:04:d7:61:63:f6:4a:b7:9a:
                    41:ea:38:f4:4f:65:75:92:26:97:0a:9f:39:4b:b1:
                    95:98:ce:a0:0a:48:2b:4c:52:26:91:22:1a:45:58:
                    5e:40:5e:ba:b9:52:80:58:9e:4a:7c:db:1a:dc:85:
                    d0:1e:e9:9a:08:d5:9d:47:48:46:ed:dc:e3:80:d8:
                    49:67:c5:9f:10:1b:db:6e:18:69:4b:72:06:ee:f1:
                    1f:8b:1e:2a:c7:60:e5:2b:90:f3:49:eb:f7:43:1e:
                    d3:c1:59:81:1a:51:f6:a6:24:17:3f:1f:33:94:28:
                    12:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:28:36:42:2D:A4:F1:4F:8E:8A:7E:1D:DA:A1:7B:D2:F2:CF:62:79
            X509v3 Authority Key Identifier:
                keyid:85:7F:20:86:98:A2:49:A0:59:60:79:DE:4F:3D:AE:5F:A7:B9:67:54

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:6b:35:c7:bb:90:9a:46:57:ab:9f:c3:e9:da:36:06:ee:14:
         2e:2b:24:bc:a9:b1:51:09:62:8c:41:53:ba:d9:86:0e:7b:55:
         d3:fb:94:ee:26:16:aa:33:c9:32:d5:6f:20:be:79:7a:e8:37:
         34:54:95:df:c6:a6:23:9c:c7:25:9d:17:cd:49:67:c2:56:fc:
         c3:61:1b:fb:f5:22:21:db:a8:a2:82:d9:f1:22:35:48:66:97:
         5a:75:84:e5:67:9b:a4:65:41:9e:84:ec:bf:b9:d7:01:2f:53:
         60:ab:79:85:f4:13:c1:4b:cb:f3:12:7b:74:00:98:00:7d:f6:
         fb:91:e9:64:69:d8:31:eb:f6:6f:50:85:9a:03:2f:34:26:66:
         6d:d9:e8:48:58:66:87:c8:f3:11:29:61:b0:fe:86:22:3c:2a:
         7b:8f:85:d4:c3:b2:97:4e:38:3c:bc:b8:50:3e:09:3f:cc:da:
         2f:67:f3:18:a0:28:40:04:ee:49:0c:f9:36:0e:a2:84:b3:c4:
         ea:df:fe:4f:41:da:62:c2:27:2e:5e:6e:18:95:d4:cc:78:58:
         1c:52:eb:ab:46:78:57:f9:81:f1:b2:a4:fd:64:5a:20:6e:6a:
         7f:c7:ae:c2:a1:11:de:14:8b:fe:8f:fa:e3:70:ba:f9:a1:e2:
         43:aa:6f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----