Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft
File:                     kEgXQ3MJLmD9IX-_HSOR79WjObw.mft (raw, json)
Hash identifier:          2Yti5ZPK7xqFHb3AfDt2V9skstDoy0ceu4lMv/n/8tY=
Subject key identifier:   30:33:75:87:DF:E9:C7:27:43:A1:F6:30:DB:98:C1:A2:C7:39:25:9F
Authority key identifier: 90:48:17:43:73:09:2E:60:FD:21:7F:BF:1D:23:91:EF:D5:A3:39:BC
Certificate issuer:       /CN=9048174373092E60FD217FBF1D2391EFD5A339BC
Certificate serial:       03E0
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kEgXQ3MJLmD9IX-_HSOR79WjObw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft
Manifest number:          03E0
Signing time:             Mon 28 Apr 2025 19:41:26 +0000
Manifest this update:     Mon 28 Apr 2025 19:41:26 +0000
Manifest next update:     Tue 29 Apr 2025 01:41:26 +0000
Files and hashes:         1: kEgXQ3MJLmD9IX-_HSOR79WjObw.crl (hash: qSslokIaxtIet5VxAWQ7zn0ulBcTrgvx1wbjApGKq90=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 992 (0x3e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9048174373092E60FD217FBF1D2391EFD5A339BC
        Validity
            Not Before: Apr 28 19:41:26 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=30337587DFE9C72743A1F630DB98C1A2C739259F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:52:ba:ed:85:29:cf:39:2a:e0:6f:d7:56:94:
                    bb:25:1a:e8:39:74:40:39:fb:bd:da:af:13:2d:47:
                    33:f5:50:8d:d9:25:74:61:57:c8:7c:b5:ee:77:75:
                    26:19:fd:e8:c5:50:0f:30:90:42:9c:a0:85:78:91:
                    78:2c:e5:db:df:3f:7f:a2:1b:7d:eb:71:8b:82:65:
                    21:4d:df:57:ca:76:30:ba:09:8f:52:2e:d9:70:db:
                    e1:e2:52:6d:08:c4:16:f9:d1:ce:40:da:8c:e2:cd:
                    ee:58:d3:68:a5:ba:4b:c3:92:3c:72:03:94:92:b4:
                    6f:ac:4b:ad:6b:05:88:ad:f4:a3:8a:42:62:5e:fb:
                    8a:c6:3c:51:aa:e4:d4:cd:a0:c0:48:62:ea:8d:0d:
                    22:a2:86:63:e3:1a:a0:83:f8:67:df:e1:1d:f6:99:
                    b7:48:e6:07:d0:b2:58:a8:29:64:45:16:c4:ff:6b:
                    9e:3a:e2:25:f4:b4:8e:99:2f:fd:00:cc:05:a7:cd:
                    8c:a5:53:8a:ab:99:bc:93:65:99:bf:c7:2d:32:a2:
                    29:b4:12:82:3a:64:d8:8a:1a:4f:a2:37:90:cc:9c:
                    24:88:59:14:a3:b7:de:d3:4e:f5:0b:a2:e2:6b:ca:
                    93:65:10:e2:86:a5:71:56:fa:77:78:7b:19:cc:a1:
                    91:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:33:75:87:DF:E9:C7:27:43:A1:F6:30:DB:98:C1:A2:C7:39:25:9F
            X509v3 Authority Key Identifier:
                keyid:90:48:17:43:73:09:2E:60:FD:21:7F:BF:1D:23:91:EF:D5:A3:39:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kEgXQ3MJLmD9IX-_HSOR79WjObw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:1e:e0:6d:ed:6f:4b:00:04:77:e9:5f:9f:b3:a4:13:de:a0:
         c4:5b:7a:40:7f:81:92:a1:86:2b:f2:75:2f:96:38:35:a9:c9:
         ba:53:97:5b:05:5c:97:a9:63:56:75:08:01:2c:63:67:8e:9d:
         e8:c8:a8:d9:f4:68:79:3b:49:f1:47:ae:89:be:f8:59:a0:f8:
         9b:26:36:70:57:d4:70:a5:fd:d5:87:39:23:5a:3d:49:b6:fa:
         f2:b8:8d:b3:77:3a:b1:e2:d3:fd:23:31:c0:54:a4:08:28:4d:
         b9:07:f5:1f:b4:4a:2c:b2:47:48:2a:97:29:15:fd:5c:1a:11:
         6e:ce:92:30:70:9a:5d:84:4b:3c:61:c4:e2:2c:7f:0e:96:85:
         f9:8e:c8:c9:83:01:55:ea:0d:ee:43:9f:b5:56:79:ab:9a:c4:
         77:89:00:59:56:bf:c7:ec:c3:4c:29:4a:83:96:cf:57:ca:a8:
         fe:8c:79:6f:d3:7c:c9:37:00:08:f5:b5:d0:33:9a:d6:0b:dc:
         91:4f:e4:da:91:2a:bd:51:92:19:7f:05:9d:d6:d4:b4:4d:3d:
         ca:f9:cf:f6:97:cb:ff:35:51:7f:32:47:71:aa:ea:3c:87:7d:
         cd:19:db:5d:89:3b:9f:1f:f8:ff:23:f3:71:c1:34:72:c1:97:
         34:2d:f4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----