Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft
File:                     7JfpAsM6EGVBKiW96FhrxCFuOWI.mft (raw, json)
Hash identifier:          XwPEjtFXDVqWRt+/MmQZUFFXd1O7nkNeqIQyvH2yMOU=
Subject key identifier:   63:8B:1F:B2:B0:BC:8D:C7:85:A1:67:18:71:61:35:54:C0:7E:F8:EA
Authority key identifier: EC:97:E9:02:C3:3A:10:65:41:2A:25:BD:E8:58:6B:C4:21:6E:39:62
Certificate issuer:       /CN=EC97E902C33A1065412A25BDE8586BC4216E3962
Certificate serial:       1DBC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7JfpAsM6EGVBKiW96FhrxCFuOWI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft
Manifest number:          1DBC
Signing time:             Mon 28 Apr 2025 19:41:13 +0000
Manifest this update:     Mon 28 Apr 2025 19:41:13 +0000
Manifest next update:     Tue 29 Apr 2025 01:41:13 +0000
Files and hashes:         1: 7JfpAsM6EGVBKiW96FhrxCFuOWI.crl (hash: 3lthDJv9I1ac/owdFePl59eYAggkSLfQ0P3UJXMwfTM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7612 (0x1dbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC97E902C33A1065412A25BDE8586BC4216E3962
        Validity
            Not Before: Apr 28 19:41:13 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=638B1FB2B0BC8DC785A1671871613554C07EF8EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:20:45:39:7a:52:f6:52:e2:42:7e:07:38:
                    42:f0:e3:50:25:dd:4c:90:03:c5:0a:86:eb:b5:3e:
                    0f:64:5e:f2:01:28:8c:79:da:4e:36:e1:e5:07:f7:
                    da:ba:7b:b3:0e:85:16:95:44:d9:f6:91:ef:6b:1e:
                    f6:4a:88:d6:5b:f9:f4:8d:d3:dc:02:51:15:c6:a7:
                    39:83:47:d2:6e:86:d8:56:03:43:d2:e9:4b:4c:c5:
                    64:92:4c:56:e4:3d:5a:25:e4:71:12:41:e9:fc:ba:
                    75:6c:b6:ca:e5:fa:22:23:e9:62:a6:40:c1:44:de:
                    0d:64:d6:fd:c6:4d:20:dc:60:8c:fb:d4:ba:d4:be:
                    34:e1:20:dd:73:47:8e:ca:14:30:01:d5:ed:af:0f:
                    b4:4f:e7:26:c3:b5:ad:b3:45:8b:f6:94:47:ec:5f:
                    52:d1:0f:72:61:56:40:94:a2:a2:70:aa:3b:ba:3b:
                    4a:33:79:0f:47:fe:56:6a:e4:aa:d3:25:94:34:24:
                    81:19:67:dc:27:f7:01:b3:0d:9b:0e:db:9f:7b:7a:
                    04:be:27:99:d7:eb:c1:a4:0c:4e:81:84:72:50:d5:
                    80:23:cc:08:32:57:d6:9e:ef:0f:e8:5a:90:06:43:
                    2a:9f:cc:77:d0:41:98:d1:52:9c:6b:35:59:93:02:
                    8e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8B:1F:B2:B0:BC:8D:C7:85:A1:67:18:71:61:35:54:C0:7E:F8:EA
            X509v3 Authority Key Identifier:
                keyid:EC:97:E9:02:C3:3A:10:65:41:2A:25:BD:E8:58:6B:C4:21:6E:39:62

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7JfpAsM6EGVBKiW96FhrxCFuOWI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:04:ec:6a:06:cf:83:42:4b:67:e0:81:c1:e0:99:29:37:a8:
         78:7a:04:e8:7a:5b:4a:3b:13:44:35:72:d4:79:6c:30:c1:6b:
         73:92:e1:47:29:54:0d:82:41:3b:52:2c:9c:60:70:d8:d2:57:
         5b:0e:57:c7:02:d5:ed:56:de:d7:e1:aa:5f:77:bb:29:76:18:
         8d:29:39:6c:0b:59:5e:7f:d3:bc:17:75:81:fd:9d:6b:ca:20:
         d5:99:ec:87:fe:c8:f4:e6:d5:31:d7:ee:fe:60:08:df:9d:c3:
         b4:88:10:c1:78:90:ae:62:56:61:74:2e:1d:02:a5:dc:9b:e5:
         ab:e2:c1:56:a9:98:25:fe:23:c0:69:85:b3:49:9a:59:b3:08:
         b6:c7:82:df:c8:b2:19:b2:62:64:df:c4:d2:ea:6f:14:57:07:
         6e:8a:13:c6:a9:db:9b:25:07:18:16:2d:fb:18:17:c0:e4:94:
         82:4a:5b:5f:16:4e:2f:5a:2f:bd:07:78:af:e2:d2:ad:23:15:
         88:21:93:c0:30:20:8f:ce:16:19:ba:93:c6:5c:de:66:45:64:
         48:ad:24:b6:23:76:45:b3:e0:59:b9:b6:f7:43:c6:73:79:1e:
         2b:de:81:89:59:4e:e4:ac:70:c5:f4:43:e3:4a:e4:d1:bf:d8:
         9b:53:c5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:29 2025 by rpki-client on console.sobornost.net