Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft
File:                     guAWKrqAu-i04flju0W2Ryk0T6E.mft (raw, json)
Hash identifier:          MwuSczNdG1GWN6XndqDqW/d3gCIHnD4skPYjI++aung=
Subject key identifier:   F6:E4:B1:FD:F6:64:46:B6:C4:85:1B:FC:43:A9:16:32:61:C1:96:E5
Authority key identifier: 82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1
Certificate issuer:       /CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1
Certificate serial:       1D10
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft
Manifest number:          1D10
Signing time:             Mon 28 Apr 2025 19:41:57 +0000
Manifest this update:     Mon 28 Apr 2025 19:41:57 +0000
Manifest next update:     Tue 29 Apr 2025 01:41:57 +0000
Files and hashes:         1: guAWKrqAu-i04flju0W2Ryk0T6E.crl (hash: oBea2EZ0z9fOlxt4BeNIr7uljHS53hBFilzDqahCZd4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7440 (0x1d10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1
        Validity
            Not Before: Apr 28 19:41:57 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=F6E4B1FDF66446B6C4851BFC43A9163261C196E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d7:2f:13:11:4e:c1:4d:64:10:b1:61:cf:b6:
                    de:9a:85:44:6f:6b:18:6e:4b:2d:4a:e2:5a:23:0b:
                    dc:c6:c2:d6:e1:da:d5:ea:71:0e:e2:8f:4b:37:13:
                    0a:c1:40:c5:ca:81:65:42:2c:30:70:71:a5:35:4c:
                    ec:10:e1:57:18:fa:46:1c:ae:d1:6f:e8:74:2d:ba:
                    01:9f:25:0e:92:40:e7:0c:fb:6c:5e:f6:3a:a5:20:
                    87:86:b0:25:26:00:e4:49:80:2c:81:2c:ff:1a:e1:
                    2a:37:8d:2e:f7:78:f9:fe:2c:db:0f:4a:ad:53:71:
                    c9:ad:5e:73:ea:67:e0:c7:24:9f:a6:e6:7e:89:f4:
                    52:83:7a:25:f2:03:c5:bc:4e:34:2b:46:eb:d8:cc:
                    bf:57:c7:29:43:29:c0:ba:ae:52:24:ac:16:cf:85:
                    aa:87:41:51:7f:98:9f:df:db:58:3f:4f:a2:3c:2c:
                    92:f6:a3:23:9b:c4:4b:a6:e1:da:db:9d:79:82:f2:
                    d0:fd:3a:92:3c:a4:37:81:63:c5:c0:b5:d2:3a:f1:
                    a4:6b:6c:ed:80:f9:66:e5:f7:a1:d1:72:18:6f:20:
                    62:a8:1d:f2:a0:f7:0f:77:71:ad:91:ba:ca:88:f0:
                    55:79:86:b8:74:33:dc:9a:c1:58:6b:ec:e6:27:0a:
                    db:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E4:B1:FD:F6:64:46:B6:C4:85:1B:FC:43:A9:16:32:61:C1:96:E5
            X509v3 Authority Key Identifier:
                keyid:82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:2e:64:6e:7e:f0:c3:9b:a8:73:76:5b:4f:e7:04:ce:9a:22:
         aa:c7:81:ad:1e:cc:2c:07:b7:c4:1c:3e:23:6e:92:a6:45:18:
         99:92:4e:5e:8a:0a:19:16:1b:82:dd:cf:c6:0e:3b:38:b5:ba:
         9e:78:a0:e4:73:c1:ef:8c:67:f2:ad:fe:17:5e:08:75:7a:cf:
         99:45:86:9c:6c:b4:ac:b2:ef:e8:f2:aa:52:fa:cb:d4:00:99:
         a6:ad:65:d2:a5:f9:58:45:00:c2:fe:d4:ee:14:5b:d2:c4:82:
         d1:10:69:21:06:42:3e:ff:a7:3c:90:43:c6:a5:bb:09:4d:46:
         ec:69:6f:1b:54:8d:aa:99:13:ea:ed:94:a4:88:1d:fe:61:09:
         81:43:72:25:28:54:c5:d6:23:a2:a3:33:8c:08:25:a1:94:44:
         ad:b7:b1:de:b0:fa:01:08:e4:be:d4:29:84:8b:4f:d9:c9:fa:
         3c:f9:eb:1a:15:6a:e3:ff:75:93:ee:94:05:0b:3e:f8:9b:f5:
         1e:c0:36:2e:34:b0:7b:23:4e:dc:72:d7:ea:3c:d8:69:64:c1:
         a2:6a:7c:1c:af:59:e2:67:f4:e9:fd:cb:e3:ce:4d:dc:1b:8c:
         5e:1f:57:e1:1e:d8:18:66:1e:dc:a0:b1:93:a0:88:e4:b3:46:
         cd:60:71:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:29 2025 by rpki-client on console.sobornost.net