Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.mft
File:                     sTLT4KDPHu-UWlZnFbFefhSl_uM.mft (raw, json)
Hash identifier:          57sn3FMEpR7C00a5pKQ6SeTsBqROYZBFmDd2dscAtQQ=
Subject key identifier:   81:77:49:B7:8C:B6:64:C2:72:97:78:AD:52:61:9F:A8:5B:0D:4A:8D
Authority key identifier: B1:32:D3:E0:A0:CF:1E:EF:94:5A:56:67:15:B1:5E:7E:14:A5:FE:E3
Certificate issuer:       /CN=B132D3E0A0CF1EEF945A566715B15E7E14A5FEE3
Certificate serial:       5687
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sTLT4KDPHu-UWlZnFbFefhSl_uM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.mft
Manifest number:          5687
Signing time:             Mon 28 Apr 2025 19:38:52 +0000
Manifest this update:     Mon 28 Apr 2025 19:38:52 +0000
Manifest next update:     Tue 29 Apr 2025 01:38:52 +0000
Files and hashes:         1: sTLT4KDPHu-UWlZnFbFefhSl_uM.crl (hash: 0Se7DhOIroFbCep7CYibNC3LYsRiJoH4+qRrZ/wJ++8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22151 (0x5687)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B132D3E0A0CF1EEF945A566715B15E7E14A5FEE3
        Validity
            Not Before: Apr 28 19:38:52 2025 GMT
            Not After : Sep 27 02:44:05 2025 GMT
        Subject: CN=817749B78CB664C2729778AD52619FA85B0D4A8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f6:3f:d0:5c:58:c7:63:5f:e8:41:7c:4b:80:
                    fd:3c:22:b2:05:64:94:a6:6e:a6:e5:52:ff:13:b0:
                    77:35:5b:f7:41:33:60:c3:2c:00:d1:fa:04:ee:79:
                    49:31:f3:f6:27:ae:e2:8b:a0:51:51:e6:e0:06:1e:
                    77:09:2c:85:19:8d:36:c6:0d:8b:a6:f7:74:6c:fb:
                    61:ba:13:41:54:cd:27:f2:75:6f:77:ae:e3:85:97:
                    40:d8:ae:dd:f1:fc:b9:f1:99:41:08:1f:a8:d6:1b:
                    37:8b:e7:d2:8e:78:5e:f6:10:cc:8e:e4:48:47:c3:
                    cc:9a:09:9d:80:ee:ce:db:e3:ad:ac:30:b2:7f:ea:
                    03:d7:cd:ab:27:c4:92:15:f0:05:f1:a3:c9:2c:ec:
                    a1:5f:bd:a8:22:fb:9b:8a:6d:73:15:84:5a:b7:79:
                    0d:94:5c:86:8d:4f:df:67:8b:e5:dc:5c:f1:52:d5:
                    4a:07:46:4c:04:17:a9:82:54:3e:f0:ca:0a:2c:f1:
                    4b:91:38:f7:30:55:b4:4e:20:98:64:9f:8f:87:f4:
                    cf:f4:74:c8:2b:11:e2:e3:df:80:fe:c1:98:20:56:
                    77:ac:b4:26:8a:90:13:4b:49:55:4c:97:40:77:3a:
                    93:6a:13:a7:95:f9:73:6f:c2:75:f5:d5:11:fa:dc:
                    ec:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:77:49:B7:8C:B6:64:C2:72:97:78:AD:52:61:9F:A8:5B:0D:4A:8D
            X509v3 Authority Key Identifier:
                keyid:B1:32:D3:E0:A0:CF:1E:EF:94:5A:56:67:15:B1:5E:7E:14:A5:FE:E3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sTLT4KDPHu-UWlZnFbFefhSl_uM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:bf:1c:ae:f8:d5:36:25:5d:52:a3:23:11:b7:3e:5a:a1:37:
         1f:e0:ec:04:ee:c6:0b:3e:55:4f:ab:cc:5d:41:d3:78:e4:1a:
         b9:8b:c7:a8:27:fa:87:af:77:2c:bd:7b:f3:ed:73:3d:32:9c:
         63:ae:44:cd:12:ea:58:0e:cd:0e:57:a3:99:6f:2e:f7:33:7b:
         3e:6c:11:92:6d:c2:e5:8b:a3:e8:3a:1a:50:c1:b8:d3:c2:74:
         8e:bd:ff:15:7b:8c:e2:e5:9f:dd:b2:96:bf:4d:bc:6f:38:1d:
         0b:7a:8b:62:41:97:1f:0f:22:52:c6:ca:2c:e7:17:a8:d9:ac:
         08:86:a7:5c:f5:ef:6c:85:e6:3f:50:94:66:a9:50:e5:c1:c2:
         9a:d7:af:3b:b9:42:b0:9d:41:4f:b2:0b:25:d8:47:4f:34:ef:
         7e:76:8e:57:a3:0b:c9:5a:18:48:ef:33:10:12:36:f6:ab:43:
         89:f3:aa:4d:ba:e4:d9:ba:fa:9b:88:0b:84:28:bf:ec:8c:f4:
         31:a2:90:b1:f4:bd:cd:bd:49:23:55:db:d2:38:4d:92:a0:9b:
         66:53:ca:e7:38:df:7f:0c:92:1f:01:75:91:b6:8c:6a:01:85:
         4c:d8:61:c5:57:5a:2e:8b:ab:b1:6f:d2:a1:4a:b2:a8:88:ee:
         22:cb:e4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:30 2025 by rpki-client on console.sobornost.net