Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.mft
File:                     LeFPKsfwI4E3BS6qMVxb1kMTQCI.mft (raw, json)
Hash identifier:          Y4FdIv7tPcq91DuGtBpwuqR7Bq85hu4hCbw6uJ0Qk/U=
Subject key identifier:   3B:F1:B4:C4:CC:5F:75:AE:31:36:9F:EA:60:3F:5A:F1:FE:7C:27:BB
Authority key identifier: 2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
Certificate issuer:       /CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Certificate serial:       1DA6
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.mft
Manifest number:          1D79
Signing time:             Wed 09 Apr 2025 01:07:04 +0000
Manifest this update:     Wed 09 Apr 2025 01:07:04 +0000
Manifest next update:     Wed 09 Apr 2025 07:07:04 +0000
Files and hashes:         1: LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl (hash: ARp/fL9Osokga/yUsEt07k2cx9GIwtJJh68CzW1ItIs=)
                          2: MOpfOKLakKUbD4Yvc6IMEETsYXU.roa (hash: zY3Mu8k0ptEbOfDum8sFDQMosox9jQVr7fMV8zYO27o=)
                          3: Vu7gpDVlWiePAXgf0pHp7u_cN9k.roa (hash: +OZE90GJjEGLc0YSJ3MKSYZDq2hjWW252HrT6Aj+hKY=)
                          4: ZjUAXw2vJyrv-E0IOVs4xXxpF_o.roa (hash: gJGxh859+jE7wgqaAF8/RndQfrxprblkT1TjJF3sT54=)
                          5: iJVJvcnXuKNFI9GtmipWn6rh_nU.roa (hash: xqpd9HPnh8PjBNNRGO/tkvxC87Vb3FHNaEPqdhWxxt8=)
                          6: kFq6PeZfE0EEFhDuCy93d7VYH3A.roa (hash: EBhwZCv6thWeEBufuvdoCNNvOuTc2q/xd/SoCakoqmY=)
                          7: mLygT07bsPXyMhSB7dYVubjMrR0.roa (hash: LNtyMviZ7C3D1tBvV3qAzxQU+QGTsqC8HClJmei0gnU=)
                          8: oed8Tlosroh-HEjKFL7ljpvar38.roa (hash: E/YmAsJIXKibJl3R+dATO9pn0upR1NSoP0lW/JU0+tY=)
                          9: ppHf14MzECzhrMYjBEgv5bsQX-w.roa (hash: wSF2eIYSzbb9GWp1Z2yFVWOEMNlDEJ7hbzYQcpR1Tjc=)
                          10: v6deB1Mwqvdm_8Ivnuccd4SudKU.roa (hash: 6bTSALhEXWierWH616UMZsVUcs+OnE+TjZIRHBk8Xck=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7590 (0x1da6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DE14F2AC7F0238137052EAA315C5BD643134022
        Validity
            Not Before: Apr  9 01:07:04 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=3BF1B4C4CC5F75AE31369FEA603F5AF1FE7C27BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:19:38:4d:20:c0:de:68:1a:99:f1:0a:ca:8e:
                    cc:17:f1:34:6d:3a:99:43:99:9d:96:9c:9a:47:63:
                    9d:b9:13:32:e9:79:b4:2d:0c:73:46:41:47:1a:5a:
                    b9:97:4f:8d:99:43:04:b3:ff:53:97:ba:74:ab:f3:
                    58:05:53:04:5f:18:40:99:1f:40:7b:eb:42:85:91:
                    c0:77:98:29:cf:6f:6e:63:4a:c8:fe:38:e8:32:c6:
                    90:49:a8:fa:34:db:24:8e:e4:a7:f2:bc:c4:52:69:
                    23:96:2a:82:08:88:46:75:1a:21:14:b0:9c:f7:b9:
                    85:75:0c:77:02:6b:16:d2:e3:5a:70:41:7b:ca:39:
                    3c:d6:10:71:e3:5e:ec:44:a3:1c:88:cd:6d:ec:bb:
                    94:f6:f8:ea:86:da:44:0a:ba:4e:f1:09:02:3e:b9:
                    74:14:1e:47:a4:72:db:f7:29:69:55:38:47:0b:94:
                    66:fd:c4:6a:79:67:89:2f:ee:76:78:d6:7a:5a:d3:
                    54:c6:36:a1:03:a8:f3:7f:d8:80:ec:05:75:c7:74:
                    15:b1:28:df:93:6f:6c:95:aa:5a:4c:e7:a7:49:53:
                    4e:e5:29:21:eb:e0:40:07:76:d3:8b:c8:63:80:f1:
                    17:50:da:9f:10:9d:80:31:0b:cb:85:fc:8b:b4:a9:
                    f2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F1:B4:C4:CC:5F:75:AE:31:36:9F:EA:60:3F:5A:F1:FE:7C:27:BB
            X509v3 Authority Key Identifier:
                keyid:2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:74:b3:29:e6:71:e5:ef:27:ca:2d:b1:7f:9d:62:bc:e3:83:
         2d:35:0e:c1:9a:53:ae:c1:00:82:c5:6a:1f:a3:d1:06:87:88:
         d4:f3:97:0d:9d:8d:56:a0:2e:57:69:da:0f:96:9f:6b:15:3a:
         2a:ff:af:5f:a1:d9:66:a1:c3:55:01:1d:c0:99:13:43:54:76:
         90:6b:50:0a:65:ed:2c:ab:6c:ea:71:8d:db:14:7a:8b:da:f0:
         b1:e5:d7:92:64:86:90:4b:8d:3b:9d:40:e1:09:1d:56:f1:d7:
         74:c5:b9:92:1c:2b:ed:34:d8:c7:16:ca:08:69:36:f3:d3:a9:
         3c:39:aa:71:83:27:3e:f7:81:7f:1f:b8:16:2a:33:20:cc:1f:
         97:68:71:44:b6:0c:a2:a4:02:86:6c:7f:06:9c:ba:c0:e6:23:
         20:e4:80:75:7c:d5:45:f4:2a:40:45:f9:ab:0a:a3:69:d3:f8:
         31:f2:e4:88:b6:42:85:2e:44:a8:a8:49:09:88:ab:26:91:ab:
         85:2d:18:7e:57:47:da:64:e2:16:8e:c9:e9:aa:2f:e9:d4:11:
         bd:fb:eb:32:e0:b0:02:b0:ae:07:b5:77:7d:c9:e5:12:1d:be:
         b2:61:ed:a3:07:51:94:f5:56:61:f0:36:34:9c:51:b1:5e:ec:
         7a:e6:f8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:59:35 2025 by rpki-client on console.sobornost.net