Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.mft
File:                     6CKHu1b6yOZ1Or3jaztqk5y1mlM.mft (raw, json)
Hash identifier:          uC2yUdRcjOfSmJ8/ahWpuoqwD6sPlptKnxd7SkpyxlA=
Subject key identifier:   95:04:C6:72:57:F7:D1:E8:BD:CA:CE:86:67:6A:E2:6E:D0:1C:E8:D0
Authority key identifier: E8:22:87:BB:56:FA:C8:E6:75:3A:BD:E3:6B:3B:6A:93:9C:B5:9A:53
Certificate issuer:       /CN=E82287BB56FAC8E6753ABDE36B3B6A939CB59A53
Certificate serial:       1F69
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6CKHu1b6yOZ1Or3jaztqk5y1mlM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.mft
Manifest number:          1F63
Signing time:             Mon 28 Apr 2025 19:38:39 +0000
Manifest this update:     Mon 28 Apr 2025 19:38:39 +0000
Manifest next update:     Tue 29 Apr 2025 01:38:39 +0000
Files and hashes:         1: 6CKHu1b6yOZ1Or3jaztqk5y1mlM.crl (hash: zO1sgBGEG5rAGF8e+9mCkdp3H4YRUd7Cg3mvfUxPbT0=)
                          2: S2bjNQej-REqHgT0YrR_t7OF0FY.roa (hash: JxMODKuWSwr6iH8TL8EdeU0qcY/yfLIHP/GxfzV8PUw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8041 (0x1f69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E82287BB56FAC8E6753ABDE36B3B6A939CB59A53
        Validity
            Not Before: Apr 28 19:38:39 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=9504C67257F7D1E8BDCACE86676AE26ED01CE8D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a3:c2:38:5d:ef:6d:62:88:61:35:41:9f:07:
                    3c:dd:f7:29:98:e8:22:b1:85:65:c7:87:ef:98:d6:
                    59:a4:a2:d1:21:11:87:29:f4:f8:94:fe:f5:63:c9:
                    ba:43:50:68:2d:ea:38:3d:15:9d:a2:52:09:7d:50:
                    a2:d4:89:9a:f5:42:a9:d0:6d:7a:3d:eb:89:cb:b9:
                    27:4e:c8:3e:2b:31:d3:e0:d8:94:68:29:ec:45:e9:
                    e3:26:33:6b:4b:14:c2:4e:81:27:e4:60:ea:24:23:
                    bb:40:cc:6d:b5:fa:cd:db:53:06:64:ae:92:40:04:
                    6f:68:c3:58:f5:be:50:a4:af:63:e7:97:ea:60:34:
                    10:e3:36:45:10:98:a2:d0:08:6c:d5:e7:1c:2d:b3:
                    77:d0:40:6e:e8:91:2a:c4:f8:71:ae:21:f4:39:25:
                    2a:91:f2:18:31:7c:04:cf:5a:19:09:50:6d:50:22:
                    9b:9d:d5:93:01:74:a3:51:c8:90:00:2d:87:9f:0c:
                    66:34:c8:33:bf:6c:1f:a6:fd:4e:fb:29:9c:7c:26:
                    9b:80:71:75:05:a8:ea:90:ce:fb:32:37:f2:16:34:
                    b0:aa:db:2a:a7:a9:ab:f5:6c:a4:10:4f:80:45:1b:
                    64:e3:8b:78:18:0d:03:ba:58:e2:cc:be:b7:c6:42:
                    e1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:04:C6:72:57:F7:D1:E8:BD:CA:CE:86:67:6A:E2:6E:D0:1C:E8:D0
            X509v3 Authority Key Identifier:
                keyid:E8:22:87:BB:56:FA:C8:E6:75:3A:BD:E3:6B:3B:6A:93:9C:B5:9A:53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6CKHu1b6yOZ1Or3jaztqk5y1mlM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:64:bd:2c:4c:63:20:f8:1d:73:78:e5:25:56:b5:0e:3c:1e:
         09:17:14:cd:85:08:87:a4:4b:92:05:79:e9:70:6d:7e:6c:38:
         43:ba:f7:b2:3b:78:38:8b:be:80:b9:55:72:4c:f4:72:de:7f:
         7b:dd:ef:52:7b:27:f2:2f:1f:78:2a:53:66:2c:14:51:a6:a1:
         a8:f4:91:65:be:dc:9c:6a:bb:18:66:21:d1:08:87:fb:0c:ac:
         23:c7:5c:1d:ee:a5:66:4a:4a:36:85:d8:ff:53:b0:0d:07:a9:
         7d:fb:05:12:30:35:9e:37:cb:38:66:4c:3b:1b:a5:67:37:86:
         be:12:42:52:fb:f4:79:4b:f4:2f:46:44:d4:1e:8a:63:d3:f3:
         ee:c2:89:4b:5a:79:33:80:a4:15:96:37:c9:d7:3a:e0:6b:bc:
         4e:65:c7:57:f0:24:76:60:5c:f2:ff:3c:0b:22:cd:55:e9:2e:
         e7:3b:a1:3d:68:1f:da:44:10:0a:6b:f8:c8:d9:51:31:e0:e3:
         5c:06:33:21:6e:35:4c:0e:ab:45:32:07:fd:b4:03:03:e7:55:
         81:0a:f1:ef:69:d3:9b:b8:8e:c2:23:74:4e:e4:bc:0e:05:a5:
         16:7b:a4:e5:fd:78:4b:aa:40:3f:49:3b:05:07:fb:b9:0f:83:
         5e:72:9e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:32 2025 by rpki-client on console.sobornost.net