Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2674/7lk_rFPTQyBXbYgPZFcGz7eXwjE.mft
File:                     7lk_rFPTQyBXbYgPZFcGz7eXwjE.mft (raw, json)
Hash identifier:          x/9AmldxUjiIYKtgWo5OUneyooQxF9MGB0QGd3cIJo0=
Subject key identifier:   EF:37:70:35:CD:48:28:EB:97:F2:9B:51:35:BD:5E:32:05:8F:A8:AB
Authority key identifier: EE:59:3F:AC:53:D3:43:20:57:6D:88:0F:64:57:06:CF:B7:97:C2:31
Certificate issuer:       /CN=EE593FAC53D34320576D880F645706CFB797C231
Certificate serial:       14A4
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7lk_rFPTQyBXbYgPZFcGz7eXwjE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2674/7lk_rFPTQyBXbYgPZFcGz7eXwjE.mft
Manifest number:          14A4
Signing time:             Mon 28 Apr 2025 19:40:54 +0000
Manifest this update:     Mon 28 Apr 2025 19:40:54 +0000
Manifest next update:     Tue 29 Apr 2025 01:40:54 +0000
Files and hashes:         1: 7lk_rFPTQyBXbYgPZFcGz7eXwjE.crl (hash: W/uNpQx/PaO1eq/DHLbwMtIeA9E8vfx7pG3ZMgCXOnM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5284 (0x14a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE593FAC53D34320576D880F645706CFB797C231
        Validity
            Not Before: Apr 28 19:40:54 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=EF377035CD4828EB97F29B5135BD5E32058FA8AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7a:bf:77:ad:54:e0:34:e4:4e:36:af:14:ce:
                    08:ce:e3:b2:8a:ad:69:d2:f0:a8:3c:ae:ce:04:40:
                    03:34:23:74:f8:0f:af:be:01:1f:81:09:34:89:c3:
                    41:92:4d:4f:da:c8:d6:11:e3:9d:8a:f8:0e:df:d4:
                    7a:7e:25:4e:1e:72:d4:dc:e2:09:f6:87:8b:d6:58:
                    5a:7e:ff:5a:ff:f0:87:0b:bc:6d:ae:16:13:f0:47:
                    8b:63:2d:1f:22:96:01:d9:2f:d4:85:9b:4a:a7:83:
                    82:4c:36:99:00:2a:e3:7f:fa:f1:c9:25:8a:70:36:
                    4e:a1:35:1c:c4:69:fe:f5:98:19:9d:f1:59:d2:a4:
                    ff:59:fa:08:2a:b7:1b:18:6e:90:1d:5c:d7:5e:ab:
                    ea:59:9b:1e:49:47:f8:76:b2:1a:86:63:0d:b7:7c:
                    3e:05:bd:ef:f8:fd:f3:12:c9:5a:7c:ed:a7:2e:a4:
                    d5:2c:fd:09:41:57:3b:70:53:f7:07:63:a7:f8:26:
                    59:0f:25:dc:79:3f:1d:32:b7:8a:a0:eb:ca:1c:e9:
                    8a:62:6b:de:9a:71:cb:36:33:7e:4f:a7:f8:c8:c7:
                    3a:f9:12:11:cd:9d:d6:59:65:33:c4:31:f7:f3:b0:
                    50:4c:8e:b0:cd:1a:d2:c1:cd:0b:fe:53:08:3a:ea:
                    2e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:37:70:35:CD:48:28:EB:97:F2:9B:51:35:BD:5E:32:05:8F:A8:AB
            X509v3 Authority Key Identifier:
                keyid:EE:59:3F:AC:53:D3:43:20:57:6D:88:0F:64:57:06:CF:B7:97:C2:31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2674/7lk_rFPTQyBXbYgPZFcGz7eXwjE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7lk_rFPTQyBXbYgPZFcGz7eXwjE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2674/7lk_rFPTQyBXbYgPZFcGz7eXwjE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:01:bd:18:d2:23:9e:aa:14:82:f1:ea:32:79:e0:58:44:a9:
         b2:dc:88:94:cb:11:0c:b1:f5:ba:07:59:84:d0:31:f9:2c:66:
         a9:1c:96:2a:55:2d:57:34:6f:b0:52:27:02:7f:00:02:1e:d7:
         d3:3d:bc:e3:56:ed:3e:f0:03:38:09:88:63:8c:c5:53:8b:31:
         df:30:c0:fc:cb:7e:08:9c:79:71:50:0f:98:cc:c6:a6:75:72:
         bf:8b:b0:14:d5:3f:c5:98:28:ea:ef:bc:55:ff:35:ca:e3:5a:
         60:fb:b3:8f:43:10:bd:01:00:06:50:8f:54:76:9e:0f:6e:5f:
         41:1b:fa:b2:1f:6d:fe:ec:48:c7:f6:38:fb:90:bb:b2:10:70:
         e6:f6:5c:19:9a:3b:e2:30:30:4c:a2:1d:4a:8e:85:9d:05:a4:
         37:9d:a2:88:c1:ef:a4:bb:a4:40:9a:71:f6:07:70:4e:c1:3e:
         33:b2:42:32:0c:5a:9a:31:3c:09:11:be:e9:5f:86:c9:06:98:
         09:12:04:9b:7c:37:f0:82:fe:27:ec:e1:b7:f0:60:8d:ec:8e:
         d2:10:c2:e0:5c:bd:e5:82:25:1c:74:e7:4c:61:63:47:52:ca:
         7d:37:cc:33:df:fa:0a:6a:ac:73:55:5b:96:e9:d1:09:e1:16:
         66:15:77:d8
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICFKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUU1
OTNGQUM1M0QzNDMyMDU3NkQ4ODBGNjQ1NzA2Q0ZCNzk3QzIzMTAeFw0yNTA0Mjgx
OTQwNTRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEVGMzc3MDM1Q0Q0ODI4
RUI5N0YyOUI1MTM1QkQ1RTMyMDU4RkE4QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDser93rVTgNORONq8UzgjO47KKrWnS8Kg8rs4EQAM0I3T4D6++
AR+BCTSJw0GSTU/ayNYR452K+A7f1Hp+JU4ectTc4gn2h4vWWFp+/1r/8IcLvG2u
FhPwR4tjLR8ilgHZL9SFm0qng4JMNpkAKuN/+vHJJYpwNk6hNRzEaf71mBmd8VnS
pP9Z+ggqtxsYbpAdXNdeq+pZmx5JR/h2shqGYw23fD4Fve/4/fMSyVp87acupNUs
/QlBVztwU/cHY6f4JlkPJdx5Px0yt4qg68oc6Ypia96accs2M35Pp/jIxzr5EhHN
ndZZZTPEMffzsFBMjrDNGtLBzQv+Uwg66i59AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU7zdwNc1IKOuX8ptRNb1eMgWPqKswHwYDVR0jBBgwFoAU7lk/rFPTQyBXbYgP
ZFcGz7eXwjEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3
NC83bGtfckZQVFF5QlhiWWdQWkZjR3o3ZVh3akUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzdsa19yRlBUUXlCWGJZZ1BaRmNHejdlWHdqRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzQvN2xrX3JGUFRReUJY
YllnUFpGY0d6N2VYd2pFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJUBvRjSI56qFILx6jJ54FhEqbLciJTLEQyx9boHWYTQMfksZqkclipVLVc0
b7BSJwJ/AAIe19M9vONW7T7wAzgJiGOMxVOLMd8wwPzLfgiceXFQD5jMxqZ1cr+L
sBTVP8WYKOrvvFX/NcrjWmD7s49DEL0BAAZQj1R2ng9uX0Eb+rIfbf7sSMf2OPuQ
u7IQcOb2XBmaO+IwMEyiHUqOhZ0FpDedoojB76S7pECacfYHcE7BPjOyQjIMWpox
PAkRvulfhskGmAkSBJt8N/CC/ifs4bfwYI3sjtIQwuBcveWCJRx050xhY0dSyn03
zDPf+gpqrHNVW5bp0QnhFmYVd9g=
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:33 2025 by rpki-client on console.sobornost.net