Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft
File:                     1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft (raw, json)
Hash identifier:          sGOe+Q0cYpHOA3tqHguaJgx5O0iTD0mIIRu9egcOyVo=
Subject key identifier:   20:78:E0:15:44:2F:C6:5D:BF:74:11:83:58:79:23:57:14:E2:26:A4
Authority key identifier: D6:C5:C1:8C:CE:60:30:73:0B:C2:22:AB:17:F4:E3:D8:F1:60:30:33
Certificate issuer:       /CN=D6C5C18CCE6030730BC222AB17F4E3D8F1603033
Certificate serial:       1DB6
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft
Manifest number:          1DB1
Signing time:             Mon 28 Apr 2025 19:41:36 +0000
Manifest this update:     Mon 28 Apr 2025 19:41:36 +0000
Manifest next update:     Tue 29 Apr 2025 01:41:36 +0000
Files and hashes:         1: 1sXBjM5gMHMLwiKrF_Tj2PFgMDM.crl (hash: PPRkW+JcYl5sBKw/gPOVzF4CeujLifJ8xq+bIWFb3Ks=)
                          2: bu1io0YGUyVGXJmlBFXCkqNhHzU.roa (hash: yjvnS6F+0OxhpQIQ3KjhJ2RFbPyMa6dRGhAGQNbL7Y4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7606 (0x1db6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6C5C18CCE6030730BC222AB17F4E3D8F1603033
        Validity
            Not Before: Apr 28 19:41:36 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=2078E015442FC65DBF7411835879235714E226A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:8e:cb:cb:20:1c:31:43:d5:f5:45:64:c6:
                    5e:b6:58:91:f9:8c:ba:6a:21:5f:21:5e:da:59:33:
                    2e:09:1f:ab:cf:a2:2f:d2:7b:ea:f1:5b:8d:e5:c5:
                    c2:9e:bb:2b:6b:2b:56:54:cf:97:a6:95:ae:4e:0a:
                    25:45:6c:01:80:e4:09:cd:12:e7:b5:1b:d2:3f:3f:
                    78:08:d6:5d:62:54:b2:e9:7c:42:b8:2b:20:f5:10:
                    64:49:87:10:22:09:f8:5c:5c:fc:92:4d:71:0e:25:
                    19:dc:dc:78:58:35:36:74:12:13:bc:12:89:14:81:
                    0e:23:8e:b6:be:1e:15:2b:b1:36:77:d1:34:34:9a:
                    c9:22:e8:34:e6:fd:ec:f5:9d:d0:9d:89:e9:7a:28:
                    db:fa:21:54:9e:4e:eb:b1:db:7c:b2:27:b6:2b:3f:
                    36:0c:d8:c1:d6:b3:c4:39:fc:45:34:c9:18:75:1d:
                    16:2c:8d:d1:f8:da:a4:be:73:78:42:fa:6a:fa:b5:
                    49:8f:1c:9e:a1:39:85:67:61:a6:7e:9f:33:ba:e1:
                    26:a0:78:ed:bb:d1:49:eb:80:cf:a9:87:1c:15:f7:
                    be:8d:7d:c6:46:1f:82:4a:99:8c:c5:5a:bf:97:df:
                    09:f9:ba:1c:d3:4d:a8:36:9d:a9:85:c3:89:73:ca:
                    5f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:78:E0:15:44:2F:C6:5D:BF:74:11:83:58:79:23:57:14:E2:26:A4
            X509v3 Authority Key Identifier:
                keyid:D6:C5:C1:8C:CE:60:30:73:0B:C2:22:AB:17:F4:E3:D8:F1:60:30:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c8:74:17:b8:88:01:2e:bd:55:04:a6:bb:dd:db:1d:63:ea:
         03:4a:e6:9c:40:ad:61:93:09:a8:fe:16:94:30:1f:c5:f0:31:
         67:9c:2a:1d:a0:90:13:77:d1:d6:d8:32:0a:1f:7c:03:70:fd:
         e1:7d:84:c2:b6:67:40:66:60:87:cb:7c:4d:8f:79:29:77:4a:
         d2:3f:9a:e6:18:f2:1f:96:0c:80:20:ba:3a:ae:c1:ac:ae:34:
         ed:32:fa:dd:4e:3e:2d:bc:d1:ff:6a:eb:b7:00:b7:14:57:f0:
         b2:87:9d:7f:88:b2:6b:05:6b:a6:03:bf:09:83:d6:78:5d:54:
         44:f8:1e:3d:73:4d:40:82:63:eb:ef:4c:5e:93:3a:3c:2c:8e:
         aa:1d:be:77:ca:37:02:6d:dd:3b:9d:4e:0e:58:81:79:92:41:
         dc:9c:ca:be:2e:2b:33:fa:06:25:51:a4:1f:e6:31:ab:4b:c1:
         ce:d0:a6:c2:a0:3a:89:91:45:79:2e:f4:5e:6b:ab:a2:f7:b2:
         c1:e6:11:9a:ff:1b:74:de:b2:a0:9e:a9:d2:46:5c:16:ea:58:
         a9:a7:8d:23:fe:c8:88:c6:f9:50:2c:38:c0:62:71:1c:6a:2c:
         c7:ce:5d:f0:cd:88:a1:fb:06:0a:3a:c5:6f:95:66:ab:aa:07:
         7a:c3:3d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:38 2025 by rpki-client on console.sobornost.net