Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft
File:                     wrEFUbAKIe7r4enJQLSZntFcIfM.mft (raw, json)
Hash identifier:          6wyPagLnbyKu/mc5e0fh/gVWIMx3AwJDSLjUMwvceKM=
Subject key identifier:   74:C6:E5:BC:FC:AD:20:46:F3:75:D2:A8:B1:02:40:F7:DC:CA:F4:4A
Authority key identifier: C2:B1:05:51:B0:0A:21:EE:EB:E1:E9:C9:40:B4:99:9E:D1:5C:21:F3
Certificate issuer:       /CN=C2B10551B00A21EEEBE1E9C940B4999ED15C21F3
Certificate serial:       2608
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrEFUbAKIe7r4enJQLSZntFcIfM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft
Manifest number:          2608
Signing time:             Mon 28 Apr 2025 19:36:36 +0000
Manifest this update:     Mon 28 Apr 2025 19:36:36 +0000
Manifest next update:     Tue 29 Apr 2025 01:36:36 +0000
Files and hashes:         1: wrEFUbAKIe7r4enJQLSZntFcIfM.crl (hash: mY9cU6+4VP/jePxgpJP/zrM2VGfbUi1iG941sf5vY/g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9736 (0x2608)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B10551B00A21EEEBE1E9C940B4999ED15C21F3
        Validity
            Not Before: Apr 28 19:36:36 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=74C6E5BCFCAD2046F375D2A8B10240F7DCCAF44A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:27:25:a7:70:ec:92:88:a7:f5:83:b7:60:f5:
                    e2:e1:8b:dd:20:b0:fe:13:2f:66:4c:3f:65:f2:25:
                    16:b7:98:d6:07:9b:6b:03:e9:67:0b:53:cd:0a:ad:
                    05:36:29:bb:39:d9:82:6a:0f:c1:8d:61:7f:30:d8:
                    8a:b1:f0:1b:ec:ff:a0:6c:ff:61:d9:12:50:fa:e0:
                    af:0d:32:88:e1:23:85:86:f8:66:29:00:0b:2f:b5:
                    9d:aa:d1:17:7e:3f:81:df:47:9c:29:0e:3e:ab:5e:
                    50:d6:a3:36:c1:16:16:4b:f8:d3:b4:5a:0a:21:20:
                    1a:60:e8:56:8f:04:64:8d:e8:59:28:2c:f6:54:d5:
                    0a:56:b8:dd:23:ec:c1:2b:8f:5f:8f:24:6b:4a:74:
                    3e:65:09:c7:d0:95:5b:db:07:15:57:d0:52:a1:4c:
                    69:a9:02:42:e1:95:a4:0c:a1:1e:ec:b6:92:71:7f:
                    73:83:ed:80:07:33:10:9c:8d:93:ce:f3:e4:e1:ac:
                    45:5c:ed:80:70:4e:ca:0b:bd:97:ad:28:93:d6:68:
                    bc:2e:85:38:2f:57:89:58:88:9d:5e:ec:79:fe:32:
                    3c:79:a9:62:aa:b6:9d:1e:1f:27:db:5f:fe:b5:54:
                    e0:b9:1c:bf:58:20:d3:87:d7:eb:9e:5f:8b:f0:c2:
                    0b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C6:E5:BC:FC:AD:20:46:F3:75:D2:A8:B1:02:40:F7:DC:CA:F4:4A
            X509v3 Authority Key Identifier:
                keyid:C2:B1:05:51:B0:0A:21:EE:EB:E1:E9:C9:40:B4:99:9E:D1:5C:21:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrEFUbAKIe7r4enJQLSZntFcIfM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:12:44:9b:a3:8f:38:d9:bd:4d:55:44:14:bd:92:1d:da:fc:
         d5:9e:a7:fa:24:5d:c4:4f:f0:dd:66:63:73:8e:2f:5b:1a:02:
         be:24:9f:b1:8f:c5:b8:6f:5b:19:d8:df:9b:f8:e4:5b:d3:66:
         b0:35:e8:a1:84:e0:0f:62:96:c4:49:8d:a8:7b:64:19:b4:83:
         2d:ac:65:44:c7:36:c4:67:8e:20:5d:0f:e2:95:7f:79:c9:b8:
         3c:cf:77:d8:40:31:84:a6:3c:d8:c3:03:5a:9a:7a:b4:ec:dc:
         ed:18:ed:33:f5:e5:38:4b:66:bb:06:3b:70:86:62:34:8d:6d:
         92:6f:ff:3f:86:fb:bc:0d:3d:b6:17:e0:6e:81:fc:30:06:5d:
         d2:70:fd:07:6c:a0:43:db:dc:9c:a1:19:de:52:2c:9e:e8:00:
         40:03:c0:1b:b8:89:fb:ac:eb:85:40:89:92:59:8b:ec:81:5e:
         ae:21:2c:4c:cf:8a:88:8d:7a:84:d4:93:56:61:7e:db:9a:93:
         47:69:98:e3:a0:1d:43:82:97:06:04:03:07:9d:03:13:85:ca:
         13:40:20:b2:1c:5e:89:b4:ef:39:68:da:00:f1:49:3c:31:23:
         72:d9:5a:fc:d6:e8:50:05:2b:a7:b7:e8:05:d6:8a:87:c4:8b:
         8d:b1:3f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:40 2025 by rpki-client on console.sobornost.net