Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.mft
File:                     xMVT2QII7y67l2ljJf_-xcD_FW8.mft (raw, json)
Hash identifier:          bqp2z8GQDB/gYohq0Qp/bK0v3ImGyL7fVnb1HCr/ujE=
Subject key identifier:   8C:B7:3A:32:E9:8E:0A:72:70:9F:7C:20:B4:6C:46:D4:AF:F2:54:30
Authority key identifier: C4:C5:53:D9:02:08:EF:2E:BB:97:69:63:25:FF:FE:C5:C0:FF:15:6F
Certificate issuer:       /CN=C4C553D90208EF2EBB97696325FFFEC5C0FF156F
Certificate serial:       0EE2
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xMVT2QII7y67l2ljJf_-xcD_FW8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.mft
Manifest number:          0EE2
Signing time:             Mon 28 Apr 2025 19:38:53 +0000
Manifest this update:     Mon 28 Apr 2025 19:38:53 +0000
Manifest next update:     Tue 29 Apr 2025 01:38:53 +0000
Files and hashes:         1: xMVT2QII7y67l2ljJf_-xcD_FW8.crl (hash: sXqQXKSgYHiIl04wX5jBw1Da+oHGGGOusI9E1WxQqek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3810 (0xee2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4C553D90208EF2EBB97696325FFFEC5C0FF156F
        Validity
            Not Before: Apr 28 19:38:53 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=8CB73A32E98E0A72709F7C20B46C46D4AFF25430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0e:95:d3:f0:dc:d7:0c:1c:8c:19:02:4b:2c:
                    52:1f:78:c1:a0:af:a0:00:6d:29:f9:3d:52:4f:6e:
                    17:92:ea:c7:d6:43:7e:51:b5:ab:23:f2:93:2d:45:
                    ab:61:9c:8e:0a:7b:1e:02:1b:47:ad:cf:b2:05:9f:
                    7f:90:e1:d4:04:cb:34:85:5a:91:84:f8:c2:9e:35:
                    5e:58:1f:5d:2b:d3:85:f9:f1:aa:47:1d:d5:ea:e0:
                    5f:f0:97:7f:21:96:dc:54:17:40:0d:5b:3c:1b:cb:
                    64:f3:56:e4:26:9f:a9:41:f1:35:fb:ad:95:9f:c7:
                    e8:68:60:2f:1d:83:f7:5f:20:b7:7e:e2:e4:32:14:
                    fb:58:e2:08:c2:4f:9f:89:71:36:b5:ff:4b:a5:b8:
                    76:ae:77:14:74:ae:ed:ad:06:ce:c4:4e:67:34:79:
                    de:9d:6e:5c:10:a9:31:38:00:e7:19:60:97:f9:b7:
                    7c:d1:a9:46:fc:7f:79:31:9c:07:1a:20:4b:72:c5:
                    58:f2:56:58:16:d9:00:0d:9a:43:9a:3e:14:40:0c:
                    18:63:61:86:a5:bb:08:64:58:f7:df:a1:d5:98:ba:
                    72:27:77:20:e2:c0:8c:c7:1c:85:1c:88:3d:6f:87:
                    bd:b3:76:76:1b:85:2c:94:f7:f9:4c:84:ce:44:5b:
                    6d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B7:3A:32:E9:8E:0A:72:70:9F:7C:20:B4:6C:46:D4:AF:F2:54:30
            X509v3 Authority Key Identifier:
                keyid:C4:C5:53:D9:02:08:EF:2E:BB:97:69:63:25:FF:FE:C5:C0:FF:15:6F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xMVT2QII7y67l2ljJf_-xcD_FW8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:dd:9e:c2:aa:4d:7d:55:84:e7:bd:be:10:65:59:c7:7d:65:
         02:3f:59:98:ec:97:98:c5:5a:c2:c3:8c:fa:e1:58:c1:8a:b9:
         35:26:98:df:90:5e:23:72:bc:1e:c5:df:23:3d:d0:6f:76:f4:
         99:d7:57:a8:d3:73:28:7d:47:0b:98:0c:a3:83:fd:4c:86:f1:
         b1:13:ec:37:bd:1e:21:bc:7e:e1:15:df:6d:e3:10:d7:d4:0e:
         cb:16:10:19:23:f4:c0:f9:96:66:52:22:c5:57:f0:18:db:1e:
         35:1d:fc:9d:26:21:2a:79:8f:69:c6:85:1e:f6:3f:bf:b1:47:
         e1:9b:38:66:4d:e6:45:c7:21:0d:b9:13:79:7a:4d:20:31:7f:
         f2:6f:c9:79:09:1f:4f:9c:5b:c5:88:f8:38:f5:ed:67:28:05:
         4b:92:0d:50:3a:ee:70:5c:25:59:d3:5e:6a:74:ab:47:16:72:
         c1:2c:f4:fd:43:a4:3e:30:a6:57:4a:42:5e:59:40:e2:3c:c0:
         23:f3:4d:5d:ea:96:5e:7a:a5:bb:77:27:45:a4:1e:5b:4f:ff:
         b7:57:85:63:35:ec:b3:8c:46:fe:4d:54:33:d9:20:4b:45:2b:
         4a:f9:d8:94:08:c6:7a:03:40:93:0e:b9:94:a5:15:47:97:f1:
         28:04:34:30
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICDuIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzRD
NTUzRDkwMjA4RUYyRUJCOTc2OTYzMjVGRkZFQzVDMEZGMTU2RjAeFw0yNTA0Mjgx
OTM4NTNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDhDQjczQTMyRTk4RTBB
NzI3MDlGN0MyMEI0NkM0NkQ0QUZGMjU0MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKDpXT8NzXDByMGQJLLFIfeMGgr6AAbSn5PVJPbheS6sfWQ35R
tasj8pMtRathnI4Kex4CG0etz7IFn3+Q4dQEyzSFWpGE+MKeNV5YH10r04X58apH
HdXq4F/wl38hltxUF0ANWzwby2TzVuQmn6lB8TX7rZWfx+hoYC8dg/dfILd+4uQy
FPtY4gjCT5+JcTa1/0uluHaudxR0ru2tBs7ETmc0ed6dblwQqTE4AOcZYJf5t3zR
qUb8f3kxnAcaIEtyxVjyVlgW2QANmkOaPhRADBhjYYaluwhkWPffodWYunIndyDi
wIzHHIUciD1vh72zdnYbhSyU9/lMhM5EW211AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUjLc6MumOCnJwn3wgtGxG1K/yVDAwHwYDVR0jBBgwFoAUxMVT2QII7y67l2lj
Jf/+xcD/FW8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy
My94TVZUMlFJSTd5NjdsMmxqSmZfLXhjRF9GVzguY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3hNVlQyUUlJN3k2N2wybGpKZl8teGNEX0ZXOC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjMveE1WVDJRSUk3eTY3
bDJsakpmXy14Y0RfRlc4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAF/dnsKqTX1VhOe9vhBlWcd9ZQI/WZjsl5jFWsLDjPrhWMGKuTUmmN+QXiNy
vB7F3yM90G929JnXV6jTcyh9RwuYDKOD/UyG8bET7De9HiG8fuEV323jENfUDssW
EBkj9MD5lmZSIsVX8BjbHjUd/J0mISp5j2nGhR72P7+xR+GbOGZN5kXHIQ25E3l6
TSAxf/JvyXkJH0+cW8WI+Dj17WcoBUuSDVA67nBcJVnTXmp0q0cWcsEs9P1DpD4w
pldKQl5ZQOI8wCPzTV3qll56pbt3J0WkHltP/7dXhWM17LOMRv5NVDPZIEtFK0r5
2JQIxnoDQJMOuZSlFUeX8SgENDA=
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:44 2025 by rpki-client on console.sobornost.net