Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3248/eSWLcPLwqnrf_qSE8eKVAzX9zEk.mft
File:                     eSWLcPLwqnrf_qSE8eKVAzX9zEk.mft (raw, json)
Hash identifier:          9ZpDZbbYWwKrijXQciurBwpAgQPDO5zWrSJ8uq9V3Ko=
Subject key identifier:   EB:02:FD:0C:61:4B:8C:F0:76:E5:7D:A3:48:28:AC:26:FA:0A:32:7C
Authority key identifier: 79:25:8B:70:F2:F0:AA:7A:DF:FE:A4:84:F1:E2:95:03:35:FD:CC:49
Certificate issuer:       /CN=79258B70F2F0AA7ADFFEA484F1E2950335FDCC49
Certificate serial:       09CF
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eSWLcPLwqnrf_qSE8eKVAzX9zEk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3248/eSWLcPLwqnrf_qSE8eKVAzX9zEk.mft
Manifest number:          09CF
Signing time:             Mon 28 Apr 2025 19:41:22 +0000
Manifest this update:     Mon 28 Apr 2025 19:41:22 +0000
Manifest next update:     Tue 29 Apr 2025 01:41:22 +0000
Files and hashes:         1: eSWLcPLwqnrf_qSE8eKVAzX9zEk.crl (hash: t8nR27u/Y/74kv/PrAf98C7Kevi74DE1QcdpcNvhm6Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2511 (0x9cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79258B70F2F0AA7ADFFEA484F1E2950335FDCC49
        Validity
            Not Before: Apr 28 19:41:22 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=EB02FD0C614B8CF076E57DA34828AC26FA0A327C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6e:bb:e8:33:9a:66:41:08:9a:48:b1:36:30:
                    af:65:72:ee:6b:fd:bf:2a:20:03:0f:40:d3:cd:4c:
                    7e:43:33:c6:5a:23:4c:16:3b:7e:03:fa:ea:74:2c:
                    c1:10:c0:2e:e9:a4:4a:83:1c:42:5b:30:c0:73:b3:
                    c8:92:45:58:48:cb:60:9a:7d:00:95:45:73:b2:28:
                    bd:27:37:d4:60:1c:10:c2:3f:13:66:84:a2:ce:e6:
                    8f:d4:8d:94:36:48:4b:f9:02:bf:77:9a:2c:06:a8:
                    6b:da:50:3a:67:a3:29:3a:da:15:2f:ca:dd:1c:f9:
                    7e:58:cf:02:4f:bc:f3:f6:99:0a:ae:49:b0:1c:59:
                    1f:3d:15:88:ab:ce:19:cb:9b:fd:80:e0:34:e9:68:
                    43:9c:fe:91:fc:60:1a:62:61:f6:7c:2e:84:f9:84:
                    75:47:44:5e:90:b5:db:3d:87:c7:7c:d0:0d:77:a6:
                    b9:d0:6a:6f:29:16:c2:cd:8e:62:d1:e0:34:80:19:
                    f1:92:c3:90:70:15:d5:20:15:c3:52:a7:40:33:43:
                    1a:58:72:08:2d:43:a5:64:8b:bf:fd:7b:78:e7:43:
                    1a:84:3c:e5:66:d0:0e:44:ae:39:ca:01:af:dc:2f:
                    56:37:2e:2a:b3:9c:cf:b9:76:cf:b4:7a:48:bd:8e:
                    9f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:02:FD:0C:61:4B:8C:F0:76:E5:7D:A3:48:28:AC:26:FA:0A:32:7C
            X509v3 Authority Key Identifier:
                keyid:79:25:8B:70:F2:F0:AA:7A:DF:FE:A4:84:F1:E2:95:03:35:FD:CC:49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3248/eSWLcPLwqnrf_qSE8eKVAzX9zEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eSWLcPLwqnrf_qSE8eKVAzX9zEk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3248/eSWLcPLwqnrf_qSE8eKVAzX9zEk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:22:6a:0f:24:72:58:a4:4f:ab:f1:53:f1:0c:3c:a0:d5:08:
         03:f1:e2:ed:ca:4a:e1:73:a5:27:9c:4e:6e:17:13:da:09:be:
         cd:af:d4:49:bb:ee:3e:34:1a:ea:66:ed:6f:d2:09:1a:43:06:
         93:ee:8b:0c:c3:86:21:0b:6c:72:a9:61:86:bf:cc:6e:e5:cc:
         31:3f:9d:4d:e9:e2:72:e1:36:9b:4b:d7:a9:a2:a5:fe:38:df:
         fa:a2:9d:96:26:6c:51:6c:d7:3b:4b:e9:56:25:17:d6:e9:e2:
         68:3a:6a:7f:86:9c:4a:39:d9:91:dc:4f:ca:e6:7b:c1:21:bc:
         ae:f9:0b:0d:b3:89:a8:e4:3f:3f:99:22:ee:19:4e:ac:21:44:
         06:0d:53:63:a9:fd:1b:ae:d0:ae:49:b6:28:7a:2a:f7:f9:c9:
         02:43:14:d3:d6:1a:92:4e:22:c2:0d:c9:f3:3b:e9:e7:8f:dc:
         9d:6c:be:91:c3:ce:94:5f:2c:79:85:72:4e:ae:66:78:32:b8:
         35:a8:02:fd:db:d4:a8:81:e1:8c:51:9d:3d:8e:d4:74:b5:0a:
         60:0d:df:81:bd:fe:85:41:23:92:80:ba:d8:25:f4:a3:b9:a0:
         b6:f7:da:ef:49:87:03:0c:e6:b0:ef:33:42:2a:9b:31:3a:f0:
         e8:6b:97:cb
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCc8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzky
NThCNzBGMkYwQUE3QURGRkVBNDg0RjFFMjk1MDMzNUZEQ0M0OTAeFw0yNTA0Mjgx
OTQxMjJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEVCMDJGRDBDNjE0QjhD
RjA3NkU1N0RBMzQ4MjhBQzI2RkEwQTMyN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcbrvoM5pmQQiaSLE2MK9lcu5r/b8qIAMPQNPNTH5DM8ZaI0wW
O34D+up0LMEQwC7ppEqDHEJbMMBzs8iSRVhIy2CafQCVRXOyKL0nN9RgHBDCPxNm
hKLO5o/UjZQ2SEv5Ar93miwGqGvaUDpnoyk62hUvyt0c+X5YzwJPvPP2mQquSbAc
WR89FYirzhnLm/2A4DTpaEOc/pH8YBpiYfZ8LoT5hHVHRF6Qtds9h8d80A13prnQ
am8pFsLNjmLR4DSAGfGSw5BwFdUgFcNSp0AzQxpYcggtQ6Vki7/9e3jnQxqEPOVm
0A5ErjnKAa/cL1Y3LiqznM+5ds+0eki9jp+bAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU6wL9DGFLjPB25X2jSCisJvoKMnwwHwYDVR0jBBgwFoAUeSWLcPLwqnrf/qSE
8eKVAzX9zEkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0
OC9lU1dMY1BMd3FucmZfcVNFOGVLVkF6WDl6RWsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2VTV0xjUEx3cW5yZl9xU0U4ZUtWQXpYOXpFay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDgvZVNXTGNQTHdxbnJm
X3FTRThlS1ZBelg5ekVrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBALsiag8kclikT6vxU/EMPKDVCAPx4u3KSuFzpSecTm4XE9oJvs2v1Em77j40
Gupm7W/SCRpDBpPuiwzDhiELbHKpYYa/zG7lzDE/nU3p4nLhNptL16mipf443/qi
nZYmbFFs1ztL6VYlF9bp4mg6an+GnEo52ZHcT8rme8EhvK75Cw2ziajkPz+ZIu4Z
TqwhRAYNU2Op/Ruu0K5Jtih6Kvf5yQJDFNPWGpJOIsINyfM76eeP3J1svpHDzpRf
LHmFck6uZngyuDWoAv3b1KiB4YxRnT2O1HS1CmAN34G9/oVBI5KAutgl9KO5oLb3
2u9JhwMM5rDvM0IqmzE68Ohrl8s=
-----END CERTIFICATE-----