Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft
File:                     DqwT6V7p4IXk3eST4sWV7hZQy5E.mft (raw, json)
Hash identifier:          EmJvMnHGj3B0CyPNMAiecxqqNwk+CoyXvaE82vXBaH0=
Subject key identifier:   C1:30:BB:42:76:1C:DC:64:A0:C4:FD:8C:24:85:7C:4C:71:BC:9E:FA
Authority key identifier: 0E:AC:13:E9:5E:E9:E0:85:E4:DD:E4:93:E2:C5:95:EE:16:50:CB:91
Certificate issuer:       /CN=0EAC13E95EE9E085E4DDE493E2C595EE1650CB91
Certificate serial:       0803
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DqwT6V7p4IXk3eST4sWV7hZQy5E.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft
Manifest number:          0803
Signing time:             Mon 28 Apr 2025 19:41:06 +0000
Manifest this update:     Mon 28 Apr 2025 19:41:06 +0000
Manifest next update:     Tue 29 Apr 2025 01:41:06 +0000
Files and hashes:         1: DqwT6V7p4IXk3eST4sWV7hZQy5E.crl (hash: RIp30+My5j/65Xwf0hH6kLwd7EmOWi+18/6yqbXWbeo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2051 (0x803)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EAC13E95EE9E085E4DDE493E2C595EE1650CB91
        Validity
            Not Before: Apr 28 19:41:06 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=C130BB42761CDC64A0C4FD8C24857C4C71BC9EFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ad:65:ae:fa:dc:ed:29:cc:7f:ec:48:ba:c1:
                    9d:87:25:fe:64:4b:9c:6c:2a:24:71:70:03:66:73:
                    7c:55:a3:90:51:c8:1f:fd:d8:a0:24:ab:d1:6c:30:
                    a3:ab:ca:97:29:6b:2c:87:0b:ef:8c:13:16:78:86:
                    05:6c:15:00:bf:76:66:55:9d:e9:6a:a9:c4:ce:73:
                    b3:8a:23:7b:5c:bf:6d:33:d8:86:94:09:27:ab:0b:
                    23:46:a7:f4:a6:ab:c1:9c:40:1c:bc:e0:21:ec:c4:
                    c7:3b:97:aa:98:a3:8d:c1:e0:ba:6a:5a:63:41:7b:
                    36:75:55:d4:4e:5a:bb:2f:a5:c4:f2:c0:82:ad:dc:
                    eb:9f:cc:37:c8:e4:35:3f:21:f2:c9:7d:d0:17:6f:
                    fa:90:b4:c8:e1:44:ca:f3:2e:81:50:a4:38:41:ef:
                    7b:fd:c1:d9:35:86:ee:92:bc:0a:ca:8c:51:b4:17:
                    af:58:74:38:84:04:93:c8:82:e5:b6:51:a8:48:a9:
                    75:ed:af:75:02:37:20:62:4e:e7:95:2c:fa:62:4e:
                    53:ee:cc:ad:8a:d9:27:6e:64:fb:04:0c:8f:b2:fa:
                    24:c5:b0:91:c2:83:21:79:98:c5:3f:b5:87:43:96:
                    ec:95:18:f5:40:8a:43:51:02:fb:f0:b4:0e:88:59:
                    75:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:30:BB:42:76:1C:DC:64:A0:C4:FD:8C:24:85:7C:4C:71:BC:9E:FA
            X509v3 Authority Key Identifier:
                keyid:0E:AC:13:E9:5E:E9:E0:85:E4:DD:E4:93:E2:C5:95:EE:16:50:CB:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DqwT6V7p4IXk3eST4sWV7hZQy5E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:98:82:f5:1f:e5:32:10:40:d6:c8:ce:6e:41:de:e9:ba:64:
         a1:8c:49:72:00:bd:3f:83:db:9d:29:05:cd:52:30:a1:05:b9:
         b3:d3:43:71:61:2b:8d:fd:c7:4f:47:f9:97:6b:18:d2:f5:0c:
         ce:69:93:70:b1:42:25:36:59:8f:39:2a:38:03:14:53:03:8f:
         06:51:19:05:5c:2e:28:a3:bb:39:6d:4e:a6:d8:45:e2:45:fb:
         22:31:4a:c1:41:97:be:cb:32:e8:42:8e:9b:8e:36:9d:a0:a4:
         e1:56:28:54:b9:3b:75:b9:ad:07:64:03:a2:9f:72:30:70:0e:
         dc:f9:27:23:6d:d0:c5:a8:ee:f6:0f:fe:b0:7b:bf:8c:bc:93:
         89:56:63:b1:f3:d0:e9:32:15:52:f2:43:14:b8:58:fc:b1:cc:
         ea:61:bb:c9:a4:e3:cc:ca:0f:8b:f1:88:e0:fc:17:1d:b1:9c:
         3e:15:fc:49:83:26:06:fa:1f:7a:95:59:fa:4b:48:e1:7a:2c:
         9e:1c:b0:8c:c6:53:ff:d9:91:d7:5d:26:42:5c:83:2a:91:7e:
         45:7d:d7:01:f5:69:65:43:42:a6:22:68:9f:d9:eb:e0:1b:63:
         0a:f2:a5:a0:6c:98:6e:73:86:b9:e6:bd:23:c9:75:ae:83:bf:
         37:6e:60:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:45 2025 by rpki-client on console.sobornost.net