Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft
File:                     VyVNn31j60IRhMWNAuBBlwWaag4.mft (raw, json)
Hash identifier:          m4XKC18VViHpmlsPepmiYkIStF+UMUe4J0r4Riorq6g=
Subject key identifier:   8C:09:73:12:7E:8D:45:EB:CE:C8:F7:DE:B6:1F:DB:F6:1C:D5:E2:AB
Authority key identifier: 57:25:4D:9F:7D:63:EB:42:11:84:C5:8D:02:E0:41:97:05:9A:6A:0E
Certificate issuer:       /CN=57254D9F7D63EB421184C58D02E04197059A6A0E
Certificate serial:       0803
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VyVNn31j60IRhMWNAuBBlwWaag4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft
Manifest number:          0803
Signing time:             Mon 28 Apr 2025 19:41:06 +0000
Manifest this update:     Mon 28 Apr 2025 19:41:06 +0000
Manifest next update:     Tue 29 Apr 2025 01:41:06 +0000
Files and hashes:         1: VyVNn31j60IRhMWNAuBBlwWaag4.crl (hash: 6pO095lfowlKKkjTpsl8UL93ExVgZ2vHwOlrki2ZBNA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2051 (0x803)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57254D9F7D63EB421184C58D02E04197059A6A0E
        Validity
            Not Before: Apr 28 19:41:06 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=8C0973127E8D45EBCEC8F7DEB61FDBF61CD5E2AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:86:a3:56:2e:72:20:0b:b8:87:bc:20:2a:f8:
                    e5:6a:81:f5:dc:d9:16:77:cd:f1:1d:03:a8:a6:59:
                    1f:7c:4c:0c:9e:1e:dc:9b:47:ef:a3:69:b4:8e:16:
                    2a:db:ab:2f:da:c9:f5:3a:8a:a9:43:f8:d7:59:76:
                    5d:0b:e5:83:af:e0:08:04:9a:51:ff:2e:78:64:cc:
                    12:f4:7f:f7:d8:01:11:8b:51:87:8a:5c:ca:a9:41:
                    5c:f2:36:ce:07:4a:2d:88:1d:64:d6:53:6d:0f:4d:
                    fb:70:e9:17:c4:e9:b6:ac:39:77:b0:64:45:53:66:
                    25:19:f8:c5:35:83:2c:7b:4b:83:ea:98:74:03:a0:
                    a9:cf:08:ba:47:6d:17:fa:56:a8:eb:f8:fd:2d:e6:
                    cf:18:49:fa:7f:2e:1b:74:23:74:37:44:a7:61:77:
                    55:91:7a:1c:41:f1:df:61:c1:1d:47:9f:21:18:6f:
                    ca:77:44:06:8f:0e:89:d2:67:12:e8:d0:b2:b2:62:
                    8f:49:21:65:cc:64:3f:8c:1f:79:f0:6f:8b:dd:94:
                    63:e2:d9:04:bc:42:fb:5a:38:c6:dd:33:00:b9:30:
                    07:15:70:5f:4a:0a:a8:d9:a6:dc:a5:98:5e:32:d1:
                    45:3a:96:e9:2e:d0:63:af:66:ca:3e:83:d0:53:86:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:09:73:12:7E:8D:45:EB:CE:C8:F7:DE:B6:1F:DB:F6:1C:D5:E2:AB
            X509v3 Authority Key Identifier:
                keyid:57:25:4D:9F:7D:63:EB:42:11:84:C5:8D:02:E0:41:97:05:9A:6A:0E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VyVNn31j60IRhMWNAuBBlwWaag4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:58:46:51:65:3b:d9:88:a6:b9:7a:18:e4:33:c3:50:63:59:
         d9:df:bb:4b:70:59:66:33:5d:6e:c1:22:79:72:1d:72:59:da:
         92:3c:05:fe:d2:ce:ee:a0:3b:d0:5c:b2:09:fe:45:f2:27:50:
         4a:bb:ac:32:37:11:82:fc:f0:72:96:5c:95:49:64:30:44:64:
         ea:ce:41:c0:b4:f0:cc:c2:7d:f2:70:0d:d0:8a:6e:9d:0a:08:
         85:1f:0d:a0:c4:99:d3:a2:05:51:f4:bd:2a:e0:e1:ab:4c:a4:
         96:8d:5c:fd:f3:59:87:e9:71:c2:cf:ca:f8:e2:21:c7:72:dd:
         38:df:fd:ca:26:b0:14:b9:db:00:aa:ef:a7:8b:49:6d:3a:85:
         0d:3d:32:11:d8:8c:fe:87:05:08:f0:35:69:5d:c9:50:86:db:
         d8:31:6d:4b:d2:41:22:a1:53:45:11:ac:30:7c:5e:60:7b:99:
         6e:50:b9:f9:f1:19:fc:75:13:1a:24:8f:1d:7d:d0:9c:d0:2f:
         c3:db:2b:d7:54:68:ec:73:13:b4:03:68:ea:52:41:e3:82:d4:
         93:4d:67:fe:bc:c9:83:ca:84:21:e9:70:4b:9e:da:a9:5a:d6:
         fb:d2:4f:65:ec:ee:04:b9:57:4a:5b:e7:65:a8:ef:6c:95:c5:
         e0:07:c7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:45 2025 by rpki-client on console.sobornost.net