Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft
File:                     U8kE5DbkCUsscVNNs_Vzviozvjk.mft (raw, json)
Hash identifier:          tO6Prnbno/hSqua3IzN/3/400J+TLElvcv3bsCUYRxY=
Subject key identifier:   CC:48:57:86:D4:AD:BC:DB:FD:16:72:90:5D:D4:3C:F8:45:F2:44:40
Authority key identifier: 53:C9:04:E4:36:E4:09:4B:2C:71:53:4D:B3:F5:73:BE:2A:33:BE:39
Certificate issuer:       /CN=53C904E436E4094B2C71534DB3F573BE2A33BE39
Certificate serial:       0721
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U8kE5DbkCUsscVNNs_Vzviozvjk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft
Manifest number:          0721
Signing time:             Mon 28 Apr 2025 19:38:13 +0000
Manifest this update:     Mon 28 Apr 2025 19:38:13 +0000
Manifest next update:     Tue 29 Apr 2025 01:38:13 +0000
Files and hashes:         1: U8kE5DbkCUsscVNNs_Vzviozvjk.crl (hash: 9Edg0egw+iHFi89L6e18zUT068IufnENONbQ3rK48HI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1825 (0x721)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53C904E436E4094B2C71534DB3F573BE2A33BE39
        Validity
            Not Before: Apr 28 19:38:13 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=CC485786D4ADBCDBFD1672905DD43CF845F24440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:58:66:c3:97:42:5c:cf:b5:79:44:d3:e4:
                    72:f0:d7:db:1b:f8:1b:67:1c:16:1b:5f:8c:e6:2e:
                    5f:ba:fc:6a:2a:74:3c:8a:c5:54:cd:c8:6a:08:3d:
                    16:e0:6d:dd:d0:6c:66:0f:60:b6:dc:f1:47:69:c0:
                    6e:15:28:f5:76:ee:8c:43:00:fd:97:f9:8b:a1:ce:
                    e6:06:8d:cc:23:7f:f2:4c:33:0a:92:ec:57:52:5f:
                    f0:51:ea:3b:4c:bb:9e:fb:27:0a:47:1e:91:31:df:
                    9f:e4:6e:a8:58:6b:ef:9c:7d:cb:71:ea:4e:5b:e4:
                    aa:e2:7f:5f:da:d5:f6:64:71:80:44:b5:30:ef:2b:
                    9e:5b:bd:37:4b:5e:88:a7:91:98:f7:d5:a0:37:ef:
                    42:da:ca:cd:0d:2c:01:7c:9e:93:3b:e0:ab:27:de:
                    14:76:f2:bc:67:62:5b:12:a2:c7:d4:d4:26:b6:dc:
                    bf:64:c8:0a:c3:14:07:39:82:fb:45:5b:9b:8b:d6:
                    b3:9a:22:e2:03:d2:3c:19:19:70:1a:3e:7c:4a:12:
                    56:a1:0e:b9:53:5a:98:6c:eb:43:3a:c3:ef:b0:34:
                    22:84:aa:47:6f:a4:0b:18:53:15:a7:73:a3:17:57:
                    d3:79:45:b7:28:98:6f:6e:cf:3f:86:bd:e7:39:f0:
                    e6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:48:57:86:D4:AD:BC:DB:FD:16:72:90:5D:D4:3C:F8:45:F2:44:40
            X509v3 Authority Key Identifier:
                keyid:53:C9:04:E4:36:E4:09:4B:2C:71:53:4D:B3:F5:73:BE:2A:33:BE:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U8kE5DbkCUsscVNNs_Vzviozvjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:a2:18:17:33:04:4c:77:30:33:02:da:a6:c0:a2:5a:a9:81:
         44:ac:37:98:fa:f9:33:41:29:29:0c:8e:45:36:00:35:ba:d9:
         19:98:d2:0d:ff:4d:83:c9:0d:a7:55:6b:3a:ac:a1:ce:85:2e:
         80:5d:8c:48:16:63:d4:38:d1:08:c8:55:58:9d:5e:0a:54:f6:
         80:38:de:4c:97:a7:80:0c:ee:1a:32:76:3e:1f:3f:83:c5:1a:
         fb:fb:49:79:5a:06:c0:64:6e:98:85:bf:da:80:31:d4:2a:02:
         48:37:5e:2c:b7:7f:7e:e7:11:62:5f:c1:2e:b5:9d:ff:89:0b:
         d0:f5:48:d0:30:00:b4:6c:a7:c1:8e:76:1c:6a:0e:2e:ea:06:
         92:b3:7f:71:2c:6f:32:bc:cc:78:61:0a:6a:60:6a:71:1f:c6:
         92:ca:ed:bf:0e:0a:55:dd:d3:94:b3:4d:f2:2c:de:e9:dd:fb:
         78:28:79:ae:cd:3f:4f:bf:b4:17:45:64:2b:03:8a:54:e4:55:
         99:3f:96:f7:f0:29:3c:dd:aa:b6:f9:25:54:02:bb:94:0b:09:
         1d:d3:a5:66:74:ab:13:f5:5d:39:2a:09:3f:18:e2:c2:ae:c6:
         7d:be:59:15:a4:78:4a:8c:52:84:b4:d5:2d:20:0f:c9:4f:8e:
         16:11:39:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:45 2025 by rpki-client on console.sobornost.net