Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3278/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.mft
File:                     jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.mft (raw, json)
Hash identifier:          5C3NumrJ4mX3eruTtxKh1e4v9Q/tBmMFV4oWz6GvSuU=
Subject key identifier:   E1:D2:AD:90:37:E3:82:20:CA:32:55:C1:4D:B0:5A:6D:FC:A7:11:B1
Authority key identifier: 8D:18:CF:78:15:82:3E:9F:99:02:81:7D:0E:72:7D:AB:C5:54:48:CB
Certificate issuer:       /CN=8D18CF7815823E9F9902817D0E727DABC55448CB
Certificate serial:       0721
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.mft
Manifest number:          0721
Signing time:             Mon 28 Apr 2025 19:38:13 +0000
Manifest this update:     Mon 28 Apr 2025 19:38:13 +0000
Manifest next update:     Tue 29 Apr 2025 01:38:13 +0000
Files and hashes:         1: jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.crl (hash: 8aMgqTLfEnHWYKQNqnwi8jIpjdcJRfmu3iwfEp/WlXk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1825 (0x721)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D18CF7815823E9F9902817D0E727DABC55448CB
        Validity
            Not Before: Apr 28 19:38:13 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=E1D2AD9037E38220CA3255C14DB05A6DFCA711B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:67:9c:40:2b:90:b4:00:aa:ec:6b:35:6e:32:
                    f8:54:29:59:e1:ae:b9:25:2a:b5:75:8a:3d:e9:37:
                    04:5f:5b:1f:44:ce:1a:08:5e:df:94:ac:be:95:6e:
                    52:0c:e5:be:0c:fd:1a:14:d5:6a:3a:44:de:c2:f7:
                    cb:bb:7d:b8:c1:77:05:bf:41:eb:05:56:90:06:72:
                    de:12:aa:0c:3b:69:19:86:cc:4b:ec:b5:a2:7a:7b:
                    07:ac:43:3f:a0:fb:99:ee:5d:ce:15:06:63:31:d5:
                    8f:f5:e2:f8:a4:28:90:95:5e:68:45:a5:7d:09:21:
                    ee:ab:75:76:37:f0:81:3a:c9:c9:ea:91:26:6d:a1:
                    6b:bb:ab:10:8f:20:7f:dc:db:0a:36:f6:4d:25:b9:
                    39:3d:fb:18:2b:93:e6:3e:eb:d4:4c:be:c0:47:8c:
                    09:74:fa:a4:3c:a7:d1:60:80:cc:08:b8:e0:de:e3:
                    1c:34:29:4a:b2:f7:12:9b:23:55:14:58:30:fc:af:
                    ed:ff:06:21:06:f4:91:bc:78:6c:4e:44:0b:75:f4:
                    73:b1:47:1d:42:4f:d1:7b:37:a5:5c:42:47:d7:51:
                    b0:d7:7f:19:45:39:46:28:4b:07:5e:13:b6:66:25:
                    97:e6:83:24:1a:46:45:4c:cf:44:47:7b:66:53:1f:
                    bb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D2:AD:90:37:E3:82:20:CA:32:55:C1:4D:B0:5A:6D:FC:A7:11:B1
            X509v3 Authority Key Identifier:
                keyid:8D:18:CF:78:15:82:3E:9F:99:02:81:7D:0E:72:7D:AB:C5:54:48:CB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:47:c4:f1:41:5c:29:35:5e:1b:4d:37:02:29:88:16:39:73:
         0d:39:91:08:24:4f:7a:e5:fa:4e:73:47:a1:e5:b8:14:9d:db:
         df:a3:00:fb:20:d5:cb:27:97:cc:df:a0:3d:60:e0:48:a3:63:
         60:cd:a5:06:71:05:dc:5b:bd:04:d3:70:20:25:3d:c9:23:60:
         88:ad:d5:05:92:d0:cb:fd:94:fa:19:ae:0d:8e:50:3a:7b:a3:
         57:6d:68:07:db:27:78:66:f2:1a:68:9d:b3:4b:c5:c7:a1:43:
         0f:4c:77:db:a1:02:02:0c:2b:25:b4:d3:01:e0:a7:e0:9e:ef:
         6d:c9:ce:68:4a:b8:7f:0d:6e:57:a5:bf:8c:0c:a3:b8:38:96:
         86:f7:61:1b:cc:69:50:6f:35:58:92:a2:9c:a7:54:1b:7c:55:
         ba:cb:69:95:96:ff:5a:23:be:b3:59:03:21:14:fe:12:d1:08:
         36:35:ab:c1:23:72:27:c6:93:b5:93:fd:b0:ff:c7:a6:fd:a9:
         ed:be:d6:5f:25:d3:d2:56:88:df:55:49:64:df:66:c7:b6:35:
         86:47:dc:26:6c:52:05:13:ef:ea:df:ac:8b:0c:fa:5f:3a:c9:
         4a:e6:ec:1a:c4:1b:e6:96:73:a1:fd:75:26:8b:fd:45:99:eb:
         77:58:23:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:45 2025 by rpki-client on console.sobornost.net