Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.mft
File:                     43TDfhgAlB4aNVhdEMhLffz80nA.mft (raw, json)
Hash identifier:          or+a5Kh9Zml7cEi/oXFIjPI9+98q3BD56tAV9dPyNlA=
Subject key identifier:   11:52:0E:60:37:D0:A6:11:A8:27:11:98:00:48:10:55:01:88:24:E6
Authority key identifier: E3:74:C3:7E:18:00:94:1E:1A:35:58:5D:10:C8:4B:7D:FC:FC:D2:70
Certificate issuer:       /CN=E374C37E1800941E1A35585D10C84B7DFCFCD270
Certificate serial:       06B6
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/43TDfhgAlB4aNVhdEMhLffz80nA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.mft
Manifest number:          06B6
Signing time:             Mon 28 Apr 2025 19:39:03 +0000
Manifest this update:     Mon 28 Apr 2025 19:39:02 +0000
Manifest next update:     Tue 29 Apr 2025 01:39:02 +0000
Files and hashes:         1: 43TDfhgAlB4aNVhdEMhLffz80nA.crl (hash: Z1iQgb50t5cvj77HHE3te2/uf0yw4hEHN9x1GK839N4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1718 (0x6b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E374C37E1800941E1A35585D10C84B7DFCFCD270
        Validity
            Not Before: Apr 28 19:39:02 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=11520E6037D0A611A827119800481055018824E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b0:3c:14:d4:b4:c9:b8:5b:fc:8f:0f:f1:7e:
                    b7:3a:11:64:67:35:74:a7:b6:fa:2b:74:ad:96:63:
                    76:be:a2:ec:3a:10:f5:d4:d3:45:3d:6a:96:76:5d:
                    61:c6:3e:91:97:c9:5f:83:fa:ab:c0:ce:04:b6:f4:
                    4a:53:2a:72:12:28:13:c0:58:49:7e:82:7c:80:20:
                    22:6b:04:4e:ac:f6:31:cc:1b:e9:eb:0c:8a:65:b0:
                    60:1e:dd:f5:0f:a0:61:e0:9e:98:c8:1f:11:9b:2c:
                    62:18:5e:e4:4e:47:cc:53:a9:21:5e:b5:22:5d:a2:
                    84:29:fe:76:ae:f9:e2:de:a1:0f:5d:c5:09:0b:7f:
                    54:18:3b:c5:34:77:58:20:70:2f:61:43:0c:cd:e2:
                    bd:fb:c1:dc:9b:15:d4:06:15:af:bc:43:03:80:60:
                    87:e8:4b:aa:9c:c2:b9:e6:fb:26:0b:57:5e:c5:82:
                    03:bf:88:6f:dc:a9:77:f0:46:98:d3:ec:ed:d6:f2:
                    3c:38:4e:02:52:28:7e:23:71:79:f9:09:60:e9:70:
                    8f:c8:a4:96:81:9d:22:c3:5d:37:a1:b5:6c:42:53:
                    71:c8:0b:14:ba:1e:34:cf:60:8d:33:5e:38:77:ea:
                    e3:06:a5:a8:1f:36:19:61:89:e3:b1:de:3b:ec:54:
                    e2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:52:0E:60:37:D0:A6:11:A8:27:11:98:00:48:10:55:01:88:24:E6
            X509v3 Authority Key Identifier:
                keyid:E3:74:C3:7E:18:00:94:1E:1A:35:58:5D:10:C8:4B:7D:FC:FC:D2:70

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/43TDfhgAlB4aNVhdEMhLffz80nA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c3:61:22:fb:16:c5:34:d2:d4:07:73:54:6b:c3:92:bb:e4:
         01:f0:03:0e:81:d2:7b:30:3e:0a:d4:18:7f:a8:f6:f0:de:b1:
         37:ac:28:62:ac:f7:82:55:31:c4:f0:3f:2a:d4:be:58:24:c4:
         ee:ee:78:47:ff:5f:09:8a:3e:23:8e:2d:2d:53:79:b2:da:a5:
         d1:70:5e:5c:07:5f:33:01:b8:1a:5f:ee:97:05:95:19:39:55:
         0d:01:43:52:58:9a:12:2a:39:c3:6f:ab:3a:7a:6c:44:b1:f1:
         e8:d4:b5:3c:bb:40:98:03:16:d6:fb:da:80:62:a4:a4:b9:32:
         42:5b:a1:20:c1:a1:9f:ef:83:5c:b0:67:16:b0:3c:e1:07:ff:
         0a:de:b4:7c:b4:d6:80:d9:d4:21:59:3d:69:2b:bb:1a:a1:cb:
         02:21:79:99:70:2e:a2:2b:2e:9f:34:3b:da:5f:65:04:70:80:
         f1:88:df:a5:05:6d:ba:9c:d4:71:89:c7:70:59:bc:f9:83:43:
         ee:d9:90:42:bc:c0:f1:53:2f:82:e3:15:54:ac:c3:a2:ce:c0:
         92:ae:02:b2:19:a2:28:e5:d7:28:ec:4b:3f:c2:53:5e:9f:0f:
         98:25:db:44:40:b2:fe:05:05:c7:ec:71:7d:59:b5:f2:9a:57:
         84:9a:54:ee
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTM3
NEMzN0UxODAwOTQxRTFBMzU1ODVEMTBDODRCN0RGQ0ZDRDI3MDAeFw0yNTA0Mjgx
OTM5MDJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDExNTIwRTYwMzdEMEE2
MTFBODI3MTE5ODAwNDgxMDU1MDE4ODI0RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCesDwU1LTJuFv8jw/xfrc6EWRnNXSntvordK2WY3a+ouw6EPXU
00U9apZ2XWHGPpGXyV+D+qvAzgS29EpTKnISKBPAWEl+gnyAICJrBE6s9jHMG+nr
DIplsGAe3fUPoGHgnpjIHxGbLGIYXuROR8xTqSFetSJdooQp/nau+eLeoQ9dxQkL
f1QYO8U0d1ggcC9hQwzN4r37wdybFdQGFa+8QwOAYIfoS6qcwrnm+yYLV17FggO/
iG/cqXfwRpjT7O3W8jw4TgJSKH4jcXn5CWDpcI/IpJaBnSLDXTehtWxCU3HICxS6
HjTPYI0zXjh36uMGpagfNhlhieOx3jvsVOLzAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUEVIOYDfQphGoJxGYAEgQVQGIJOYwHwYDVR0jBBgwFoAU43TDfhgAlB4aNVhd
EMhLffz80nAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4
My80M1REZmhnQWxCNGFOVmhkRU1oTGZmejgwbkEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzQzVERmaGdBbEI0YU5WaGRFTWhMZmZ6ODBuQS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODMvNDNURGZoZ0FsQjRh
TlZoZEVNaExmZno4MG5BLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAK3DYSL7FsU00tQHc1Rrw5K75AHwAw6B0nswPgrUGH+o9vDesTesKGKs94JV
McTwPyrUvlgkxO7ueEf/XwmKPiOOLS1TebLapdFwXlwHXzMBuBpf7pcFlRk5VQ0B
Q1JYmhIqOcNvqzp6bESx8ejUtTy7QJgDFtb72oBipKS5MkJboSDBoZ/vg1ywZxaw
POEH/wretHy01oDZ1CFZPWkruxqhywIheZlwLqIrLp80O9pfZQRwgPGI36UFbbqc
1HGJx3BZvPmDQ+7ZkEK8wPFTL4LjFVSsw6LOwJKuArIZoijl1yjsSz/CU16fD5gl
20RAsv4FBcfscX1ZtfKaV4SaVO4=
-----END CERTIFICATE-----