Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3291/5rA2up_FkYdletsFx2-HqmMpDDQ.mft
File:                     5rA2up_FkYdletsFx2-HqmMpDDQ.mft (raw, json)
Hash identifier:          EtL3QZZeSYqDSmHnGKgM2NZeK9xTgZoP466q9W6OtTc=
Subject key identifier:   F5:4D:C4:F2:48:EA:DE:EE:E0:17:4F:18:52:ED:51:C3:94:E7:B3:4E
Authority key identifier: E6:B0:36:BA:9F:C5:91:87:65:7A:DB:05:C7:6F:87:AA:63:29:0C:34
Certificate issuer:       /CN=E6B036BA9FC59187657ADB05C76F87AA63290C34
Certificate serial:       0632
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5rA2up_FkYdletsFx2-HqmMpDDQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/5rA2up_FkYdletsFx2-HqmMpDDQ.mft
Manifest number:          0632
Signing time:             Mon 28 Apr 2025 17:07:58 +0000
Manifest this update:     Mon 28 Apr 2025 17:07:58 +0000
Manifest next update:     Mon 28 Apr 2025 23:07:58 +0000
Files and hashes:         1: 5rA2up_FkYdletsFx2-HqmMpDDQ.crl (hash: P2ZWypE2mU8VesYj9LR0TG0zE5sLtDc3MKYTuBP6sRI=)

Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/5rA2up_FkYdletsFx2-HqmMpDDQ.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/5rA2up_FkYdletsFx2-HqmMpDDQ.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5rA2up_FkYdletsFx2-HqmMpDDQ.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1586 (0x632)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6B036BA9FC59187657ADB05C76F87AA63290C34
        Validity
            Not Before: Apr 28 17:07:58 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=F54DC4F248EADEEEE0174F1852ED51C394E7B34E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:99:2b:0d:f6:1c:08:bb:06:b9:b6:f2:37:f7:
                    73:d6:89:bd:d3:7e:37:8b:c2:22:bc:71:5d:ba:4d:
                    3f:47:df:f8:37:6c:95:96:9f:82:9f:09:f4:84:3c:
                    61:fc:8d:ca:a8:bd:4d:b5:41:d7:47:f0:15:c3:03:
                    65:62:44:cd:04:47:c8:ad:87:d1:df:1d:aa:29:14:
                    37:3a:a8:29:3d:eb:20:78:7e:26:a7:ce:d6:4c:55:
                    f1:7a:7c:4a:12:14:f0:d5:78:9d:d3:95:f5:1f:38:
                    3b:71:03:d8:de:93:a6:d5:71:20:dd:9a:fd:2e:81:
                    94:6f:03:18:65:b0:12:9a:ff:c0:17:c4:10:79:45:
                    d1:4d:5b:b6:be:dd:31:6f:64:bf:79:2b:8f:24:9b:
                    c4:99:1d:b2:0d:b4:66:67:85:cc:6f:10:82:ee:61:
                    92:40:52:9e:0f:b9:1a:a1:59:ff:91:8b:83:d7:81:
                    f1:f4:df:69:66:11:e3:a4:08:03:02:46:51:60:d4:
                    28:55:e4:d4:8d:35:42:50:9b:0c:11:6e:13:5c:c6:
                    68:ec:25:3f:6b:08:e7:44:d2:6f:6f:33:8b:bd:1a:
                    09:0a:d3:ef:01:1a:f6:82:df:1c:44:62:67:f5:f4:
                    46:fa:b4:da:70:8b:1d:56:38:b3:5b:d1:65:00:fc:
                    cd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4D:C4:F2:48:EA:DE:EE:E0:17:4F:18:52:ED:51:C3:94:E7:B3:4E
            X509v3 Authority Key Identifier:
                keyid:E6:B0:36:BA:9F:C5:91:87:65:7A:DB:05:C7:6F:87:AA:63:29:0C:34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/5rA2up_FkYdletsFx2-HqmMpDDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5rA2up_FkYdletsFx2-HqmMpDDQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/5rA2up_FkYdletsFx2-HqmMpDDQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f5:91:f2:9d:e6:b0:60:ee:7b:c9:2a:f5:41:87:1c:aa:40:
         7e:49:5e:ef:b9:7b:fa:2a:6a:d3:b2:b4:90:68:44:00:c7:63:
         92:47:de:86:ad:5a:33:50:6e:58:98:15:26:18:1d:f8:82:d9:
         91:d4:64:5e:c7:d1:19:ec:7d:a5:f4:9b:4c:be:52:03:35:54:
         a8:e6:2c:7c:24:b6:b1:4b:f5:e2:88:2e:96:74:99:cb:1f:72:
         83:32:3f:86:67:76:2b:96:05:e3:5d:a1:9c:85:08:c9:70:66:
         50:40:d0:bb:86:0c:aa:72:a7:27:7e:0c:1e:4b:d4:dd:f1:16:
         ae:08:6f:2f:59:77:28:dd:66:bb:05:e5:3e:90:6f:4a:03:3c:
         fd:23:95:ff:c8:1a:de:bc:f8:f2:ea:18:17:b2:e3:95:aa:03:
         e0:23:a4:ba:c7:d5:a7:01:29:0b:92:6e:8f:4f:05:ca:b7:0a:
         71:88:8c:d4:25:a1:10:9b:c2:b5:69:4f:25:00:66:f3:cb:c8:
         2b:a1:0a:8e:18:4a:6a:e5:ba:dd:2c:9d:b0:e6:48:ef:45:eb:
         27:e3:5a:22:a3:6a:30:29:c0:c1:f8:a4:24:a8:b5:9b:88:d6:
         07:c3:a3:bc:fa:e8:24:fc:2e:7a:15:e8:01:90:18:23:16:9d:
         79:b5:6d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:27 2025 by rpki-client on console.sobornost.net