Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft
File:                     fCewZFm5zh-8LzSJoPxnKF1942A.mft (raw, json)
Hash identifier:          s16CynWvl6S3/LSkvX+JO+G3pFbvzhWEn0Jk1SHvLJk=
Subject key identifier:   70:01:E5:87:1E:36:F7:31:E2:19:A4:80:CB:7C:61:AD:FD:6C:CD:6A
Authority key identifier: 7C:27:B0:64:59:B9:CE:1F:BC:2F:34:89:A0:FC:67:28:5D:7D:E3:60
Certificate issuer:       /CN=7C27B06459B9CE1FBC2F3489A0FC67285D7DE360
Certificate serial:       05EE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fCewZFm5zh-8LzSJoPxnKF1942A.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft
Manifest number:          05EE
Signing time:             Mon 28 Apr 2025 19:06:25 +0000
Manifest this update:     Mon 28 Apr 2025 19:06:25 +0000
Manifest next update:     Tue 29 Apr 2025 01:06:25 +0000
Files and hashes:         1: fCewZFm5zh-8LzSJoPxnKF1942A.crl (hash: rqp6VyaOrgtISYmvu/bHUfoh25RsKCja6J4kqnw5rA4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1518 (0x5ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C27B06459B9CE1FBC2F3489A0FC67285D7DE360
        Validity
            Not Before: Apr 28 19:06:25 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=7001E5871E36F731E219A480CB7C61ADFD6CCD6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:80:90:72:05:4e:a9:49:22:a5:80:29:93:b0:
                    a0:68:a4:6f:df:bc:f8:b7:18:cf:00:01:5d:6a:82:
                    16:ae:f1:d2:95:e9:79:77:92:df:fc:8f:a9:12:04:
                    91:60:3a:ae:f4:81:f0:ee:0d:7a:d7:48:ae:56:43:
                    6c:7b:d7:51:d2:cd:c3:33:43:40:31:37:67:18:9a:
                    17:d2:1b:e1:bc:6d:f4:29:08:8c:be:cc:52:60:96:
                    cc:7f:f4:a8:c0:cf:6a:8a:b6:b4:7d:b2:9f:4a:fe:
                    0d:53:1c:b8:e8:80:ee:62:62:04:b6:12:bf:89:af:
                    ec:3f:ea:0c:fb:a5:38:bf:af:ca:f3:b7:1a:8b:a3:
                    0c:67:1d:27:d8:9f:9f:3f:5a:4f:50:cd:db:4a:47:
                    d0:c6:a6:05:b4:95:e1:a9:5b:55:04:d6:a8:da:d5:
                    ab:9e:fd:71:ab:58:ad:8e:ee:29:13:d2:7d:1f:22:
                    61:78:9d:bf:d7:34:5a:0f:ef:31:8c:df:47:1d:eb:
                    d7:bc:4f:03:d9:18:3d:a4:bd:b4:66:a4:b8:33:f9:
                    da:79:4d:75:f4:d3:40:6e:6d:1a:26:f5:71:fc:8d:
                    7d:8e:26:ca:a8:bc:39:5a:40:1f:34:da:79:c1:61:
                    87:0d:8d:1f:f7:d3:f2:06:8b:4b:90:5a:c6:53:75:
                    1b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:01:E5:87:1E:36:F7:31:E2:19:A4:80:CB:7C:61:AD:FD:6C:CD:6A
            X509v3 Authority Key Identifier:
                keyid:7C:27:B0:64:59:B9:CE:1F:BC:2F:34:89:A0:FC:67:28:5D:7D:E3:60

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fCewZFm5zh-8LzSJoPxnKF1942A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:27:48:9e:2f:e0:f7:ad:8d:a7:b4:92:99:e4:b1:96:31:e3:
         81:21:dc:f6:8a:49:4a:65:12:a5:f4:9a:3f:e4:83:f7:20:71:
         f2:33:f3:72:a8:1a:24:8d:21:68:00:61:6e:3e:7a:91:4a:1b:
         f0:8b:ee:96:ca:12:7d:f1:c1:fa:9d:1a:ae:16:b0:6d:e5:c2:
         bc:38:55:5d:69:1d:9e:05:ed:9b:28:6e:6d:7b:da:d9:47:c7:
         d3:bb:54:11:73:02:43:cb:43:0c:77:49:f3:25:b6:9f:59:03:
         3e:35:3c:cf:c2:0c:b9:8e:aa:8f:11:34:23:5f:b1:cf:13:b3:
         85:b3:5a:33:a2:44:ec:9f:db:03:e7:60:ab:c8:d8:5e:2f:66:
         cd:fb:d5:19:59:ce:4f:c9:1b:a0:92:a5:78:6c:e4:62:c1:ff:
         c9:e0:7d:2f:af:5c:04:8a:b0:3f:e6:39:4f:c5:78:d6:da:fd:
         61:57:6e:b3:ec:04:66:bc:4b:50:fd:33:7b:ed:d2:ec:06:46:
         fe:52:28:51:6d:53:c1:bf:18:36:98:9e:c0:eb:da:b2:c4:95:
         a7:34:18:79:b9:47:bb:18:7f:aa:e9:84:7e:c3:c3:40:79:c3:
         75:0c:40:32:9b:28:63:39:17:d3:95:ac:cf:56:cd:44:a5:1d:
         8c:29:8e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:45 2025 by rpki-client on console.sobornost.net