Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft
File:                     ZpmXJxYiITikWjnrC_qoFJaDQK4.mft (raw, json)
Hash identifier:          ao3rCHFfLKvHUTWfZaxmhVBRYj8R7lOX7IM+ShrITUk=
Subject key identifier:   67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1
Authority key identifier: 66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE
Certificate issuer:       /CN=6699972716222138A45A39EB0BFAA814968340AE
Certificate serial:       04E4
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft
Manifest number:          04E4
Signing time:             Mon 28 Apr 2025 19:36:43 +0000
Manifest this update:     Mon 28 Apr 2025 19:36:43 +0000
Manifest next update:     Tue 29 Apr 2025 01:36:43 +0000
Files and hashes:         1: ZpmXJxYiITikWjnrC_qoFJaDQK4.crl (hash: nzLBxfeQ+c4iNf80/5IotHK6TCXSDCFeCp7f5lRIMjY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1252 (0x4e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6699972716222138A45A39EB0BFAA814968340AE
        Validity
            Not Before: Apr 28 19:36:43 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=67114EE963B683F8CC94FE97BBEACE592E4020C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:43:4d:a1:bd:23:f1:5f:1f:47:b6:95:7b:04:
                    90:3c:3e:af:9e:a5:ab:24:d8:cb:8c:01:86:f3:c1:
                    27:ae:28:97:17:16:92:d2:ea:38:dd:11:28:19:d3:
                    a4:c2:43:b3:82:28:ad:ae:9f:0e:de:1d:81:9b:32:
                    04:87:a9:26:6f:5c:19:a8:fa:15:c7:a6:7a:3e:e9:
                    2d:c7:56:5f:e2:66:fa:a2:a3:ee:68:e2:f7:a9:7e:
                    af:3a:f3:b3:81:54:90:a4:30:64:5b:e5:23:61:4f:
                    45:cb:15:b3:e3:85:56:e8:ee:87:1a:9e:11:5f:a5:
                    8c:5f:0e:ab:9f:2d:a8:a1:57:3d:9f:99:fe:ef:53:
                    48:9d:58:bd:11:4f:7e:f1:d0:f8:3a:9b:e4:c6:ca:
                    0d:d7:d5:d3:46:10:de:0d:1b:2e:3f:3e:c2:57:f8:
                    5d:cc:56:b9:df:08:43:e0:f3:16:03:16:cf:8b:2b:
                    19:3e:ef:ef:24:59:dc:bc:79:2d:56:0d:fe:9d:03:
                    2e:47:2f:ea:37:5c:d2:39:df:95:7f:9e:13:63:93:
                    68:ff:64:78:c2:67:57:27:86:89:88:c2:eb:c7:55:
                    a2:72:78:a4:35:9c:a4:af:44:35:fd:e1:9e:b2:61:
                    ea:41:74:08:28:9b:62:62:2c:49:fa:14:20:dd:f7:
                    50:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1
            X509v3 Authority Key Identifier:
                keyid:66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:45:79:9f:c3:46:b6:15:5a:2b:4c:c7:d9:50:51:c3:17:9d:
         04:65:f9:a2:be:a1:35:94:17:c5:ce:a1:d7:79:40:ab:24:ed:
         54:b6:2d:df:c4:01:f9:93:4c:35:9e:2e:30:2b:3f:5c:b5:e5:
         70:a8:14:ba:56:3d:59:93:8c:1b:18:be:b8:83:4c:3f:58:b3:
         ba:b4:c3:47:19:f9:c0:b5:bf:90:8b:21:37:e3:68:66:70:0b:
         f7:26:f2:a9:7c:f8:a5:58:86:d7:60:39:7b:aa:9d:88:a2:1d:
         54:fb:fc:fb:36:8a:ef:59:96:75:d8:ec:48:03:a0:44:47:a3:
         24:f8:a7:ef:0b:4a:ed:b2:2f:6e:7a:3d:bc:9e:fc:24:9c:15:
         22:27:ac:d8:3e:03:a7:d8:dc:9f:00:36:da:4e:52:e6:a6:25:
         2d:d4:28:20:59:35:5a:d9:66:6a:cb:c7:1f:fb:d9:f6:7d:17:
         d0:dc:e4:19:be:f7:b0:d1:ae:1a:ba:e5:be:a8:ff:c6:50:84:
         8f:99:93:7b:20:35:8a:a4:dd:2f:ed:ea:7b:a1:f7:07:1c:fc:
         d5:b7:92:f3:2f:db:e9:36:bd:a7:cb:c1:3a:69:32:8e:f7:04:
         69:1e:49:19:86:14:7a:23:7f:7d:43:62:bd:79:d5:83:97:f9:
         57:fa:09:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:46 2025 by rpki-client on console.sobornost.net