Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
File:                     nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft (raw, json)
Hash identifier:          Lr/x31tski/ORtThuwUz15oXSzaAosvjWspbLHbgBCA=
Subject key identifier:   7A:57:21:AF:CD:60:A6:A8:A6:05:AF:B2:ED:2F:29:0C:DB:87:3B:07
Authority key identifier: 9C:03:80:B9:17:46:0C:50:70:37:F3:CA:7F:53:B4:2B:C2:B8:2D:E7
Certificate issuer:       /CN=9C0380B917460C507037F3CA7F53B42BC2B82DE7
Certificate serial:       04BE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nAOAuRdGDFBwN_PKf1O0K8K4Lec.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
Manifest number:          04BE
Signing time:             Mon 28 Apr 2025 19:41:15 +0000
Manifest this update:     Mon 28 Apr 2025 19:41:15 +0000
Manifest next update:     Tue 29 Apr 2025 01:41:15 +0000
Files and hashes:         1: nAOAuRdGDFBwN_PKf1O0K8K4Lec.crl (hash: GTJcIvR/qy9yHUHUcw8ya5g3fMrgQnoqcrLs4uFJCzw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1214 (0x4be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0380B917460C507037F3CA7F53B42BC2B82DE7
        Validity
            Not Before: Apr 28 19:41:15 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=7A5721AFCD60A6A8A605AFB2ED2F290CDB873B07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b1:d9:92:c7:fd:89:93:04:00:e3:6d:1f:f9:
                    8d:7a:54:07:e3:48:eb:59:16:8a:db:e3:6f:93:b3:
                    49:bf:1f:ed:1f:41:03:4e:ae:18:7b:1b:cc:7e:ee:
                    2f:28:96:5f:f4:27:03:d6:ed:14:5f:23:bf:70:17:
                    71:72:1e:a1:ff:74:9c:09:59:6a:b4:f3:d3:cb:de:
                    43:68:17:f0:c9:b7:b9:f2:3a:d9:1d:25:78:6a:19:
                    2a:71:0b:06:e7:82:88:f0:48:72:32:fb:fc:92:fe:
                    91:62:b9:15:ed:84:92:a0:28:f6:4d:b5:c6:0b:e5:
                    3d:c2:19:de:17:8d:73:2f:98:b8:3e:a6:1d:ea:a4:
                    20:df:82:f0:1b:3f:c1:20:51:fb:cd:ff:48:ec:1a:
                    5b:e1:82:14:dd:dd:f9:70:bd:b9:97:73:3a:93:36:
                    40:c4:d2:40:75:1a:e9:23:9a:22:7c:62:99:a9:e7:
                    3e:9d:f3:2d:e6:da:90:57:de:50:a2:cb:7d:1d:cf:
                    d5:fd:45:32:45:b3:e0:3e:5d:39:ba:06:12:4a:c9:
                    d3:2a:00:75:95:0c:ee:93:5f:c4:a3:3c:94:4c:a1:
                    94:11:fa:2a:4b:71:10:d6:fd:d4:a9:7e:12:be:f5:
                    7f:9b:92:ee:c8:81:9f:c4:2e:37:ef:c9:ce:9f:d9:
                    12:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:57:21:AF:CD:60:A6:A8:A6:05:AF:B2:ED:2F:29:0C:DB:87:3B:07
            X509v3 Authority Key Identifier:
                keyid:9C:03:80:B9:17:46:0C:50:70:37:F3:CA:7F:53:B4:2B:C2:B8:2D:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nAOAuRdGDFBwN_PKf1O0K8K4Lec.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:73:80:52:ce:ab:6d:50:9a:0d:ab:71:32:af:5d:0b:e1:7e:
         92:50:00:73:d5:06:10:89:18:85:0d:4c:e9:da:4f:25:6f:9d:
         5a:51:fd:fe:05:32:70:06:6f:cd:08:fe:b0:cd:24:0e:c2:fb:
         95:2c:02:12:f4:7c:a2:84:03:94:18:e3:14:6f:c2:65:9d:36:
         67:85:6c:7f:8f:de:87:df:a4:cf:3f:73:df:df:ce:20:76:b6:
         c6:54:15:40:6b:55:5f:c4:b0:7a:2a:4d:a3:8f:22:e5:aa:5e:
         55:1f:b8:bd:e2:21:0c:14:ad:1c:c8:9b:03:2d:9e:50:60:7a:
         0a:2a:55:c7:10:6f:d1:d9:ec:88:a3:fa:18:b6:c9:70:5c:58:
         9b:ef:26:05:e4:a2:75:34:f0:7e:08:5b:85:6b:3c:ff:ed:c1:
         18:61:e5:49:df:62:a2:8c:c1:f9:ac:29:a7:c5:59:2c:fa:93:
         3c:89:fc:6c:11:43:34:87:b2:13:2a:41:0d:48:4f:f5:0e:05:
         ec:b3:37:d9:c0:30:8d:03:13:cd:de:f5:cf:14:fd:7f:ef:b9:
         13:aa:b4:ee:30:7b:37:e7:77:6e:10:74:8b:5f:ea:35:91:aa:
         31:4f:da:03:96:8d:81:2a:14:60:16:6d:a8:08:6a:46:b8:0f:
         36:36:59:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:46 2025 by rpki-client on console.sobornost.net