Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft
File:                     hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft (raw, json)
Hash identifier:          iG+8X9Ufb8AEyl/4ySk3WacnRDPTgZDG9gs0XIX2qo4=
Subject key identifier:   BE:D9:25:DE:39:2A:E8:6E:11:81:56:16:4F:49:12:59:38:4C:5C:5A
Authority key identifier: 85:3C:52:D1:A8:41:42:13:79:81:B9:05:1E:92:4A:4B:32:91:5C:66
Certificate issuer:       /CN=853C52D1A84142137981B9051E924A4B32915C66
Certificate serial:       0362
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hTxS0ahBQhN5gbkFHpJKSzKRXGY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft
Manifest number:          0362
Signing time:             Mon 28 Apr 2025 19:39:17 +0000
Manifest this update:     Mon 28 Apr 2025 19:39:17 +0000
Manifest next update:     Tue 29 Apr 2025 01:39:17 +0000
Files and hashes:         1: hTxS0ahBQhN5gbkFHpJKSzKRXGY.crl (hash: QFqklTYd0EsbdtozifGusCFkCJ5Bft/Qb3mSSjaSxpc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866 (0x362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=853C52D1A84142137981B9051E924A4B32915C66
        Validity
            Not Before: Apr 28 19:39:17 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=BED925DE392AE86E118156164F491259384C5C5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f8:4c:3b:16:5a:51:15:14:ad:a8:2c:93:64:
                    4a:3e:6e:88:fd:04:ea:22:b3:8d:d4:6c:4f:43:7a:
                    f1:99:c4:0f:4a:c7:7b:77:ac:d9:1c:8b:8c:f6:86:
                    53:29:47:2e:39:30:3b:22:77:5d:ba:04:09:b2:bf:
                    42:58:53:1c:18:43:9f:d5:34:7e:4c:1b:e7:85:73:
                    51:fa:33:f3:d2:75:cf:39:5e:3f:13:3d:e9:0c:ce:
                    ed:33:af:4c:63:cd:2e:c7:08:2a:07:5a:6d:64:d5:
                    54:9f:d2:58:bd:99:a4:f1:b4:cb:b4:d8:e8:ad:ca:
                    61:f8:ca:ff:bc:6d:36:91:08:40:d3:b6:c9:b6:4d:
                    cd:e1:35:1b:7e:14:21:76:dc:db:58:ef:d0:48:9e:
                    bb:ff:25:19:05:6d:f5:32:fa:52:8b:3f:42:21:0a:
                    f7:05:84:f7:b5:5c:73:9b:3c:aa:8c:ab:1b:4e:98:
                    3f:32:db:28:18:b5:86:3b:63:cf:fb:fb:87:70:c4:
                    68:a1:86:c5:b7:9a:39:b8:92:d8:38:54:ef:15:29:
                    21:50:6d:bd:12:5e:70:65:e4:da:dd:66:3a:9e:76:
                    46:b8:8b:d7:58:c2:7a:9e:fd:da:72:a9:ac:27:aa:
                    4f:c9:be:4b:f6:42:64:e1:16:b9:d9:b8:11:ff:dd:
                    b0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D9:25:DE:39:2A:E8:6E:11:81:56:16:4F:49:12:59:38:4C:5C:5A
            X509v3 Authority Key Identifier:
                keyid:85:3C:52:D1:A8:41:42:13:79:81:B9:05:1E:92:4A:4B:32:91:5C:66

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hTxS0ahBQhN5gbkFHpJKSzKRXGY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b8:ad:dc:83:f5:f3:7b:b9:16:31:93:02:58:a2:82:e5:53:
         4f:ce:07:e0:b9:5f:49:20:e0:87:23:52:76:05:94:25:1a:5d:
         79:1a:f4:60:ef:2e:1b:6e:f9:0c:39:8f:5f:80:fb:03:5f:7f:
         a9:48:2e:62:42:4d:cb:fd:24:bc:f0:cf:16:ce:75:fb:a5:2f:
         40:2c:9b:7d:11:7f:80:29:03:9c:d8:58:4d:b9:7f:5d:b9:b4:
         9a:3e:9d:4b:80:e0:67:ca:36:96:03:aa:da:90:69:f9:29:c2:
         72:c1:54:f4:52:5d:cd:6d:29:ba:5a:61:59:48:a0:a1:1f:34:
         a6:be:64:d0:45:d5:2b:fc:da:d2:97:64:da:b1:c7:4a:aa:d9:
         66:a2:58:49:c6:0c:51:1f:d7:cc:d9:74:48:20:29:db:84:56:
         e3:88:65:9c:92:4b:7e:93:83:ac:24:ad:f8:1e:00:34:40:bc:
         99:ac:8e:43:2c:3f:5f:f7:c5:eb:d5:4a:b4:85:fb:08:02:df:
         a5:e3:89:8a:11:0d:bb:93:c3:fa:1d:a7:aa:f2:e8:66:b6:7d:
         96:28:99:91:b4:0a:c9:2e:86:ba:90:66:1d:a7:ab:ed:23:06:
         03:b2:b4:53:20:1a:9c:8d:06:2b:e4:5b:e7:38:32:12:89:8b:
         31:b5:40:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:46 2025 by rpki-client on console.sobornost.net