Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/333/94vx0ILraGpYQf5xsAL3zXu4b3U.mft
File:                     94vx0ILraGpYQf5xsAL3zXu4b3U.mft (raw, json)
Hash identifier:          sISSk/0D2qrAzA/DONLl99CF7aHiCR8GWbgmAye/KK8=
Subject key identifier:   3B:98:71:91:E7:BF:5E:43:2C:38:2D:9B:7C:EF:18:2E:3F:46:87:AF
Authority key identifier: F7:8B:F1:D0:82:EB:68:6A:58:41:FE:71:B0:02:F7:CD:7B:B8:6F:75
Certificate issuer:       /CN=F78BF1D082EB686A5841FE71B002F7CD7BB86F75
Certificate serial:       395C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/94vx0ILraGpYQf5xsAL3zXu4b3U.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/333/94vx0ILraGpYQf5xsAL3zXu4b3U.mft
Manifest number:          395C
Signing time:             Mon 28 Apr 2025 19:41:35 +0000
Manifest this update:     Mon 28 Apr 2025 19:41:35 +0000
Manifest next update:     Tue 29 Apr 2025 01:41:35 +0000
Files and hashes:         1: 94vx0ILraGpYQf5xsAL3zXu4b3U.crl (hash: 7egajiPNLQSZbsJ9GfbFF1XY+VXLrvBdtI26/b8nISI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14684 (0x395c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78BF1D082EB686A5841FE71B002F7CD7BB86F75
        Validity
            Not Before: Apr 28 19:41:35 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=3B987191E7BF5E432C382D9B7CEF182E3F4687AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d6:97:1c:6f:47:43:47:d0:0f:a8:77:a2:c1:
                    6c:a5:3c:fd:e2:df:d5:ae:46:46:04:a7:ff:5e:a3:
                    2f:78:61:66:e6:fb:28:75:ab:70:0f:a9:32:b8:e1:
                    bc:d8:7f:17:32:a0:19:97:f8:7a:f6:01:c1:3e:31:
                    4e:55:ec:d7:a3:00:b1:bd:cf:1a:3b:6c:9d:9c:36:
                    28:d3:34:e6:ae:f5:de:46:44:a0:f2:51:3e:c8:cc:
                    db:89:a0:a0:ab:cd:00:ff:96:24:e9:41:d1:08:72:
                    9a:6d:d3:9f:96:ee:7d:0c:ad:08:37:5d:10:df:cc:
                    36:77:46:4f:13:70:cb:04:ee:97:26:05:4c:17:80:
                    1d:1f:f0:53:9a:16:0d:a0:07:30:a3:a6:84:2f:51:
                    e2:ff:79:3e:9f:44:46:4c:1a:53:d2:0e:d8:cf:65:
                    fc:a4:64:f6:be:d2:b3:5c:23:18:66:78:98:e2:12:
                    78:d8:89:c4:1c:08:bb:6f:81:e4:71:c3:92:84:fa:
                    0d:97:1b:56:32:67:ec:bc:8d:12:fc:4f:2a:61:b5:
                    e4:fa:2f:0e:14:83:82:ae:fa:fb:9f:7a:b7:32:e8:
                    6a:26:56:54:27:d2:31:81:3f:e3:de:ef:49:5a:37:
                    dc:b0:4a:06:8b:cb:93:a4:ce:97:2e:45:3a:d0:6c:
                    c7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:98:71:91:E7:BF:5E:43:2C:38:2D:9B:7C:EF:18:2E:3F:46:87:AF
            X509v3 Authority Key Identifier:
                keyid:F7:8B:F1:D0:82:EB:68:6A:58:41:FE:71:B0:02:F7:CD:7B:B8:6F:75

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/333/94vx0ILraGpYQf5xsAL3zXu4b3U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/94vx0ILraGpYQf5xsAL3zXu4b3U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/333/94vx0ILraGpYQf5xsAL3zXu4b3U.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:53:14:b0:ac:81:7a:71:b6:6a:0b:0a:17:be:7b:41:69:91:
         0e:40:99:51:6d:d1:32:b9:80:1d:51:8a:3b:40:6d:69:fc:f5:
         46:8c:6c:ea:96:8e:82:88:a0:83:81:31:96:ed:c0:0d:7a:67:
         17:12:0d:9e:bd:54:28:ab:20:9a:06:ac:d2:12:a0:15:b4:58:
         73:44:c0:14:2f:ed:61:a1:c7:38:8b:41:26:f5:57:d7:75:c4:
         36:ab:50:99:ab:7d:c0:00:90:25:19:38:b7:92:e9:d8:57:e7:
         aa:b4:fa:ef:1e:4e:f1:6a:13:42:68:52:36:8a:72:c0:5e:24:
         c6:1e:6d:f4:ed:69:d6:5f:00:90:9a:e2:e0:29:2d:b1:23:16:
         8c:a1:36:06:7a:df:02:19:a3:cc:d5:74:f7:9f:d3:d8:dd:46:
         ad:f0:80:5a:e5:d1:28:5d:99:fe:af:50:8c:c3:a2:16:d8:cd:
         48:a5:a6:7e:e8:63:8c:74:a6:8b:c5:f1:3e:44:2e:99:bc:dc:
         3a:38:93:80:3d:7e:9d:4c:f5:ca:77:ab:52:7a:65:c7:95:41:
         41:7e:67:54:cc:dc:e4:07:28:df:b1:73:db:c0:a0:31:df:19:
         44:17:db:3b:c6:74:9b:17:7d:c3:73:b8:c1:72:d2:42:09:7d:
         d2:1d:19:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:46 2025 by rpki-client on console.sobornost.net