Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft
File:                     fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft (raw, json)
Hash identifier:          kWojFtZGU7okpHI8g26Dleb391zXtu6Imf4BRmvp9CI=
Subject key identifier:   A9:C9:6D:2C:D7:FF:73:A2:4D:41:60:27:35:A7:3A:35:A0:69:50:09
Authority key identifier: 7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6
Certificate issuer:       /CN=7E403B9520B4246443D3EB87FF1ACC699E04DFB6
Certificate serial:       02F6
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft
Manifest number:          02F6
Signing time:             Mon 28 Apr 2025 19:41:41 +0000
Manifest this update:     Mon 28 Apr 2025 19:41:41 +0000
Manifest next update:     Tue 29 Apr 2025 01:41:41 +0000
Files and hashes:         1: fkA7lSC0JGRD0-uH_xrMaZ4E37Y.crl (hash: giEA71ZcO1JcFh8ssTWPAKzkP+IviOcWq1zPtYY0Vv4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 758 (0x2f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E403B9520B4246443D3EB87FF1ACC699E04DFB6
        Validity
            Not Before: Apr 28 19:41:41 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=A9C96D2CD7FF73A24D41602735A73A35A0695009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:27:d1:dd:7d:8d:3f:3f:cc:2b:5d:b7:4b:22:
                    98:52:25:29:58:7e:98:42:d4:70:0f:27:ed:8e:77:
                    8d:4d:36:96:c0:4c:60:f1:93:56:45:e4:12:33:e0:
                    a3:45:1e:21:a4:f3:aa:81:04:cd:e3:8f:da:1c:f1:
                    c6:5e:d0:38:98:b1:74:e9:2d:10:b0:f5:c4:25:2b:
                    8e:34:9f:77:dd:16:76:e5:54:7c:5b:84:a2:d1:5d:
                    28:5d:50:b6:46:2e:24:5c:63:6d:c2:e5:94:90:c9:
                    11:d1:61:fd:28:3f:f4:0d:cb:72:74:d2:80:ad:50:
                    de:ee:8e:e0:ba:f3:92:4d:be:ba:cd:c4:2a:0f:6c:
                    d8:0a:d3:b5:90:43:90:ff:d1:8b:6b:74:7f:cd:d1:
                    a0:ac:33:30:9b:96:5e:6b:3a:4d:8b:b8:8d:c7:2c:
                    e1:3e:2e:b5:5b:5e:35:48:08:eb:75:b9:24:7a:d3:
                    d7:89:70:b9:87:fd:9d:45:3e:95:ce:bf:a3:96:c5:
                    a0:31:c0:56:f9:76:ed:12:8f:dd:e9:54:26:cb:32:
                    bb:dd:ba:79:af:ac:58:61:a1:87:09:a3:87:86:f0:
                    47:3a:d6:49:c5:df:3a:4b:e3:96:ac:0b:22:8b:c6:
                    a8:fe:41:2d:02:7e:df:2a:b0:85:34:bf:21:47:f9:
                    53:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C9:6D:2C:D7:FF:73:A2:4D:41:60:27:35:A7:3A:35:A0:69:50:09
            X509v3 Authority Key Identifier:
                keyid:7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:55:5c:e5:fb:90:57:52:77:e6:69:f1:a9:36:bd:ef:72:68:
         f2:11:83:8a:f4:5e:56:ca:01:17:33:50:76:34:f2:28:4e:2a:
         2c:d9:36:45:a5:ed:3f:1e:86:b1:bb:6e:61:dc:c7:10:23:29:
         32:3a:0f:96:e9:a0:0e:00:f8:f9:89:4a:b2:5a:97:ab:71:b9:
         ce:c1:a0:a2:4e:ef:22:5f:89:15:66:15:4d:ea:be:c2:9f:c7:
         91:9b:d2:a6:31:ee:71:75:83:67:56:78:1a:32:6e:f6:a9:16:
         f1:8c:c3:f8:bb:c7:4c:45:09:3d:dc:fb:49:6b:8c:e8:e1:d4:
         9b:66:18:1f:55:ce:c8:5f:b4:8f:d4:ec:53:0f:1a:c1:99:24:
         d3:58:45:c8:48:3e:9b:b0:d5:79:22:e8:db:c0:28:12:11:75:
         97:cb:24:da:da:66:e6:a5:99:01:8d:fb:2b:0c:15:f8:51:91:
         77:e9:35:af:0c:bf:d0:43:a5:dc:d3:39:a1:14:5c:38:0f:a4:
         96:da:f1:6c:ce:cc:0a:fe:05:16:4f:5b:b1:3b:a9:51:9f:e0:
         5c:ac:71:37:bf:34:21:53:f2:ca:9a:f9:5b:f1:13:d3:b9:77:
         40:b4:3d:03:85:31:67:2d:78:0f:8c:30:3d:00:82:39:d7:33:
         55:e8:39:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:46 2025 by rpki-client on console.sobornost.net