Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.mft
File:                     dLHNkLnEHIANH1u3AQiWQC4auU4.mft (raw, json)
Hash identifier:          UHrnT2uuEELLl7z6PC2Jg6zO6OAsWTJ1SsgaY5ULFpw=
Subject key identifier:   B0:54:D2:70:E7:FB:43:E0:C7:77:B3:3D:79:CA:A9:F9:0E:52:26:B0
Authority key identifier: 74:B1:CD:90:B9:C4:1C:80:0D:1F:5B:B7:01:08:96:40:2E:1A:B9:4E
Certificate issuer:       /CN=74B1CD90B9C41C800D1F5BB7010896402E1AB94E
Certificate serial:       02D6
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dLHNkLnEHIANH1u3AQiWQC4auU4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.mft
Manifest number:          02D6
Signing time:             Mon 28 Apr 2025 19:39:26 +0000
Manifest this update:     Mon 28 Apr 2025 19:39:26 +0000
Manifest next update:     Tue 29 Apr 2025 01:39:26 +0000
Files and hashes:         1: dLHNkLnEHIANH1u3AQiWQC4auU4.crl (hash: YkWoB+Eggv8Ke5SiC37PqaC17fNX5A+WiCuN6ETO0gk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 726 (0x2d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74B1CD90B9C41C800D1F5BB7010896402E1AB94E
        Validity
            Not Before: Apr 28 19:39:26 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=B054D270E7FB43E0C777B33D79CAA9F90E5226B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:83:0f:2d:e4:fc:fd:40:e6:c9:69:06:2c:d0:
                    63:f2:39:94:44:ab:77:3a:54:18:e1:c0:8b:d4:20:
                    b5:d0:43:40:59:34:7a:aa:f6:39:9f:1e:33:db:12:
                    ee:50:c0:ca:13:fc:45:b1:1d:b7:34:16:6d:80:c6:
                    5d:34:23:6d:aa:00:3b:ec:a7:1a:3c:5c:ac:75:3b:
                    a9:01:17:f5:1f:18:2e:25:84:b9:d7:6b:4e:9c:10:
                    87:af:01:0b:e7:59:73:8c:28:a9:50:67:22:9a:cd:
                    72:96:01:0c:11:76:26:c0:92:aa:9b:34:5d:30:1e:
                    39:13:38:e1:1c:c6:1c:6e:11:34:f4:ad:4a:e1:13:
                    04:5e:12:53:7d:59:9c:7f:06:60:84:25:be:29:49:
                    ae:e5:d2:fe:0c:5d:57:0b:7a:ed:33:47:1c:a8:ce:
                    ef:03:5a:09:66:d1:a3:61:45:fa:d1:16:80:84:6d:
                    04:bf:e8:8f:a1:7a:70:d2:a9:96:dc:48:df:2b:b5:
                    04:a6:94:f3:4f:30:bb:68:5c:f0:06:6b:8b:88:4f:
                    60:80:e3:8a:b7:ee:8e:d7:88:58:0a:65:12:73:ae:
                    a1:65:8b:b6:03:f7:c9:08:1c:e7:93:51:38:98:0c:
                    1d:ef:03:ac:63:26:e3:fd:e3:36:8e:25:6d:83:1f:
                    50:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:54:D2:70:E7:FB:43:E0:C7:77:B3:3D:79:CA:A9:F9:0E:52:26:B0
            X509v3 Authority Key Identifier:
                keyid:74:B1:CD:90:B9:C4:1C:80:0D:1F:5B:B7:01:08:96:40:2E:1A:B9:4E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dLHNkLnEHIANH1u3AQiWQC4auU4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:2c:5c:ec:8a:e8:89:dc:e6:e5:ef:05:cb:83:b7:a4:7f:da:
         63:22:d3:6f:3a:2c:d7:39:ea:3e:45:8f:3d:4c:ce:24:4f:c3:
         14:91:7b:29:72:98:5d:e6:58:dc:42:cb:8a:36:75:78:21:3f:
         4e:45:48:2e:e0:d0:66:aa:37:37:12:56:36:67:23:ab:50:35:
         86:f8:55:30:e8:d8:d4:51:04:f8:42:8d:08:81:1a:01:3e:7f:
         85:8c:e0:5d:6f:b1:ef:10:5b:19:e2:9e:92:aa:9d:76:24:67:
         45:fe:e2:d0:f6:0b:d7:a7:e3:48:c3:46:3d:9b:d0:ea:29:cc:
         ad:88:45:fc:8d:22:e9:f4:d4:93:92:a4:bd:69:c7:28:2d:fb:
         db:78:53:ba:f8:a0:47:5d:9f:fa:1d:9b:df:04:eb:c3:2e:b1:
         70:a7:ef:2f:ef:99:f3:96:e2:14:31:fd:a6:9a:2c:6c:c4:14:
         b9:b3:ae:a2:e6:2f:63:1f:5b:eb:8f:88:1f:a0:ea:24:06:2d:
         90:c5:29:a4:3d:76:19:8d:f3:2e:02:5a:80:55:24:03:8a:83:
         c8:6d:0f:b4:f9:45:70:34:12:94:d7:19:8b:ca:c8:5c:fc:e2:
         c5:8f:41:71:f9:a7:95:8a:5e:20:a4:92:7c:21:fc:e2:46:85:
         51:8c:ab:33
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICAtYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzRC
MUNEOTBCOUM0MUM4MDBEMUY1QkI3MDEwODk2NDAyRTFBQjk0RTAeFw0yNTA0Mjgx
OTM5MjZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEIwNTREMjcwRTdGQjQz
RTBDNzc3QjMzRDc5Q0FBOUY5MEU1MjI2QjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1gw8t5Pz9QObJaQYs0GPyOZREq3c6VBjhwIvUILXQQ0BZNHqq
9jmfHjPbEu5QwMoT/EWxHbc0Fm2Axl00I22qADvspxo8XKx1O6kBF/UfGC4lhLnX
a06cEIevAQvnWXOMKKlQZyKazXKWAQwRdibAkqqbNF0wHjkTOOEcxhxuETT0rUrh
EwReElN9WZx/BmCEJb4pSa7l0v4MXVcLeu0zRxyozu8DWglm0aNhRfrRFoCEbQS/
6I+henDSqZbcSN8rtQSmlPNPMLtoXPAGa4uIT2CA44q37o7XiFgKZRJzrqFli7YD
98kIHOeTUTiYDB3vA6xjJuP94zaOJW2DH1AjAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUsFTScOf7Q+DHd7M9ecqp+Q5SJrAwHwYDVR0jBBgwFoAUdLHNkLnEHIANH1u3
AQiWQC4auU4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz
NS9kTEhOa0xuRUhJQU5IMXUzQVFpV1FDNGF1VTQuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2RMSE5rTG5FSElBTkgxdTNBUWlXUUM0YXVVNC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzUvZExITmtMbkVISUFO
SDF1M0FRaVdRQzRhdVU0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJssXOyK6Inc5uXvBcuDt6R/2mMi0286LNc56j5Fjz1MziRPwxSReylymF3m
WNxCy4o2dXghP05FSC7g0GaqNzcSVjZnI6tQNYb4VTDo2NRRBPhCjQiBGgE+f4WM
4F1vse8QWxninpKqnXYkZ0X+4tD2C9en40jDRj2b0OopzK2IRfyNIun01JOSpL1p
xygt+9t4U7r4oEddn/odm98E68MusXCn7y/vmfOW4hQx/aaaLGzEFLmzrqLmL2Mf
W+uPiB+g6iQGLZDFKaQ9dhmN8y4CWoBVJAOKg8htD7T5RXA0EpTXGYvKyFz84sWP
QXH5p5WKXiCkknwh/OJGhVGMqzM=
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:46 2025 by rpki-client on console.sobornost.net