Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3345/th6ROM_rfYmrjPVCdu0ps9gI4Lw.mft
File:                     th6ROM_rfYmrjPVCdu0ps9gI4Lw.mft (raw, json)
Hash identifier:          /jMO1sTO7YLa/O4Cef20HU3ZA6gLKEGX9MlToIr6+wg=
Subject key identifier:   18:6E:78:B4:5B:3C:95:AF:28:F9:9F:C9:5D:6D:94:94:0A:37:55:1B
Authority key identifier: B6:1E:91:38:CF:EB:7D:89:AB:8C:F5:42:76:ED:29:B3:D8:08:E0:BC
Certificate issuer:       /CN=B61E9138CFEB7D89AB8CF54276ED29B3D808E0BC
Certificate serial:       0243
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/th6ROM_rfYmrjPVCdu0ps9gI4Lw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/th6ROM_rfYmrjPVCdu0ps9gI4Lw.mft
Manifest number:          0243
Signing time:             Mon 28 Apr 2025 19:40:34 +0000
Manifest this update:     Mon 28 Apr 2025 19:40:34 +0000
Manifest next update:     Tue 29 Apr 2025 01:40:34 +0000
Files and hashes:         1: th6ROM_rfYmrjPVCdu0ps9gI4Lw.crl (hash: tfW5QdgGBIMzek07rI9PYkJN5Php3qEENk66UanaW0c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61E9138CFEB7D89AB8CF54276ED29B3D808E0BC
        Validity
            Not Before: Apr 28 19:40:34 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=186E78B45B3C95AF28F99FC95D6D94940A37551B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:c6:9f:2c:76:70:3d:16:0a:60:0c:28:9d:
                    0b:6e:02:15:0e:70:04:d0:29:47:03:3c:0b:c3:d4:
                    2e:d2:75:0e:ae:c0:63:70:93:c2:34:17:5a:cc:ce:
                    15:f6:7a:c8:84:9a:ac:9e:6b:a3:69:2c:43:28:77:
                    d9:af:a0:84:40:eb:b2:39:05:b9:b8:ba:c6:a3:9d:
                    02:aa:02:c0:33:24:9c:05:b7:eb:04:7a:98:0e:0a:
                    f3:2d:a9:c4:59:52:36:21:d2:c0:39:47:e2:13:81:
                    57:60:4f:a8:7b:6c:4e:f8:26:f8:15:f8:aa:b1:21:
                    91:c7:63:e8:23:65:39:20:4e:1a:ff:13:66:69:bf:
                    f6:22:44:57:bf:17:8c:bd:e4:d1:51:45:63:7a:e3:
                    5c:cd:2f:bc:fa:33:3f:9b:12:3e:2c:80:d9:3d:64:
                    81:00:bc:71:04:f9:4c:3d:00:8f:dd:ee:5a:83:0a:
                    84:34:cd:b6:39:52:8e:bf:af:6a:c4:4a:86:24:17:
                    fd:b6:cf:8a:46:d6:c9:1e:12:b4:95:2e:54:a3:10:
                    33:fa:36:8e:c2:4a:a8:d5:ac:0e:ef:73:3f:d1:1c:
                    ed:44:b6:f5:80:fa:02:da:cf:06:f8:a4:cd:0f:3b:
                    b1:27:10:ec:52:61:b6:bc:94:7a:f8:00:32:6f:fd:
                    37:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6E:78:B4:5B:3C:95:AF:28:F9:9F:C9:5D:6D:94:94:0A:37:55:1B
            X509v3 Authority Key Identifier:
                keyid:B6:1E:91:38:CF:EB:7D:89:AB:8C:F5:42:76:ED:29:B3:D8:08:E0:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/th6ROM_rfYmrjPVCdu0ps9gI4Lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/th6ROM_rfYmrjPVCdu0ps9gI4Lw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/th6ROM_rfYmrjPVCdu0ps9gI4Lw.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:aa:fb:2d:fa:92:d2:f4:bf:44:76:6d:ab:32:1f:ce:7c:b9:
         09:09:ab:67:31:16:a3:ce:f6:1e:b0:cc:b5:8f:6d:25:c1:ab:
         ee:f5:de:ac:2c:82:14:13:32:53:2a:2a:e2:31:00:54:34:ea:
         5c:06:53:f0:94:d7:cb:e2:7a:31:85:55:d3:53:aa:1a:55:9d:
         c2:e1:dc:51:4e:d0:e0:06:f5:ee:41:3a:30:2e:91:08:ea:25:
         d0:dd:e7:58:d4:7d:c4:e2:fa:75:a1:ae:a1:8b:70:29:ca:6e:
         36:ea:b5:82:32:5a:39:6d:02:df:06:58:48:62:ae:21:7c:26:
         09:89:e7:63:6c:8d:ef:4d:37:17:49:dc:86:e5:da:f0:fe:01:
         a1:c4:68:a6:a8:20:94:d5:54:2d:5c:29:0d:bb:1d:cf:d6:31:
         83:3d:97:10:1c:27:46:fe:fd:3b:03:ae:91:6e:14:05:37:0d:
         5f:ee:e8:db:4e:4f:c4:67:07:9c:12:42:6d:9a:61:fd:d9:36:
         46:73:e6:d0:51:97:0d:ea:d3:9f:c1:3e:a5:c2:da:20:16:dc:
         75:f6:aa:e2:f1:6f:59:4c:43:05:4d:e6:1f:eb:f3:69:58:6c:
         6e:af:4e:77:f2:89:66:e1:26:a9:e9:26:4c:d5:73:83:4e:8e:
         de:89:75:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:47 2025 by rpki-client on console.sobornost.net