Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3359/HwWzugodYaohD-kWdyisU5Im2BU.mft
File:                     HwWzugodYaohD-kWdyisU5Im2BU.mft (raw, json)
Hash identifier:          4cmT25hI9Pkr2UeYfuxzzlE/mUsiT/ErWRxx7lgvRbM=
Subject key identifier:   C0:21:52:71:82:90:4D:BC:D1:58:7C:6D:CF:51:D2:9A:8F:B1:60:BA
Authority key identifier: 1F:05:B3:BA:0A:1D:61:AA:21:0F:E9:16:77:28:AC:53:92:26:D8:15
Certificate issuer:       /CN=1F05B3BA0A1D61AA210FE9167728AC539226D815
Certificate serial:       66
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HwWzugodYaohD-kWdyisU5Im2BU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3359/HwWzugodYaohD-kWdyisU5Im2BU.mft
Manifest number:          66
Signing time:             Mon 28 Apr 2025 19:36:38 +0000
Manifest this update:     Mon 28 Apr 2025 19:36:38 +0000
Manifest next update:     Tue 29 Apr 2025 01:36:38 +0000
Files and hashes:         1: HwWzugodYaohD-kWdyisU5Im2BU.crl (hash: 2zDT4aE8GMB4GOR0+jP9sM7nPo+sg5+9lZqimG6gbWI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F05B3BA0A1D61AA210FE9167728AC539226D815
        Validity
            Not Before: Apr 28 19:36:38 2025 GMT
            Not After : Apr  9 08:30:36 2026 GMT
        Subject: CN=C021527182904DBCD1587C6DCF51D29A8FB160BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:92:e8:85:ef:db:d7:1d:e5:a5:4e:1e:e6:68:
                    ee:ef:b0:fd:64:e4:35:b5:1f:42:c1:8d:e6:27:fb:
                    81:7e:3c:0a:87:8a:e9:23:ef:75:9b:84:db:f1:4f:
                    f7:33:23:e5:c3:fa:c5:3a:40:87:16:ca:17:3b:58:
                    c2:96:55:13:94:93:6d:4a:87:e4:47:bb:a6:30:26:
                    18:5c:99:98:bb:83:50:29:da:7e:7c:38:cc:29:ac:
                    39:01:07:94:b5:43:be:06:92:06:04:cc:58:65:2a:
                    4f:52:6a:34:d6:28:b6:97:a3:f7:3f:b5:50:98:b2:
                    f6:ab:6f:b9:4b:26:e6:8e:3e:b6:0b:49:87:d4:f0:
                    fa:df:97:c8:ba:a9:52:bf:5b:04:c3:f4:d8:da:e2:
                    9c:8a:22:f4:f6:26:03:06:c6:89:2d:44:bf:4e:55:
                    2e:a2:79:f5:14:02:70:45:8a:c5:81:c0:7d:b3:43:
                    9b:be:02:7a:87:18:08:2e:5a:74:9d:ec:a0:54:92:
                    6a:1b:dd:4a:2c:d5:a7:c1:b6:c4:47:3c:d9:30:39:
                    b6:83:b2:2f:37:52:fa:a3:8f:88:65:b4:02:90:06:
                    07:78:b4:64:46:19:cd:2d:6a:b8:6f:58:bd:b9:d6:
                    68:8d:10:ad:80:ae:3e:18:73:c7:d5:50:9a:64:e7:
                    43:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:21:52:71:82:90:4D:BC:D1:58:7C:6D:CF:51:D2:9A:8F:B1:60:BA
            X509v3 Authority Key Identifier:
                keyid:1F:05:B3:BA:0A:1D:61:AA:21:0F:E9:16:77:28:AC:53:92:26:D8:15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3359/HwWzugodYaohD-kWdyisU5Im2BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HwWzugodYaohD-kWdyisU5Im2BU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3359/HwWzugodYaohD-kWdyisU5Im2BU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:06:34:39:bc:28:e6:f5:ed:a7:51:97:49:19:46:33:20:01:
         7b:4c:31:c9:4f:77:13:57:64:a6:d0:55:00:fb:50:a4:89:77:
         89:d4:2b:6f:13:2e:a1:62:2f:f1:ab:06:2d:54:d7:9d:13:e8:
         c9:48:2c:19:47:98:7c:fa:e0:e3:c5:68:2d:7b:2e:02:8b:28:
         24:5b:41:de:a5:bf:af:03:aa:bd:ed:98:fa:b6:2c:05:84:4c:
         1d:a5:08:a6:e8:0f:3e:b6:12:a8:db:5b:f0:26:5c:b6:0c:61:
         89:a7:84:2a:ef:f7:87:fe:8b:5f:fa:70:49:2c:7e:84:b1:ec:
         69:c5:55:f1:a1:52:99:03:2e:f7:4c:c7:3b:8c:b8:a6:46:52:
         73:2b:fc:60:88:7e:11:42:6c:e8:7f:65:ab:07:0e:7f:99:ac:
         f1:86:85:e3:48:0f:a6:82:36:8d:25:64:76:55:3c:ce:e3:d0:
         6a:89:a4:63:d9:99:b5:d7:8f:a7:34:d5:d2:59:af:01:02:19:
         19:03:05:52:32:32:6c:8d:12:fd:0e:2d:65:10:70:5c:f8:ee:
         dd:5e:4e:68:d2:59:15:46:94:1b:ca:a6:6a:57:59:82:b1:38:
         39:b5:72:3b:51:53:43:38:c0:89:94:c1:1c:01:6c:2c:24:86:
         82:b4:00:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:47 2025 by rpki-client on console.sobornost.net