Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft
File:                     lmzVCUReWNdVvBqFJWP5uy_uzbk.mft (raw, json)
Hash identifier:          HvxL+QkczFJopE3Q7S4p+rDjccJNVHaFsCBrR4rNvRs=
Subject key identifier:   65:2A:C6:D4:5D:74:F0:00:FF:FC:A5:A6:AF:B0:26:90:65:1A:88:12
Authority key identifier: 96:6C:D5:09:44:5E:58:D7:55:BC:1A:85:25:63:F9:BB:2F:EE:CD:B9
Certificate issuer:       /CN=966CD509445E58D755BC1A852563F9BB2FEECDB9
Certificate serial:       18
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lmzVCUReWNdVvBqFJWP5uy_uzbk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft
Manifest number:          18
Signing time:             Mon 28 Apr 2025 19:06:44 +0000
Manifest this update:     Mon 28 Apr 2025 19:06:44 +0000
Manifest next update:     Tue 29 Apr 2025 01:06:44 +0000
Files and hashes:         1: lmzVCUReWNdVvBqFJWP5uy_uzbk.crl (hash: bmyjlBdW3JnGJYNEuDVtADYk0A5rZlIHUzF3P0ujEag=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966CD509445E58D755BC1A852563F9BB2FEECDB9
        Validity
            Not Before: Apr 28 19:06:44 2025 GMT
            Not After : Apr 24 06:29:48 2026 GMT
        Subject: CN=652AC6D45D74F000FFFCA5A6AFB02690651A8812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7c:a6:94:b4:d1:5b:79:37:2b:14:1b:ea:76:
                    b7:a1:db:e8:f1:8b:44:bd:c4:0f:3e:b8:d1:a0:54:
                    23:64:d7:c8:ce:64:6f:20:76:56:ca:01:ae:86:04:
                    17:29:aa:60:e3:4d:a2:b1:72:3a:b0:b4:39:8e:0d:
                    e6:b2:ea:13:13:2a:5e:c3:ab:93:ea:66:b0:dc:5e:
                    6b:65:ce:31:61:45:e2:16:30:88:09:a2:57:bd:2e:
                    36:b0:ef:51:98:df:a8:3d:36:3e:1a:37:47:71:1f:
                    a3:9b:67:6f:d5:4d:f3:87:82:b3:ce:b3:08:d5:a2:
                    01:4f:fe:46:90:8b:15:df:a6:c7:4b:26:4a:f6:b0:
                    89:6c:0c:ad:85:11:5b:36:07:61:90:0b:d8:7e:d6:
                    b0:32:04:6a:80:9a:8f:32:c2:df:4c:e8:1b:79:67:
                    4f:c2:21:b0:62:c3:72:71:f2:c5:4f:c9:a3:0a:03:
                    1e:5b:fe:b6:f4:df:47:09:8b:d2:21:b2:46:8f:8c:
                    88:72:cc:a7:2f:ee:e3:52:aa:60:bc:f2:34:a9:8b:
                    f9:59:2f:57:ef:92:66:58:f6:da:a7:d6:b7:c0:23:
                    42:6b:a1:ba:24:9e:a3:4a:bb:98:f5:ad:96:f6:b3:
                    ea:51:ca:ba:aa:16:8a:5c:29:11:96:8f:14:49:3a:
                    22:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2A:C6:D4:5D:74:F0:00:FF:FC:A5:A6:AF:B0:26:90:65:1A:88:12
            X509v3 Authority Key Identifier:
                keyid:96:6C:D5:09:44:5E:58:D7:55:BC:1A:85:25:63:F9:BB:2F:EE:CD:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lmzVCUReWNdVvBqFJWP5uy_uzbk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:5a:3f:27:43:48:8b:a6:b4:18:57:ec:07:a1:9f:36:b0:f0:
         78:7a:ed:3f:e4:05:a3:00:47:34:91:99:61:44:9a:ba:c0:1a:
         8f:f4:fe:28:bd:87:0d:e1:44:e2:2c:b8:e1:5a:ef:3b:71:28:
         05:52:aa:96:51:12:04:7e:84:db:84:50:54:bd:7a:31:96:bd:
         25:6e:1a:b5:8a:75:d6:98:0b:94:fa:d2:14:96:1d:2c:29:c9:
         9f:1a:90:6e:79:03:6e:74:42:97:5c:55:82:61:40:df:dd:30:
         62:16:a9:9c:47:75:2e:aa:ff:9a:3e:ba:71:66:bc:2d:8c:41:
         8f:56:36:53:65:0e:ed:09:51:00:05:b3:c1:79:ed:7a:c3:62:
         bc:b9:fd:a8:0a:7d:98:17:ad:18:fe:1e:6d:c9:d2:12:52:7a:
         a8:7f:70:6f:f0:61:24:f5:08:36:9d:c0:78:33:83:e3:9a:fd:
         4c:ee:09:e1:71:db:fb:bc:35:5e:68:52:dc:ac:9b:f1:bf:d2:
         4d:32:8c:03:aa:51:42:b2:ae:3d:38:29:f7:cc:71:9a:d4:c0:
         90:a3:d2:3c:70:fd:e3:0a:64:57:8a:8b:97:bb:55:1a:63:9e:
         6e:d7:67:e9:4b:10:32:70:3f:9e:ae:5e:0f:7a:3e:85:69:fb:
         35:0b:e6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:47 2025 by rpki-client on console.sobornost.net