Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/4/-DEYqbYNbw6dOVbPQZKnnEAgR2U.mft
File:                     -DEYqbYNbw6dOVbPQZKnnEAgR2U.mft (raw, json)
Hash identifier:          16XwuCGcMD1UGsfG+na8YJpMi631T7oOpkWmCXdtD08=
Subject key identifier:   F7:3C:33:38:07:49:B2:F8:20:94:3F:C0:E0:5E:F0:39:6B:3D:4E:2B
Authority key identifier: F8:31:18:A9:B6:0D:6F:0E:9D:39:56:CF:41:92:A7:9C:40:20:47:65
Certificate issuer:       /CN=F83118A9B60D6F0E9D3956CF4192A79C40204765
Certificate serial:       1469
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-DEYqbYNbw6dOVbPQZKnnEAgR2U.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/-DEYqbYNbw6dOVbPQZKnnEAgR2U.mft
Manifest number:          1469
Signing time:             Mon 28 Apr 2025 19:41:57 +0000
Manifest this update:     Mon 28 Apr 2025 19:41:57 +0000
Manifest next update:     Tue 29 Apr 2025 01:41:57 +0000
Files and hashes:         1: -DEYqbYNbw6dOVbPQZKnnEAgR2U.crl (hash: 2eRR3tBm+BouCiTwiNByCsGOgdgDD+wjtf+0iMWABcA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5225 (0x1469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F83118A9B60D6F0E9D3956CF4192A79C40204765
        Validity
            Not Before: Apr 28 19:41:57 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=F73C33380749B2F820943FC0E05EF0396B3D4E2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c8:53:04:f2:1a:ef:c0:c9:a5:77:de:4e:45:
                    7f:9f:77:fb:ad:b1:b0:6d:16:2f:dc:07:b0:3f:e0:
                    e8:f7:33:5b:c1:5c:5c:2b:f4:71:ef:b4:ec:60:7e:
                    1e:38:33:fa:1b:bb:9a:9f:7c:f5:68:e0:72:88:a0:
                    e5:ed:1a:00:af:93:06:b6:46:78:87:d5:82:88:f4:
                    88:ee:fa:44:10:49:db:62:95:a0:df:4f:c3:ea:fa:
                    49:d5:3d:18:49:4b:7c:70:7c:ee:de:40:25:ca:ae:
                    5f:9f:6f:2e:56:04:4a:59:58:9e:df:71:e3:73:fd:
                    74:13:fa:33:1a:c6:23:7e:80:92:e6:8c:dd:d5:9b:
                    d8:9f:f3:f4:eb:bb:01:c9:31:d6:96:e2:f0:94:7f:
                    91:d6:b0:a2:2f:09:e1:a7:0e:68:b2:f0:ec:6d:5d:
                    00:5a:00:a6:32:b1:55:65:3a:c5:a2:8a:b1:a1:62:
                    6b:89:1e:74:af:50:e5:9e:4b:81:a6:77:cd:62:56:
                    36:30:10:1a:21:32:8a:72:eb:56:8d:6a:13:ff:50:
                    f3:81:0f:b9:3a:cd:46:79:e2:a7:7e:df:a8:cb:0e:
                    fc:ac:4c:11:c8:57:93:e4:07:bc:e0:da:2c:fa:70:
                    e9:00:3f:13:b0:9f:77:f6:a8:6f:0a:0c:fd:a9:34:
                    f1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3C:33:38:07:49:B2:F8:20:94:3F:C0:E0:5E:F0:39:6B:3D:4E:2B
            X509v3 Authority Key Identifier:
                keyid:F8:31:18:A9:B6:0D:6F:0E:9D:39:56:CF:41:92:A7:9C:40:20:47:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/-DEYqbYNbw6dOVbPQZKnnEAgR2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-DEYqbYNbw6dOVbPQZKnnEAgR2U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/-DEYqbYNbw6dOVbPQZKnnEAgR2U.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:0f:aa:f0:89:a3:f5:05:2a:81:4f:da:4e:06:a5:0a:57:4c:
         73:4b:63:c7:6e:19:42:87:e6:93:e3:fc:38:07:58:2b:44:0b:
         89:ff:21:d7:42:21:c6:b0:08:1d:c7:ab:27:e9:13:2c:38:8a:
         14:ce:4e:1c:ae:5c:be:1f:e2:e7:31:07:1a:28:0c:82:4b:f6:
         c5:94:43:3c:02:44:38:d3:ef:66:20:44:b2:41:dd:1a:50:4c:
         63:45:ef:fe:10:a9:65:5d:cf:dc:6d:ba:af:c8:1b:49:c7:60:
         08:58:65:15:92:1d:f6:83:51:34:54:ec:44:90:5c:5b:55:1c:
         4b:23:bd:8d:01:af:28:0d:a2:f0:21:2d:f4:e2:75:5d:e3:35:
         ab:6b:4d:ad:ac:cc:d8:71:98:5d:af:d7:f2:39:59:d9:ff:a4:
         a0:22:1c:92:19:85:d5:29:63:08:1c:ea:0c:c5:1d:3d:92:69:
         37:bf:f0:32:8d:c5:65:6b:34:2a:e3:a8:44:db:78:3e:0e:4f:
         c6:76:e1:61:af:93:bd:5e:93:6e:44:76:7e:06:cd:3e:6c:d9:
         48:df:eb:66:35:cc:4e:de:52:3f:f5:ab:d7:8b:18:16:db:9c:
         bd:e9:c6:dc:c5:8e:5e:7e:d8:b7:61:a4:25:97:89:d6:cb:fa:
         43:52:57:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:47 2025 by rpki-client on console.sobornost.net