Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft
File:                     hPLNDLUaQjf34fOuhRnjzCZEi38.mft (raw, json)
Hash identifier:          au3vu7lmss/CIzd5Jdt+vAyCIhyH3WBQwXJpIWVMWm8=
Subject key identifier:   45:D7:AF:E0:26:C8:57:0C:15:6C:22:E7:C7:BB:2B:A9:05:E9:1F:14
Authority key identifier: 84:F2:CD:0C:B5:1A:42:37:F7:E1:F3:AE:85:19:E3:CC:26:44:8B:7F
Certificate issuer:       /CN=84F2CD0CB51A4237F7E1F3AE8519E3CC26448B7F
Certificate serial:       149D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft
Manifest number:          149D
Signing time:             Mon 28 Apr 2025 19:41:31 +0000
Manifest this update:     Mon 28 Apr 2025 19:41:31 +0000
Manifest next update:     Tue 29 Apr 2025 01:41:31 +0000
Files and hashes:         1: hPLNDLUaQjf34fOuhRnjzCZEi38.crl (hash: AgWHjZGjZf/zA20lZrdBZOJiWEsgq2/qzwFCzYQDe2g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5277 (0x149d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F2CD0CB51A4237F7E1F3AE8519E3CC26448B7F
        Validity
            Not Before: Apr 28 19:41:31 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=45D7AFE026C8570C156C22E7C7BB2BA905E91F14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:64:81:29:9b:33:04:d8:e0:06:be:7b:f6:7f:
                    c6:b1:b8:45:75:d2:d8:ba:d8:83:ce:d8:e2:f7:e9:
                    30:9b:ba:8e:82:1a:4b:6c:f3:c2:11:24:d1:0a:d4:
                    42:b5:91:00:a8:ff:1c:0d:26:a7:74:21:dc:50:3e:
                    7b:5c:fe:01:d6:32:15:54:12:e5:08:02:19:4c:c1:
                    b2:04:ad:76:0a:35:04:a3:9d:37:f7:7e:66:a0:9b:
                    b5:08:a5:6d:66:65:97:57:3f:47:8c:03:59:db:55:
                    da:14:e5:84:43:00:91:be:e2:44:b5:cc:a9:30:7f:
                    5e:e6:25:fb:7d:89:ec:2d:b6:f1:f9:c1:dc:9b:b7:
                    da:d7:81:e5:d9:2e:a9:54:2f:8d:3d:bf:39:b6:e3:
                    a1:b7:4b:85:57:f4:87:ba:79:21:0d:62:9e:60:d0:
                    9e:fe:a6:8a:c2:04:22:aa:2b:8a:fc:41:dc:c9:48:
                    f5:74:fe:d8:25:73:d3:40:d9:f0:a1:1a:6a:7d:54:
                    f1:04:53:ea:bd:a2:48:4d:a8:3d:ad:bd:d4:1f:7d:
                    89:3d:51:70:7c:3e:ef:ef:b2:90:86:55:07:37:66:
                    f2:a8:17:9c:1d:93:41:5e:e4:1b:40:84:6a:87:fe:
                    68:02:df:a0:40:10:47:6d:39:c4:44:ce:53:2d:0e:
                    c8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D7:AF:E0:26:C8:57:0C:15:6C:22:E7:C7:BB:2B:A9:05:E9:1F:14
            X509v3 Authority Key Identifier:
                keyid:84:F2:CD:0C:B5:1A:42:37:F7:E1:F3:AE:85:19:E3:CC:26:44:8B:7F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c3:2a:1c:a3:9e:ca:47:ff:f1:e7:53:51:de:91:9b:6e:25:
         dc:d9:77:22:b6:d3:86:5b:ca:b0:93:ab:46:75:fd:be:62:cd:
         33:00:1d:b1:4d:1b:2d:f9:f2:16:fd:89:21:d4:df:fb:14:39:
         5f:05:7c:f7:65:12:36:61:11:6e:48:b8:c3:87:25:21:66:f9:
         0b:70:09:83:49:86:0b:ae:15:4b:07:68:f2:6a:21:da:98:50:
         08:8c:17:87:a5:3f:af:20:19:7c:4f:36:d2:40:49:db:0e:7e:
         19:61:3b:cb:9a:23:06:80:ef:0c:45:f1:eb:57:ca:da:30:3d:
         18:58:23:45:d7:b3:fd:1f:0c:7d:ba:62:53:03:6f:5d:ea:ed:
         a5:e7:5f:f3:32:e2:ce:3e:0d:03:c4:6f:2d:eb:eb:b3:44:a2:
         cd:13:06:4d:16:a2:2e:93:36:12:b8:a5:bc:8f:22:10:08:a1:
         21:5d:2a:0f:d8:df:29:7b:16:59:a4:ae:33:f4:d6:6e:aa:dc:
         07:96:d4:9f:55:d9:c3:91:0c:d7:45:86:a1:73:ae:bd:17:2d:
         cf:17:47:e0:7a:47:ac:5d:9a:f3:b0:ba:52:fb:ad:b4:40:b4:
         05:73:87:de:b7:4e:d1:64:e2:e4:e5:15:83:c1:a0:a8:14:15:
         aa:3c:8a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:48 2025 by rpki-client on console.sobornost.net