Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/510/aKDPmms080wyohTyM89mbhBEwAI.mft
File:                     aKDPmms080wyohTyM89mbhBEwAI.mft (raw, json)
Hash identifier:          f9hZX0IGmt6vY5Lhn1yl/0n3z3+Jy+Hk1x7ji2OZAps=
Subject key identifier:   0C:14:A9:B1:57:FC:93:E5:61:6B:7E:23:3A:B1:86:F1:91:D6:6B:9C
Authority key identifier: 68:A0:CF:9A:6B:34:F3:4C:32:A2:14:F2:33:CF:66:6E:10:44:C0:02
Certificate issuer:       /CN=68A0CF9A6B34F34C32A214F233CF666E1044C002
Certificate serial:       149A
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aKDPmms080wyohTyM89mbhBEwAI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/aKDPmms080wyohTyM89mbhBEwAI.mft
Manifest number:          149A
Signing time:             Mon 28 Apr 2025 19:38:42 +0000
Manifest this update:     Mon 28 Apr 2025 19:38:42 +0000
Manifest next update:     Tue 29 Apr 2025 01:38:42 +0000
Files and hashes:         1: aKDPmms080wyohTyM89mbhBEwAI.crl (hash: poVi/+0toRhPIc+T5S+vK7HsHQ0HyTVSXKfCNpDpYl4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5274 (0x149a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68A0CF9A6B34F34C32A214F233CF666E1044C002
        Validity
            Not Before: Apr 28 19:38:42 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=0C14A9B157FC93E5616B7E233AB186F191D66B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:be:03:98:94:a5:bd:2b:9e:32:47:e9:84:41:
                    2d:25:14:18:42:3f:b9:3e:c8:8a:d5:03:3e:12:26:
                    ef:78:d6:f5:dc:ee:12:42:a0:bd:3b:67:3b:ff:9c:
                    de:9b:59:8e:dc:c8:d8:97:c5:73:93:39:3b:5b:8a:
                    a1:fe:13:47:76:82:b8:01:d8:59:39:30:bd:a8:74:
                    9f:a1:08:18:1a:fc:95:2d:ce:3a:5c:b1:3f:14:34:
                    e1:03:00:55:e1:26:a4:e3:d1:23:c9:63:21:2f:62:
                    cf:c1:e7:51:56:18:76:a8:2a:b4:86:68:d7:0b:99:
                    64:71:63:3f:33:42:56:16:ad:70:4c:9a:c5:18:8c:
                    af:9e:14:28:fb:d0:8d:5e:c9:42:30:7c:2f:d4:44:
                    31:b0:e8:65:2e:d0:44:ff:7c:7d:9b:16:93:16:16:
                    29:20:59:4b:f7:60:66:da:95:63:4b:97:1e:63:b8:
                    5c:3f:f2:8e:2e:26:73:6d:b1:2f:c5:12:d3:7c:c4:
                    e4:30:0f:6c:61:dd:71:bd:9f:e1:9e:c2:d9:08:f6:
                    d1:a2:67:dc:a7:89:b6:7b:f1:2e:45:87:d9:74:1d:
                    8b:96:0b:57:91:f7:46:01:e7:7a:ce:48:7a:50:5d:
                    2e:72:f1:7e:e3:ca:e7:ec:cb:92:6a:1d:56:0d:a3:
                    7b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:14:A9:B1:57:FC:93:E5:61:6B:7E:23:3A:B1:86:F1:91:D6:6B:9C
            X509v3 Authority Key Identifier:
                keyid:68:A0:CF:9A:6B:34:F3:4C:32:A2:14:F2:33:CF:66:6E:10:44:C0:02

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/aKDPmms080wyohTyM89mbhBEwAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aKDPmms080wyohTyM89mbhBEwAI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/aKDPmms080wyohTyM89mbhBEwAI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a3:1d:8d:d2:d2:04:4a:52:4d:20:98:ae:77:a9:b3:ca:40:
         7a:37:a4:91:e0:80:32:08:31:0c:01:9d:93:78:89:bd:74:16:
         7e:dc:55:d1:3d:6e:1d:4f:12:1c:00:36:fc:22:a8:0e:3c:27:
         ec:4f:08:32:23:14:72:ed:0c:a8:fb:bc:91:7e:e7:d5:e8:ef:
         1a:0d:7d:40:5c:9d:39:fb:44:cc:8f:6e:62:30:1e:ac:90:f9:
         67:8d:58:b8:31:2f:b5:ab:26:c0:e6:06:c7:39:35:9a:20:e5:
         69:ca:4e:e4:d5:5d:4a:7d:39:38:b1:ab:56:87:c0:57:ee:9f:
         62:bc:cd:71:fd:8c:6b:bc:2e:a3:60:15:55:5e:0c:fc:c4:96:
         74:ad:2c:a6:f6:aa:1a:59:e3:15:7b:e7:f0:40:02:38:85:e0:
         76:ae:e2:94:a3:c3:9d:8f:fb:26:62:2a:db:f5:8a:32:2a:bc:
         88:ca:85:1e:07:a4:a4:9e:f5:30:9e:65:8f:f6:da:e5:ac:54:
         9e:2e:ea:18:06:80:4e:c4:de:3e:43:56:67:e2:11:3d:65:8a:
         e4:03:2c:12:c3:31:1b:3c:91:9b:53:d7:09:fc:34:1c:25:f5:
         73:9e:14:67:20:7b:e6:25:14:98:2b:ae:c8:99:38:5a:a2:d2:
         e0:c2:f1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----