Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/685/Dmzm_o4YG2zjbcZN6NTuFfgYnxc.mft
File:                     Dmzm_o4YG2zjbcZN6NTuFfgYnxc.mft (raw, json)
Hash identifier:          4o09D1IGWmOgug8Prbxk7yc5DVXHilR+9IgbnwzHRuE=
Subject key identifier:   D9:EA:B2:9E:5E:E2:75:2F:EB:9C:87:5E:81:25:C2:99:EC:73:C7:AE
Authority key identifier: 0E:6C:E6:FE:8E:18:1B:6C:E3:6D:C6:4D:E8:D4:EE:15:F8:18:9F:17
Certificate issuer:       /CN=0E6CE6FE8E181B6CE36DC64DE8D4EE15F8189F17
Certificate serial:       1999
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Dmzm_o4YG2zjbcZN6NTuFfgYnxc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/685/Dmzm_o4YG2zjbcZN6NTuFfgYnxc.mft
Manifest number:          1999
Signing time:             Mon 28 Apr 2025 19:38:23 +0000
Manifest this update:     Mon 28 Apr 2025 19:38:23 +0000
Manifest next update:     Tue 29 Apr 2025 01:38:23 +0000
Files and hashes:         1: Dmzm_o4YG2zjbcZN6NTuFfgYnxc.crl (hash: kAOPOIJEQVICRrBsxpfmkcC07uS7TWZIsCoRMycEmeY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6553 (0x1999)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E6CE6FE8E181B6CE36DC64DE8D4EE15F8189F17
        Validity
            Not Before: Apr 28 19:38:23 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=D9EAB29E5EE2752FEB9C875E8125C299EC73C7AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:17:cb:ac:0f:16:6a:fd:c7:c3:92:85:e8:4f:
                    07:76:60:76:35:e7:da:67:60:78:d7:4c:dd:61:3d:
                    76:26:a8:e2:da:4e:e5:66:6a:7d:0f:27:85:f9:69:
                    0d:ce:03:42:2e:2a:f1:d7:89:51:5e:6a:95:10:93:
                    b8:1d:c8:2b:cd:f7:c4:44:43:2e:8e:65:90:22:22:
                    24:95:5f:b8:74:89:ea:c1:c9:8d:65:b1:6f:be:5c:
                    02:50:72:54:ab:84:57:68:d6:2f:5e:62:cd:f8:38:
                    1b:c8:55:28:20:8e:31:15:57:73:f7:86:17:e9:5c:
                    47:1d:82:da:3c:2c:04:1a:19:7c:7f:e0:d9:0d:30:
                    29:6e:1b:34:29:44:70:25:05:7e:49:1d:56:4f:8d:
                    02:20:2c:74:11:53:57:0d:73:91:17:ab:a8:71:4a:
                    47:9e:da:64:d2:3d:87:78:86:2b:b2:ae:2c:e8:7c:
                    ad:2f:af:60:5c:cd:f5:09:a8:a1:a0:23:07:e5:57:
                    a9:8d:cb:70:b3:91:52:3b:fb:61:bd:6c:09:cd:b1:
                    96:5f:0b:26:13:5b:7c:f2:4d:b9:0e:83:1b:4c:9e:
                    d4:2e:4d:67:3c:e9:25:43:65:d6:4e:08:f2:85:9f:
                    ed:51:98:de:b6:09:bd:08:7e:33:28:7f:a5:97:e1:
                    09:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EA:B2:9E:5E:E2:75:2F:EB:9C:87:5E:81:25:C2:99:EC:73:C7:AE
            X509v3 Authority Key Identifier:
                keyid:0E:6C:E6:FE:8E:18:1B:6C:E3:6D:C6:4D:E8:D4:EE:15:F8:18:9F:17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/685/Dmzm_o4YG2zjbcZN6NTuFfgYnxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Dmzm_o4YG2zjbcZN6NTuFfgYnxc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/685/Dmzm_o4YG2zjbcZN6NTuFfgYnxc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:63:f3:0e:e6:aa:28:e0:1e:f1:51:72:5c:61:e3:62:72:d4:
         c8:94:f3:09:12:0b:28:8f:63:ff:90:56:d8:6c:b8:1d:bd:e4:
         1f:68:4c:2a:8b:53:fc:32:a6:ee:04:e6:e2:04:0d:d2:74:33:
         41:4a:44:03:bb:8a:8d:13:ed:a8:3e:26:2f:f0:73:40:d3:84:
         63:be:d7:5f:eb:23:bb:d0:f0:50:e8:ed:64:ed:05:a5:be:1a:
         4b:f1:68:90:c9:d9:c8:5c:f3:be:0c:bb:81:e3:7f:a5:36:3b:
         77:f9:c1:74:45:d9:78:d6:1c:24:94:11:77:f6:2d:d9:c3:24:
         da:ec:fe:70:24:80:ce:ab:cd:82:15:f9:54:ca:57:35:00:c9:
         4e:7d:3f:52:07:8c:c2:c3:f1:16:0a:90:c0:fb:98:f9:dc:5e:
         e7:7f:02:84:81:3a:26:10:f4:c9:3c:a0:ab:62:06:45:49:26:
         7b:2d:fa:1f:24:46:4b:68:41:1e:f5:ec:4c:64:98:0b:00:c0:
         1a:b3:54:95:ee:df:fc:28:fa:5e:3a:e4:70:e9:2f:8c:5d:e4:
         63:9c:9f:ec:27:97:37:30:9a:fd:2e:b9:eb:cf:76:12:0f:cf:
         1e:df:d0:f7:94:ce:92:7c:62:f1:98:23:c2:59:c3:cd:19:2e:
         87:d7:06:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:49 2025 by rpki-client on console.sobornost.net