Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft
File:                     tRlLGMyNlt0mESh8YqnqgiDbOm4.mft (raw, json)
Hash identifier:          P/d7bVOPtbzkKwHmRXApRUsBvEzHm66R3lRVamEOz9s=
Subject key identifier:   FC:15:36:7B:FB:39:7F:45:7D:46:54:0D:18:CD:C2:27:56:1D:D0:19
Authority key identifier: B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E
Certificate issuer:       /CN=B5194B18CC8D96DD2611287C62A9EA8220DB3A6E
Certificate serial:       1D81
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft
Manifest number:          1D81
Signing time:             Mon 28 Apr 2025 19:40:29 +0000
Manifest this update:     Mon 28 Apr 2025 19:40:29 +0000
Manifest next update:     Tue 29 Apr 2025 01:40:29 +0000
Files and hashes:         1: tRlLGMyNlt0mESh8YqnqgiDbOm4.crl (hash: BT4PLaySmtmmBfpGTTgRw6hFe3CUvsvMClXrXnUMCf8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7553 (0x1d81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5194B18CC8D96DD2611287C62A9EA8220DB3A6E
        Validity
            Not Before: Apr 28 19:40:29 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=FC15367BFB397F457D46540D18CDC227561DD019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b6:6a:5d:65:5d:09:10:b4:a6:69:c8:52:95:
                    7f:4c:5e:f7:6c:89:81:46:8c:3f:05:14:e8:8f:2c:
                    4c:c8:f2:be:ac:96:de:34:60:2d:b0:31:6b:c1:1c:
                    a7:d0:ef:9a:30:0e:a4:1e:14:0f:d0:cd:f7:0d:7d:
                    89:20:6b:14:2b:78:07:87:cf:0f:a3:88:d1:62:8f:
                    11:9c:20:d0:6e:df:52:40:19:50:26:64:b1:d5:14:
                    49:bc:31:33:d7:c4:f3:96:50:95:56:8a:00:cf:7c:
                    8b:c7:42:f3:d0:9c:9c:42:8d:7f:32:f9:2d:cf:8d:
                    a3:fb:cf:b2:e7:55:39:1f:b4:35:73:2c:b4:89:34:
                    bc:5a:5a:99:3f:48:55:2d:59:39:c3:4e:55:77:87:
                    c4:4e:fd:8c:02:6a:08:d5:5d:76:e7:d4:70:e5:67:
                    fb:80:3a:07:88:b6:1c:dd:d1:dc:ab:75:8d:71:85:
                    3e:92:f6:e8:24:de:d7:98:62:27:9d:15:08:71:22:
                    24:1d:5d:ad:c9:aa:fe:a3:a2:c0:89:d4:94:b6:ef:
                    0a:81:e7:6a:19:41:11:56:e2:50:85:6d:04:04:c0:
                    b2:fd:6c:63:f9:72:a5:56:c8:3a:c3:60:7f:1a:a6:
                    36:f9:06:0d:68:b6:69:ed:bf:67:62:d7:22:51:2f:
                    28:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:15:36:7B:FB:39:7F:45:7D:46:54:0D:18:CD:C2:27:56:1D:D0:19
            X509v3 Authority Key Identifier:
                keyid:B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:2c:5e:d1:c5:3a:3f:cc:b1:e1:07:45:4a:49:1d:d6:6f:a7:
         f2:1c:e5:f0:20:be:45:40:31:9d:a3:da:0b:37:02:dd:c8:00:
         44:98:c4:50:51:f4:7a:37:eb:c9:3f:ac:4a:b2:bd:ab:56:78:
         da:c1:98:f4:79:42:c1:33:a9:39:7e:54:b5:e2:bb:19:31:a1:
         4a:81:46:5e:bd:1d:c2:e7:10:e0:b3:84:ac:3c:67:04:38:f3:
         71:d6:c7:2d:1d:e9:6d:7f:87:a2:fd:28:ad:e1:e6:f6:d5:94:
         51:ec:bb:d6:99:c2:a8:88:0b:31:19:2a:c0:87:04:ec:98:02:
         77:91:9e:d1:64:47:8b:eb:f2:29:a2:fc:68:76:ab:c2:c4:60:
         97:d1:f7:de:73:39:f2:69:12:42:47:c1:56:08:9b:1b:52:d5:
         48:52:44:81:9f:39:1f:3f:bb:b3:76:4b:f5:11:a7:ef:68:54:
         19:86:8e:fe:7b:12:54:af:98:5d:a7:15:92:cb:87:1d:69:77:
         33:34:96:a3:3c:ef:ad:76:ce:1c:c6:6e:21:17:29:48:90:4b:
         da:0a:5b:24:9b:5c:cf:23:71:d8:12:ba:64:e3:61:55:e8:03:
         c3:08:0c:78:20:46:ca:3f:5e:6c:48:68:f1:32:6b:97:0b:81:
         fb:4e:bc:46
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICHYEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjUx
OTRCMThDQzhEOTZERDI2MTEyODdDNjJBOUVBODIyMERCM0E2RTAeFw0yNTA0Mjgx
OTQwMjlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEZDMTUzNjdCRkIzOTdG
NDU3RDQ2NTQwRDE4Q0RDMjI3NTYxREQwMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVtmpdZV0JELSmachSlX9MXvdsiYFGjD8FFOiPLEzI8r6slt40
YC2wMWvBHKfQ75owDqQeFA/QzfcNfYkgaxQreAeHzw+jiNFijxGcINBu31JAGVAm
ZLHVFEm8MTPXxPOWUJVWigDPfIvHQvPQnJxCjX8y+S3PjaP7z7LnVTkftDVzLLSJ
NLxaWpk/SFUtWTnDTlV3h8RO/YwCagjVXXbn1HDlZ/uAOgeIthzd0dyrdY1xhT6S
9ugk3teYYiedFQhxIiQdXa3Jqv6josCJ1JS27wqB52oZQRFW4lCFbQQEwLL9bGP5
cqVWyDrDYH8apjb5Bg1otmntv2di1yJRLyj9AgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQU/BU2e/s5f0V9RlQNGM3CJ1Yd0BkwHwYDVR0jBBgwFoAUtRlLGMyNlt0mESh8
YqnqgiDbOm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzI3
L3RSbExHTXlObHQwbUVTaDhZcW5xZ2lEYk9tNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdFJsTEdNeU5sdDBtRVNoOFlxbnFnaURiT200LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzI3L3RSbExHTXlObHQwbUVT
aDhZcW5xZ2lEYk9tNC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB6LF7RxTo/zLHhB0VKSR3Wb6fyHOXwIL5FQDGdo9oLNwLdyABEmMRQUfR6N+vJ
P6xKsr2rVnjawZj0eULBM6k5flS14rsZMaFKgUZevR3C5xDgs4SsPGcEOPNx1sct
Heltf4ei/Sit4eb21ZRR7LvWmcKoiAsxGSrAhwTsmAJ3kZ7RZEeL6/IpovxodqvC
xGCX0ffecznyaRJCR8FWCJsbUtVIUkSBnzkfP7uzdkv1EafvaFQZho7+exJUr5hd
pxWSy4cdaXczNJajPO+tds4cxm4hFylIkEvaClskm1zPI3HYErpk42FV6APDCAx4
IEbKP15sSGjxMmuXC4H7TrxG
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:50 2025 by rpki-client on console.sobornost.net