Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.mft
File:                     DuhjrFcK7qH5ML6l52qufdVTgE4.mft (raw, json)
Hash identifier:          y17WrHKVvzCIR+5MX68FCs67XtGRWCt7qn2vj5g/M3o=
Subject key identifier:   0A:6B:33:61:E1:F5:FA:9B:02:66:D7:DF:92:44:22:A4:0B:47:14:9A
Authority key identifier: 0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
Certificate issuer:       /CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Certificate serial:       0B25
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.mft
Manifest number:          0AD8
Signing time:             Wed 09 Apr 2025 01:08:56 +0000
Manifest this update:     Wed 09 Apr 2025 01:08:56 +0000
Manifest next update:     Wed 09 Apr 2025 07:08:56 +0000
Files and hashes:         1: DuhjrFcK7qH5ML6l52qufdVTgE4.crl (hash: ASdEH+NnBCiVpOPOt+qqICrMjl6dBK6nAsps7KNBkvo=)
                          2: _V_7ixByiVG1pjZi1mDw4b4VxpI.roa (hash: XyMDQBmqSSFJJTqxQXZg0E/WbwlH0Rpqj7jDNMHguZw=)
                          3: cJAPNRcPlRfx94t1spCSlsQGruY.roa (hash: QVD+nt3vSI8wTFmIQdZHzTyisAO3IMVPHg1eYvC0yEo=)
                          4: m8Mbp3fOk0mfKmCfNvkt2fmUd30.roa (hash: 6PVM1OMBTNJ2+7s4aPik4DaNu6ngPai+hTo90igXodQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2853 (0xb25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
        Validity
            Not Before: Apr  9 01:08:56 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=0A6B3361E1F5FA9B0266D7DF924422A40B47149A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:3a:68:7a:71:a9:0e:99:d5:4d:01:d6:5a:
                    1f:8c:a0:a8:28:df:03:51:4b:45:8e:5a:38:00:08:
                    03:c7:a6:b6:a7:86:94:91:59:23:85:b1:d4:3f:9b:
                    a4:f6:0f:d0:22:54:63:c7:80:21:e6:1f:54:57:14:
                    85:47:2e:4b:6d:17:8b:98:7b:60:66:ce:57:5b:2d:
                    f4:31:0a:d2:15:14:7f:06:c2:9e:8e:46:75:89:0f:
                    64:b0:fd:19:43:33:68:c0:33:95:05:89:fe:a4:7c:
                    5a:fe:fc:8e:75:77:8d:08:3f:9b:77:44:78:37:ac:
                    ca:7c:85:64:b8:fb:24:24:36:d5:c8:97:db:87:0d:
                    b0:fe:4c:ae:25:ec:c1:ec:ff:5b:7a:29:d1:5a:cd:
                    d5:56:47:55:02:d6:c6:13:96:90:03:ed:82:e5:b8:
                    0a:a6:ca:ba:0a:ea:15:38:8a:4b:c0:e1:61:ff:6a:
                    a7:bb:40:1d:5a:d9:af:b4:45:92:4f:fc:46:b2:4f:
                    13:cb:9b:a4:46:c2:b9:b7:cf:05:a2:73:d7:cc:c4:
                    f5:f2:43:ef:5b:b5:09:de:44:f7:6d:27:6c:0f:43:
                    f8:15:5a:72:30:b4:82:97:46:41:65:8d:a1:48:45:
                    b3:bf:aa:58:cc:59:61:c1:48:1c:e3:01:3e:78:96:
                    59:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6B:33:61:E1:F5:FA:9B:02:66:D7:DF:92:44:22:A4:0B:47:14:9A
            X509v3 Authority Key Identifier:
                keyid:0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:30:2d:54:4d:b1:5b:3c:7a:96:a6:12:f9:52:5b:e7:9e:77:
         a9:3d:af:d7:d0:8d:b1:1f:e6:0b:0f:32:d4:a2:91:9c:c2:5f:
         c1:cc:52:11:10:e2:d4:ec:b1:a1:f4:d5:28:df:92:c5:ec:55:
         35:3c:2c:9c:20:1b:a4:d6:18:34:75:fb:9f:21:dc:1e:c5:ac:
         15:3a:94:3f:b1:c7:38:93:73:71:91:5b:5f:1a:16:30:7c:a6:
         35:f5:cf:7d:21:72:13:71:9b:41:15:2f:b3:be:b8:ae:f1:9d:
         9f:b3:f8:a0:97:94:32:2a:c0:41:03:b4:7d:75:a7:c7:2e:41:
         58:d9:01:ea:6b:ed:49:c8:a7:58:59:8f:ed:c8:57:07:62:9e:
         93:62:7a:d8:07:14:89:62:c5:d7:af:db:b2:46:50:73:b3:93:
         44:9c:2d:9c:30:ce:e4:4e:3b:fa:ef:19:9e:c4:15:aa:db:d7:
         a6:59:43:51:85:b6:cc:8c:26:be:fc:2d:cc:35:b5:3a:81:99:
         71:0d:89:47:ab:08:d8:af:b9:f2:2f:9b:6d:7e:11:9e:06:4e:
         83:c3:99:e3:79:f2:0e:fb:23:79:c4:16:73:7d:07:8f:43:11:
         cb:e4:2e:08:22:fd:04:e8:2b:3f:ab:cd:14:07:ee:21:df:cd:
         b3:ee:78:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:59:35 2025 by rpki-client on console.sobornost.net