Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.mft
File:                     sTLT4KDPHu-UWlZnFbFefhSl_uM.mft (raw, json)
Hash identifier:          IMCXTn9ZEPlXD4/SCYpSzPTZ3H6StcAlZVE66G62j6c=
Subject key identifier:   81:77:49:B7:8C:B6:64:C2:72:97:78:AD:52:61:9F:A8:5B:0D:4A:8D
Authority key identifier: B1:32:D3:E0:A0:CF:1E:EF:94:5A:56:67:15:B1:5E:7E:14:A5:FE:E3
Certificate issuer:       /CN=B132D3E0A0CF1EEF945A566715B15E7E14A5FEE3
Certificate serial:       567C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sTLT4KDPHu-UWlZnFbFefhSl_uM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.mft
Manifest number:          567C
Signing time:             Sat 26 Apr 2025 13:08:25 +0000
Manifest this update:     Sat 26 Apr 2025 13:08:25 +0000
Manifest next update:     Sat 26 Apr 2025 19:08:25 +0000
Files and hashes:         1: sTLT4KDPHu-UWlZnFbFefhSl_uM.crl (hash: VFCSk+/CvwfMRfvE0wURwEl3LiFenJ0ULrc/k3fkyU4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22140 (0x567c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B132D3E0A0CF1EEF945A566715B15E7E14A5FEE3
        Validity
            Not Before: Apr 26 13:08:25 2025 GMT
            Not After : Sep 27 02:44:05 2025 GMT
        Subject: CN=817749B78CB664C2729778AD52619FA85B0D4A8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f6:3f:d0:5c:58:c7:63:5f:e8:41:7c:4b:80:
                    fd:3c:22:b2:05:64:94:a6:6e:a6:e5:52:ff:13:b0:
                    77:35:5b:f7:41:33:60:c3:2c:00:d1:fa:04:ee:79:
                    49:31:f3:f6:27:ae:e2:8b:a0:51:51:e6:e0:06:1e:
                    77:09:2c:85:19:8d:36:c6:0d:8b:a6:f7:74:6c:fb:
                    61:ba:13:41:54:cd:27:f2:75:6f:77:ae:e3:85:97:
                    40:d8:ae:dd:f1:fc:b9:f1:99:41:08:1f:a8:d6:1b:
                    37:8b:e7:d2:8e:78:5e:f6:10:cc:8e:e4:48:47:c3:
                    cc:9a:09:9d:80:ee:ce:db:e3:ad:ac:30:b2:7f:ea:
                    03:d7:cd:ab:27:c4:92:15:f0:05:f1:a3:c9:2c:ec:
                    a1:5f:bd:a8:22:fb:9b:8a:6d:73:15:84:5a:b7:79:
                    0d:94:5c:86:8d:4f:df:67:8b:e5:dc:5c:f1:52:d5:
                    4a:07:46:4c:04:17:a9:82:54:3e:f0:ca:0a:2c:f1:
                    4b:91:38:f7:30:55:b4:4e:20:98:64:9f:8f:87:f4:
                    cf:f4:74:c8:2b:11:e2:e3:df:80:fe:c1:98:20:56:
                    77:ac:b4:26:8a:90:13:4b:49:55:4c:97:40:77:3a:
                    93:6a:13:a7:95:f9:73:6f:c2:75:f5:d5:11:fa:dc:
                    ec:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:77:49:B7:8C:B6:64:C2:72:97:78:AD:52:61:9F:A8:5B:0D:4A:8D
            X509v3 Authority Key Identifier:
                keyid:B1:32:D3:E0:A0:CF:1E:EF:94:5A:56:67:15:B1:5E:7E:14:A5:FE:E3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sTLT4KDPHu-UWlZnFbFefhSl_uM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:79:a7:3c:67:49:32:ca:44:e5:e5:bd:90:94:33:e9:4f:bc:
         59:73:8f:34:26:45:8e:22:4c:ff:a4:12:5f:6e:91:eb:a0:c7:
         b5:7a:e6:26:a8:f8:ab:fb:5b:a9:45:06:19:bd:64:0b:56:c6:
         ef:21:dd:6b:09:9c:dd:2c:93:fd:09:92:81:4b:59:0b:69:07:
         4e:00:df:8d:1b:e0:93:f3:0c:0d:c7:77:35:a6:b7:00:30:05:
         04:2e:57:f2:cb:83:a8:30:ec:ee:a1:48:03:08:38:58:ae:20:
         6a:14:1a:71:d8:52:13:5a:2d:be:d8:4e:7f:64:25:ca:f4:bb:
         6c:7c:b8:0a:c5:48:18:ba:f2:9b:cb:67:24:68:31:b0:32:cd:
         03:41:d1:db:8a:85:3f:ed:a8:1f:6e:c9:a2:a3:72:ba:15:31:
         38:01:b2:5e:f3:72:7f:76:71:77:dd:4d:74:5a:53:54:53:09:
         a5:d5:2d:b4:4c:bd:c0:cf:db:1d:aa:51:68:c8:10:19:77:db:
         38:d1:06:0d:ac:f9:19:5f:8e:86:fc:2b:66:d8:b1:85:43:59:
         9c:66:8b:c9:ea:66:51:b8:a2:1d:c8:51:f9:f8:9f:7a:7f:2b:
         e3:3b:fb:80:d0:2d:8d:0b:9a:dd:fe:c6:2e:14:ad:e8:bb:1d:
         08:7a:c6:b2
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICVnwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjEz
MkQzRTBBMENGMUVFRjk0NUE1NjY3MTVCMTVFN0UxNEE1RkVFMzAeFw0yNTA0MjYx
MzA4MjVaFw0yNTA5MjcwMjQ0MDVaMDMxMTAvBgNVBAMTKDgxNzc0OUI3OENCNjY0
QzI3Mjk3NzhBRDUyNjE5RkE4NUIwRDRBOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDO9j/QXFjHY1/oQXxLgP08IrIFZJSmbqblUv8TsHc1W/dBM2DD
LADR+gTueUkx8/YnruKLoFFR5uAGHncJLIUZjTbGDYum93Rs+2G6E0FUzSfydW93
ruOFl0DYrt3x/LnxmUEIH6jWGzeL59KOeF72EMyO5EhHw8yaCZ2A7s7b462sMLJ/
6gPXzasnxJIV8AXxo8ks7KFfvagi+5uKbXMVhFq3eQ2UXIaNT99ni+XcXPFS1UoH
RkwEF6mCVD7wygos8UuROPcwVbROIJhkn4+H9M/0dMgrEeLj34D+wZggVnestCaK
kBNLSVVMl0B3OpNqE6eV+XNvwnX11RH63OzhAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUgXdJt4y2ZMJyl3itUmGfqFsNSo0wHwYDVR0jBBgwFoAUsTLT4KDPHu+UWlZn
FbFefhSl/uMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQy
L3NUTFQ0S0RQSHUtVVdsWm5GYkZlZmhTbF91TS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvc1RMVDRLRFBIdS1VV2xabkZiRmVmaFNsX3VNLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQyL3NUTFQ0S0RQSHUtVVds
Wm5GYkZlZmhTbF91TS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQByeac8Z0kyykTl5b2QlDPpT7xZc480JkWOIkz/pBJfbpHroMe1euYmqPir+1up
RQYZvWQLVsbvId1rCZzdLJP9CZKBS1kLaQdOAN+NG+CT8wwNx3c1prcAMAUELlfy
y4OoMOzuoUgDCDhYriBqFBpx2FITWi2+2E5/ZCXK9LtsfLgKxUgYuvKby2ckaDGw
Ms0DQdHbioU/7agfbsmio3K6FTE4AbJe83J/dnF33U10WlNUUwml1S20TL3Az9sd
qlFoyBAZd9s40QYNrPkZX46G/Ctm2LGFQ1mcZovJ6mZRuKIdyFH5+J96fyvjO/uA
0C2NC5rd/sYuFK3oux0Iesay
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:15:26 2025 by rpki-client