Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2528/COaEfe781aS_jvY6VWfs2gflVik.mft
File:                     COaEfe781aS_jvY6VWfs2gflVik.mft (raw, json)
Hash identifier:          UvQobhlp7iPXsVOUu5H1EblwF8R44d+gMj+cI78Tdrk=
Subject key identifier:   F2:97:CA:F4:89:E2:A5:25:7F:9B:47:5E:5C:3B:8A:7E:C6:66:EE:CE
Authority key identifier: 08:E6:84:7D:EE:FC:D5:A4:BF:8E:F6:3A:55:67:EC:DA:07:E5:56:29
Certificate issuer:       /CN=08E6847DEEFCD5A4BF8EF63A5567ECDA07E55629
Certificate serial:       1DF2
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/COaEfe781aS_jvY6VWfs2gflVik.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2528/COaEfe781aS_jvY6VWfs2gflVik.mft
Manifest number:          1DF2
Signing time:             Sun 15 Jun 2025 07:24:59 +0000
Manifest this update:     Sun 15 Jun 2025 07:24:59 +0000
Manifest next update:     Sun 15 Jun 2025 13:24:59 +0000
Files and hashes:         1: COaEfe781aS_jvY6VWfs2gflVik.crl (hash: 5wrtMhkwyT4pf/ci8kiqXgSSaeX8y4TnrK6rXotWimo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7666 (0x1df2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08E6847DEEFCD5A4BF8EF63A5567ECDA07E55629
        Validity
            Not Before: Jun 15 07:24:59 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=F297CAF489E2A5257F9B475E5C3B8A7EC666EECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:da:00:96:3c:bd:65:31:9d:3a:11:dd:03:ac:
                    a6:b4:e5:b2:2e:3d:a0:96:51:07:d6:51:88:3e:97:
                    b5:64:c6:ff:e7:d1:0a:d2:10:e4:d6:4f:20:be:b5:
                    24:c2:a0:68:4e:48:78:2e:7b:ab:75:f2:3a:9c:06:
                    2a:5e:ae:c5:53:25:12:b6:ef:79:af:0c:53:00:de:
                    2a:52:70:55:9e:e3:cc:a5:b6:80:7f:cd:b5:f2:e9:
                    b4:c5:12:fc:b7:87:45:8d:ff:f6:67:a9:93:da:f8:
                    d5:9b:e4:45:8b:bf:64:9e:90:27:5d:ca:29:bc:41:
                    0d:d7:99:c2:74:02:87:dd:3b:1b:71:f7:bf:26:45:
                    28:0a:8a:ec:84:d6:16:be:e6:08:64:27:b4:f8:87:
                    86:a1:e0:0e:f6:e9:00:8f:bd:2e:18:07:99:34:9e:
                    9c:2c:30:ad:75:a2:d7:f7:7a:09:9a:d3:8a:76:65:
                    e0:24:44:85:f4:46:82:bf:69:9e:03:bb:13:ce:d1:
                    20:02:2f:49:73:74:0d:7b:6b:38:6e:45:d5:5b:56:
                    cc:63:c8:b8:57:45:79:72:60:98:52:b0:bd:bf:d3:
                    29:c7:57:7d:74:35:2d:bc:8b:ba:f3:bc:59:4c:a9:
                    8a:3d:58:31:5b:90:1a:bd:2c:0e:6a:97:31:3f:8a:
                    31:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:97:CA:F4:89:E2:A5:25:7F:9B:47:5E:5C:3B:8A:7E:C6:66:EE:CE
            X509v3 Authority Key Identifier:
                keyid:08:E6:84:7D:EE:FC:D5:A4:BF:8E:F6:3A:55:67:EC:DA:07:E5:56:29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2528/COaEfe781aS_jvY6VWfs2gflVik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/COaEfe781aS_jvY6VWfs2gflVik.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2528/COaEfe781aS_jvY6VWfs2gflVik.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:64:c4:f1:9a:43:09:85:e3:ac:c7:60:4c:94:bf:88:77:f4:
         48:2e:74:97:d8:93:4b:27:73:93:98:e1:01:9c:49:1b:70:91:
         4a:ac:d6:5b:63:68:66:26:aa:ba:67:d7:d7:52:35:c4:32:0a:
         3e:3d:87:08:f5:92:25:9f:7e:1b:cd:32:66:ce:e2:67:2b:50:
         f6:1d:ae:25:dd:78:e0:c1:8d:9d:33:b4:70:3f:f4:57:8b:f1:
         18:a0:9b:0a:3e:0a:7e:d6:4a:99:cd:3b:42:5a:a1:80:38:df:
         a9:61:06:f3:b2:c9:14:a2:8b:42:96:27:39:c1:92:b2:91:9e:
         6e:02:92:b0:0f:0b:d8:c5:a7:36:98:92:94:ec:c4:cd:78:50:
         cc:b6:7f:67:43:ce:5f:bd:a7:0e:c4:d0:ab:94:ca:ea:c6:f2:
         cd:d5:47:ac:98:1b:53:37:db:2f:cf:fc:a3:12:b4:d0:5f:9b:
         d8:1c:9c:0c:2d:36:97:8f:a0:96:0d:99:8b:fb:25:88:17:34:
         fa:69:57:ed:9a:cd:d0:c4:60:f0:38:29:91:39:13:b8:1b:d6:
         b9:d1:aa:2a:72:3e:76:73:19:b6:ce:d6:d0:c7:6a:9b:78:cb:
         8a:13:a0:9f:2b:90:c2:ea:00:da:de:5b:06:fd:17:a9:6a:c9:
         21:17:40:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:28:20 2025 by rpki-client