Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft
File:                     1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft (raw, json)
Hash identifier:          J+LX8v8fGe/BA360TPCW7ks9MM+4lvRZsZ4GgoRZkSU=
Subject key identifier:   20:78:E0:15:44:2F:C6:5D:BF:74:11:83:58:79:23:57:14:E2:26:A4
Authority key identifier: D6:C5:C1:8C:CE:60:30:73:0B:C2:22:AB:17:F4:E3:D8:F1:60:30:33
Certificate issuer:       /CN=D6C5C18CCE6030730BC222AB17F4E3D8F1603033
Certificate serial:       1DAB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft
Manifest number:          1DA6
Signing time:             Sat 26 Apr 2025 13:11:11 +0000
Manifest this update:     Sat 26 Apr 2025 13:11:11 +0000
Manifest next update:     Sat 26 Apr 2025 19:11:11 +0000
Files and hashes:         1: 1sXBjM5gMHMLwiKrF_Tj2PFgMDM.crl (hash: +egyHLlzasnajbvHWWYJx22x62B/Znu8FQQQLsPRGYY=)
                          2: bu1io0YGUyVGXJmlBFXCkqNhHzU.roa (hash: yjvnS6F+0OxhpQIQ3KjhJ2RFbPyMa6dRGhAGQNbL7Y4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7595 (0x1dab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6C5C18CCE6030730BC222AB17F4E3D8F1603033
        Validity
            Not Before: Apr 26 13:11:11 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=2078E015442FC65DBF7411835879235714E226A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:8e:cb:cb:20:1c:31:43:d5:f5:45:64:c6:
                    5e:b6:58:91:f9:8c:ba:6a:21:5f:21:5e:da:59:33:
                    2e:09:1f:ab:cf:a2:2f:d2:7b:ea:f1:5b:8d:e5:c5:
                    c2:9e:bb:2b:6b:2b:56:54:cf:97:a6:95:ae:4e:0a:
                    25:45:6c:01:80:e4:09:cd:12:e7:b5:1b:d2:3f:3f:
                    78:08:d6:5d:62:54:b2:e9:7c:42:b8:2b:20:f5:10:
                    64:49:87:10:22:09:f8:5c:5c:fc:92:4d:71:0e:25:
                    19:dc:dc:78:58:35:36:74:12:13:bc:12:89:14:81:
                    0e:23:8e:b6:be:1e:15:2b:b1:36:77:d1:34:34:9a:
                    c9:22:e8:34:e6:fd:ec:f5:9d:d0:9d:89:e9:7a:28:
                    db:fa:21:54:9e:4e:eb:b1:db:7c:b2:27:b6:2b:3f:
                    36:0c:d8:c1:d6:b3:c4:39:fc:45:34:c9:18:75:1d:
                    16:2c:8d:d1:f8:da:a4:be:73:78:42:fa:6a:fa:b5:
                    49:8f:1c:9e:a1:39:85:67:61:a6:7e:9f:33:ba:e1:
                    26:a0:78:ed:bb:d1:49:eb:80:cf:a9:87:1c:15:f7:
                    be:8d:7d:c6:46:1f:82:4a:99:8c:c5:5a:bf:97:df:
                    09:f9:ba:1c:d3:4d:a8:36:9d:a9:85:c3:89:73:ca:
                    5f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:78:E0:15:44:2F:C6:5D:BF:74:11:83:58:79:23:57:14:E2:26:A4
            X509v3 Authority Key Identifier:
                keyid:D6:C5:C1:8C:CE:60:30:73:0B:C2:22:AB:17:F4:E3:D8:F1:60:30:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:74:65:0d:60:4c:b2:96:dd:52:df:53:b8:ce:c0:e0:b8:7e:
         d6:59:4f:bc:00:57:2d:5f:ea:d8:6b:33:a1:0f:5b:78:0b:1f:
         5c:8b:98:6c:4e:54:34:8b:e9:3f:1a:60:29:77:45:15:fc:f8:
         db:18:1c:7e:36:4e:05:5e:49:b3:4e:c5:60:c0:d5:42:d8:1d:
         37:99:0c:75:99:bf:37:2c:35:b8:1c:de:65:65:e9:9c:fe:f3:
         e8:b5:04:64:b6:8a:fd:b7:3a:86:a9:14:e1:13:1d:2a:ce:9c:
         68:57:7c:46:60:02:15:68:34:af:92:b7:5e:c0:e7:ee:18:3c:
         d3:6a:9e:71:28:44:26:20:88:0f:29:3d:fd:56:7c:96:b9:b7:
         13:18:b3:6d:d8:1c:75:1f:ad:c2:0d:f8:84:c4:96:9b:6d:d7:
         cb:60:c6:94:d2:61:7e:b1:10:fc:8a:10:87:9f:85:b9:f1:f6:
         29:19:a9:26:2c:da:a6:12:4b:2f:df:94:c6:e7:1a:b7:d8:8c:
         f0:d7:36:dd:44:ec:d3:0b:63:a9:ca:ab:5f:6e:8d:23:61:2e:
         56:a7:8f:98:ff:58:ed:ab:4a:43:2a:64:3f:10:f2:3a:be:ef:
         d4:34:46:ce:bd:3f:0f:9d:eb:c4:ae:f6:88:37:ec:6e:99:81:
         08:1c:e1:43
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICHaswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDZD
NUMxOENDRTYwMzA3MzBCQzIyMkFCMTdGNEUzRDhGMTYwMzAzMzAeFw0yNTA0MjYx
MzExMTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDIwNzhFMDE1NDQyRkM2
NURCRjc0MTE4MzU4NzkyMzU3MTRFMjI2QTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/247LyyAcMUPV9UVkxl62WJH5jLpqIV8hXtpZMy4JH6vPoi/S
e+rxW43lxcKeuytrK1ZUz5emla5OCiVFbAGA5AnNEue1G9I/P3gI1l1iVLLpfEK4
KyD1EGRJhxAiCfhcXPySTXEOJRnc3HhYNTZ0EhO8EokUgQ4jjra+HhUrsTZ30TQ0
mski6DTm/ez1ndCdiel6KNv6IVSeTuux23yyJ7YrPzYM2MHWs8Q5/EU0yRh1HRYs
jdH42qS+c3hC+mr6tUmPHJ6hOYVnYaZ+nzO64SageO270UnrgM+phxwV976NfcZG
H4JKmYzFWr+X3wn5uhzTTag2namFw4lzyl+fAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUIHjgFUQvxl2/dBGDWHkjVxTiJqQwHwYDVR0jBBgwFoAU1sXBjM5gMHMLwiKr
F/Tj2PFgMDMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc5
My8xc1hCak01Z01ITUx3aUtyRl9UajJQRmdNRE0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzFzWEJqTTVnTUhNTHdpS3JGX1RqMlBGZ01ETS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3OTMvMXNYQmpNNWdNSE1M
d2lLckZfVGoyUEZnTURNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBANB0ZQ1gTLKW3VLfU7jOwOC4ftZZT7wAVy1f6thrM6EPW3gLH1yLmGxOVDSL
6T8aYCl3RRX8+NsYHH42TgVeSbNOxWDA1ULYHTeZDHWZvzcsNbgc3mVl6Zz+8+i1
BGS2iv23OoapFOETHSrOnGhXfEZgAhVoNK+St17A5+4YPNNqnnEoRCYgiA8pPf1W
fJa5txMYs23YHHUfrcIN+ITElptt18tgxpTSYX6xEPyKEIefhbnx9ikZqSYs2qYS
Sy/flMbnGrfYjPDXNt1E7NMLY6nKq19ujSNhLlanj5j/WO2rSkMqZD8Q8jq+79Q0
Rs69Pw+d68Su9og37G6ZgQgc4UM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:02:57 2025 by rpki-client