Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft
File:                     SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft (raw, json)
Hash identifier:          j+c3RiauiGLRsMxOIQINZ7jPkMuj9qLu864yemat/BU=
Subject key identifier:   3E:57:93:88:59:E1:87:A2:C4:51:D1:66:42:21:06:DB:45:82:10:85
Authority key identifier: 48:E4:8A:FA:F1:F8:99:4A:66:75:66:CF:5F:D3:64:FA:75:B0:68:6F
Certificate issuer:       /CN=48E48AFAF1F8994A667566CF5FD364FA75B0686F
Certificate serial:       0B04
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft
Manifest number:          0B04
Signing time:             Sun 15 Jun 2025 07:19:10 +0000
Manifest this update:     Sun 15 Jun 2025 07:19:10 +0000
Manifest next update:     Sun 15 Jun 2025 13:19:10 +0000
Files and hashes:         1: SOSK-vH4mUpmdWbPX9Nk-nWwaG8.crl (hash: 9uEWVCfYY9t/Y1fKJI+12oinAT8DG2e3JFm6QTyAzEs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2820 (0xb04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48E48AFAF1F8994A667566CF5FD364FA75B0686F
        Validity
            Not Before: Jun 15 07:19:10 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=3E57938859E187A2C451D166422106DB45821085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ed:ef:9a:86:f7:ef:22:38:0b:68:89:27:3e:
                    83:99:5a:37:75:00:79:34:33:93:4a:ed:6c:85:53:
                    ca:31:28:da:8b:e0:e1:7a:ae:0a:76:f2:47:a5:79:
                    0e:8e:5c:15:3c:cd:96:0c:65:ca:2a:d8:bc:ee:a4:
                    11:fb:e5:d1:33:94:31:d7:af:1c:64:f7:f7:81:06:
                    88:6c:9e:4a:59:8e:82:14:b1:a9:8a:2f:14:fd:2a:
                    0e:b6:aa:fc:48:51:e0:55:c1:2a:70:e7:ca:f5:77:
                    6c:0e:b9:9a:e2:fc:cf:59:4c:4b:66:c8:41:67:3c:
                    e5:18:9d:65:cd:da:04:00:d1:6f:4d:64:0a:44:ef:
                    3b:e4:d2:70:b6:98:36:a0:0c:fd:ac:2c:bd:73:c1:
                    aa:3a:45:6d:3c:63:6d:de:e6:1f:77:9e:94:62:00:
                    ea:05:da:02:72:e2:ca:9e:bf:a6:08:51:f6:7a:0d:
                    09:06:1a:66:54:53:4e:38:f2:f8:65:46:f0:0b:ad:
                    ea:4d:c3:fa:a2:52:78:ee:a8:ab:24:78:e9:90:9b:
                    f9:44:1e:7e:fa:1b:35:e7:32:7b:1c:1e:a1:e9:76:
                    d1:ee:a1:5a:13:98:8e:3a:d1:97:82:5d:11:52:f1:
                    de:d7:b5:ff:8b:3a:7c:3d:f7:30:23:54:c9:ac:60:
                    b6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:57:93:88:59:E1:87:A2:C4:51:D1:66:42:21:06:DB:45:82:10:85
            X509v3 Authority Key Identifier:
                keyid:48:E4:8A:FA:F1:F8:99:4A:66:75:66:CF:5F:D3:64:FA:75:B0:68:6F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:cc:4b:50:aa:9c:20:b7:fa:c0:a8:17:9b:fa:49:f8:82:06:
         15:4c:a7:fc:1b:dc:a4:d4:30:8f:36:bb:83:d9:26:7e:f4:84:
         d0:06:5f:11:76:a3:b5:ab:12:45:98:59:bf:65:24:78:95:25:
         d1:e9:b2:44:08:52:d7:1c:59:61:85:c7:45:d9:e1:5f:16:2c:
         23:17:c0:ad:a5:17:ad:74:94:11:75:0f:80:76:3b:8b:c1:0b:
         9b:5a:3c:27:d1:eb:77:7b:55:8d:3b:1b:14:db:39:72:57:04:
         97:d8:9e:9e:18:65:6e:09:1e:0c:17:d8:24:c4:62:59:f2:d1:
         90:df:d1:77:21:af:db:2d:d4:b1:a0:5f:f2:30:d4:d0:f3:08:
         88:65:ff:8c:9c:a5:cb:6c:8d:c8:d6:03:df:b8:b5:4d:df:15:
         23:94:ec:0a:2e:02:cc:a0:cd:91:25:ef:9f:1a:e8:6e:84:29:
         de:be:af:0a:54:34:4e:d5:dd:89:0c:9b:bb:74:69:b4:7e:fe:
         79:36:1b:30:50:98:be:ae:44:3d:64:81:04:30:d8:da:4c:96:
         d6:6f:ab:2b:24:8c:f6:f6:cd:4e:4f:1c:5c:03:e4:31:e7:9f:
         17:fe:3b:44:bc:61:d1:97:fd:11:93:58:cb:e1:42:13:82:c2:
         fd:c6:98:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:27:16 2025 by rpki-client