Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3288/20kOavCkTf-CaNSAeFjUum7WBtk.mft
File:                     20kOavCkTf-CaNSAeFjUum7WBtk.mft (raw, json)
Hash identifier:          56tgM8oZm57DSf05i4gwqJrC2AFF6uzJycm46qaiJ+0=
Subject key identifier:   4D:97:94:07:C5:7C:64:38:66:39:BA:F7:B7:31:97:0F:D5:BE:CF:78
Authority key identifier: DB:49:0E:6A:F0:A4:4D:FF:82:68:D4:80:78:58:D4:BA:6E:D6:06:D9
Certificate issuer:       /CN=DB490E6AF0A44DFF8268D4807858D4BA6ED606D9
Certificate serial:       0742
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/20kOavCkTf-CaNSAeFjUum7WBtk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3288/20kOavCkTf-CaNSAeFjUum7WBtk.mft
Manifest number:          0742
Signing time:             Sun 15 Jun 2025 07:23:03 +0000
Manifest this update:     Sun 15 Jun 2025 07:23:03 +0000
Manifest next update:     Sun 15 Jun 2025 13:23:03 +0000
Files and hashes:         1: 20kOavCkTf-CaNSAeFjUum7WBtk.crl (hash: oc/1zWg+DJEExbb3e+eE7h48cWCsKWbBcsyRtoell/c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1858 (0x742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB490E6AF0A44DFF8268D4807858D4BA6ED606D9
        Validity
            Not Before: Jun 15 07:23:03 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=4D979407C57C64386639BAF7B731970FD5BECF78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:93:53:e3:24:b9:d9:4b:58:0f:74:13:3b:a7:
                    d2:d4:ad:38:1a:c0:a2:a8:28:9f:c8:b7:a1:70:70:
                    18:84:67:63:22:9b:6e:e3:8d:a5:23:33:e7:3b:6e:
                    73:3c:15:b4:93:03:89:a4:3f:e2:74:8e:e0:42:ed:
                    92:7e:ff:73:76:b7:8c:c9:83:22:9d:88:69:cb:37:
                    30:4b:e3:80:0b:c2:14:73:1b:e1:c4:4a:09:24:3f:
                    de:06:04:60:a0:03:4c:cd:35:36:9e:b4:cb:56:c9:
                    56:dd:4c:c4:c0:ff:56:54:56:e6:81:05:57:75:16:
                    ef:65:3e:5a:2c:b9:83:4f:ac:e7:2b:e9:0a:ab:ec:
                    1e:15:03:cf:fe:f9:43:f0:19:c7:eb:fe:70:95:94:
                    f8:42:cd:1e:2e:76:1f:a7:81:e6:8c:d3:5e:d3:f1:
                    6c:19:cf:b4:30:62:d7:0f:aa:99:f6:47:c3:a7:f6:
                    ad:bc:ee:17:e4:48:77:ae:43:e1:0a:fc:ae:37:91:
                    e2:f6:14:bc:59:45:4d:cf:21:09:2c:3c:bf:5e:b8:
                    48:59:26:fb:b1:52:67:7a:a7:58:78:f2:e0:70:28:
                    81:52:83:f7:be:f0:8a:47:55:00:85:52:ae:e2:0f:
                    d3:85:e9:b0:b9:bd:d2:54:f6:df:00:e0:68:a7:2d:
                    a2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:97:94:07:C5:7C:64:38:66:39:BA:F7:B7:31:97:0F:D5:BE:CF:78
            X509v3 Authority Key Identifier:
                keyid:DB:49:0E:6A:F0:A4:4D:FF:82:68:D4:80:78:58:D4:BA:6E:D6:06:D9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3288/20kOavCkTf-CaNSAeFjUum7WBtk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/20kOavCkTf-CaNSAeFjUum7WBtk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3288/20kOavCkTf-CaNSAeFjUum7WBtk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:7b:c3:bd:42:0c:75:00:3a:d6:22:e7:79:d6:6a:0a:9d:c7:
         5a:58:c9:ef:05:6e:5f:48:dc:0e:74:ee:d1:bc:6b:89:97:a8:
         90:40:60:24:63:76:96:f4:06:00:46:df:36:80:d1:64:ea:0b:
         df:8e:de:77:34:ab:6a:78:98:31:f5:07:bd:f7:04:d2:1d:ae:
         d4:dd:5e:ed:f6:22:5d:db:f6:43:9a:e9:ae:23:49:8b:0e:f6:
         79:84:71:f1:50:46:4e:9b:08:a0:8f:de:4b:18:5e:ef:bb:33:
         5e:ff:7a:b9:c0:ea:d0:c6:db:bd:95:90:93:4a:f9:97:d2:4a:
         c9:b3:88:57:af:d4:2c:5d:23:7a:ae:2e:af:9a:7d:ef:4b:e0:
         b6:74:27:a9:72:92:7c:19:26:5c:22:87:98:1a:d9:b7:d6:0d:
         67:07:fd:67:ff:4e:e6:b9:e3:17:96:34:36:e1:3b:14:85:a3:
         62:26:14:d7:b7:31:65:39:77:47:90:4e:fc:87:ea:40:73:1f:
         1f:82:55:f0:06:5f:0c:66:2c:e3:00:84:1d:eb:6a:33:d6:15:
         75:08:aa:9d:5c:75:8b:5c:6e:07:85:4b:c5:0f:69:bf:4c:e7:
         15:1d:83:4e:7b:46:05:70:84:0c:d7:a4:fe:23:bc:9b:13:b6:
         3c:15:fa:59
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICB0IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREI0
OTBFNkFGMEE0NERGRjgyNjhENDgwNzg1OEQ0QkE2RUQ2MDZEOTAeFw0yNTA2MTUw
NzIzMDNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDREOTc5NDA3QzU3QzY0
Mzg2NjM5QkFGN0I3MzE5NzBGRDVCRUNGNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmk1PjJLnZS1gPdBM7p9LUrTgawKKoKJ/It6FwcBiEZ2Mim27j
jaUjM+c7bnM8FbSTA4mkP+J0juBC7ZJ+/3N2t4zJgyKdiGnLNzBL44ALwhRzG+HE
SgkkP94GBGCgA0zNNTaetMtWyVbdTMTA/1ZUVuaBBVd1Fu9lPlosuYNPrOcr6Qqr
7B4VA8/++UPwGcfr/nCVlPhCzR4udh+ngeaM017T8WwZz7QwYtcPqpn2R8On9q28
7hfkSHeuQ+EK/K43keL2FLxZRU3PIQksPL9euEhZJvuxUmd6p1h48uBwKIFSg/e+
8IpHVQCFUq7iD9OF6bC5vdJU9t8A4GinLaKHAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUTZeUB8V8ZDhmObr3tzGXD9W+z3gwHwYDVR0jBBgwFoAU20kOavCkTf+CaNSA
eFjUum7WBtkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4
OC8yMGtPYXZDa1RmLUNhTlNBZUZqVXVtN1dCdGsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzIwa09hdkNrVGYtQ2FOU0FlRmpVdW03V0J0ay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODgvMjBrT2F2Q2tUZi1D
YU5TQWVGalV1bTdXQnRrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAFp7w71CDHUAOtYi53nWagqdx1pYye8Fbl9I3A507tG8a4mXqJBAYCRjdpb0
BgBG3zaA0WTqC9+O3nc0q2p4mDH1B733BNIdrtTdXu32Il3b9kOa6a4jSYsO9nmE
cfFQRk6bCKCP3ksYXu+7M17/ernA6tDG272VkJNK+ZfSSsmziFev1CxdI3quLq+a
fe9L4LZ0J6lyknwZJlwih5ga2bfWDWcH/Wf/Tua54xeWNDbhOxSFo2ImFNe3MWU5
d0eQTvyH6kBzHx+CVfAGXwxmLOMAhB3rajPWFXUIqp1cdYtcbgeFS8UPab9M5xUd
g057RgVwhAzXpP4jvJsTtjwV+lk=
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:06:16 2025 by rpki-client