Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
File:                     nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft (raw, json)
Hash identifier:          8bKC1X2ZDq3FJQsUKHzuIimobyMpUWpW1p7+50iZJEk=
Subject key identifier:   7A:57:21:AF:CD:60:A6:A8:A6:05:AF:B2:ED:2F:29:0C:DB:87:3B:07
Authority key identifier: 9C:03:80:B9:17:46:0C:50:70:37:F3:CA:7F:53:B4:2B:C2:B8:2D:E7
Certificate issuer:       /CN=9C0380B917460C507037F3CA7F53B42BC2B82DE7
Certificate serial:       05A9
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nAOAuRdGDFBwN_PKf1O0K8K4Lec.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
Manifest number:          05A9
Signing time:             Sun 15 Jun 2025 07:25:17 +0000
Manifest this update:     Sun 15 Jun 2025 07:25:17 +0000
Manifest next update:     Sun 15 Jun 2025 13:25:17 +0000
Files and hashes:         1: nAOAuRdGDFBwN_PKf1O0K8K4Lec.crl (hash: b5y3Lzv2yHJOwBCxxmeoAqsTB40+CO4zeS2kh5XZw1o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1449 (0x5a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0380B917460C507037F3CA7F53B42BC2B82DE7
        Validity
            Not Before: Jun 15 07:25:17 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=7A5721AFCD60A6A8A605AFB2ED2F290CDB873B07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b1:d9:92:c7:fd:89:93:04:00:e3:6d:1f:f9:
                    8d:7a:54:07:e3:48:eb:59:16:8a:db:e3:6f:93:b3:
                    49:bf:1f:ed:1f:41:03:4e:ae:18:7b:1b:cc:7e:ee:
                    2f:28:96:5f:f4:27:03:d6:ed:14:5f:23:bf:70:17:
                    71:72:1e:a1:ff:74:9c:09:59:6a:b4:f3:d3:cb:de:
                    43:68:17:f0:c9:b7:b9:f2:3a:d9:1d:25:78:6a:19:
                    2a:71:0b:06:e7:82:88:f0:48:72:32:fb:fc:92:fe:
                    91:62:b9:15:ed:84:92:a0:28:f6:4d:b5:c6:0b:e5:
                    3d:c2:19:de:17:8d:73:2f:98:b8:3e:a6:1d:ea:a4:
                    20:df:82:f0:1b:3f:c1:20:51:fb:cd:ff:48:ec:1a:
                    5b:e1:82:14:dd:dd:f9:70:bd:b9:97:73:3a:93:36:
                    40:c4:d2:40:75:1a:e9:23:9a:22:7c:62:99:a9:e7:
                    3e:9d:f3:2d:e6:da:90:57:de:50:a2:cb:7d:1d:cf:
                    d5:fd:45:32:45:b3:e0:3e:5d:39:ba:06:12:4a:c9:
                    d3:2a:00:75:95:0c:ee:93:5f:c4:a3:3c:94:4c:a1:
                    94:11:fa:2a:4b:71:10:d6:fd:d4:a9:7e:12:be:f5:
                    7f:9b:92:ee:c8:81:9f:c4:2e:37:ef:c9:ce:9f:d9:
                    12:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:57:21:AF:CD:60:A6:A8:A6:05:AF:B2:ED:2F:29:0C:DB:87:3B:07
            X509v3 Authority Key Identifier:
                keyid:9C:03:80:B9:17:46:0C:50:70:37:F3:CA:7F:53:B4:2B:C2:B8:2D:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nAOAuRdGDFBwN_PKf1O0K8K4Lec.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:05:58:73:b9:6d:75:5f:d4:6e:c2:10:ba:28:bc:88:0d:63:
         94:33:03:2d:dc:16:cb:21:51:46:18:b6:aa:d8:db:37:5a:f4:
         bd:2e:1b:13:5c:7e:c6:b8:48:ee:03:9e:5a:c3:7a:7e:b4:cd:
         4b:6b:4f:4b:55:4b:cd:f7:54:be:11:b6:50:26:76:27:5d:61:
         50:03:83:59:0a:49:9f:89:60:99:d4:49:17:5e:07:7f:c3:e8:
         08:19:68:6d:ea:25:3e:c6:ff:ab:83:c0:84:67:4c:ca:25:2f:
         93:78:f8:f2:b6:9b:c3:f4:17:5d:20:ec:3d:24:28:a7:da:59:
         ab:45:ea:4f:57:18:3c:c1:16:62:32:48:eb:5b:e5:dc:2e:18:
         b4:7e:43:33:0b:e4:02:f1:d6:9b:96:fa:8b:1b:c8:1d:53:99:
         2d:a0:c7:db:07:da:08:d1:d4:31:fd:84:fb:b8:63:b1:3b:99:
         13:1b:f2:9b:2d:04:3f:48:c9:af:43:d8:1f:bb:48:34:53:2f:
         86:32:67:ad:61:ca:82:21:69:8b:4f:95:7e:62:e7:72:c6:a1:
         7c:28:9d:4e:a7:20:6d:39:1f:a3:2c:39:f3:b2:df:89:45:e8:
         94:fc:df:ee:dd:89:3e:61:80:1e:2a:30:0c:f2:e8:87:fa:e3:
         4e:e9:8c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:26:46 2025 by rpki-client