Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3338/Ecx0P_pgKFVeC5k8550d_TD1MSU.mft
File:                     Ecx0P_pgKFVeC5k8550d_TD1MSU.mft (raw, json)
Hash identifier:          gGOLHln/8Ixl+nKcp5l3rz/xmKhoWFlZw0UM0irwA+w=
Subject key identifier:   56:E1:40:C8:49:05:DC:87:D1:6E:10:6E:6A:5A:AA:A5:1B:99:6D:FE
Authority key identifier: 11:CC:74:3F:FA:60:28:55:5E:0B:99:3C:E7:9D:1D:FD:30:F5:31:25
Certificate issuer:       /CN=11CC743FFA6028555E0B993CE79D1DFD30F53125
Certificate serial:       01EC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Ecx0P_pgKFVeC5k8550d_TD1MSU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/Ecx0P_pgKFVeC5k8550d_TD1MSU.mft
Manifest number:          01EC
Signing time:             Fri 21 Mar 2025 00:32:05 +0000
Manifest this update:     Fri 21 Mar 2025 00:32:05 +0000
Manifest next update:     Fri 21 Mar 2025 06:32:05 +0000
Files and hashes:         1: Ecx0P_pgKFVeC5k8550d_TD1MSU.crl (hash: VTnjGec0Uf4PXkZEmuN1GWJUAb6NM6JsGai/2gh5y40=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11CC743FFA6028555E0B993CE79D1DFD30F53125
        Validity
            Not Before: Mar 21 00:32:05 2025 GMT
            Not After : Dec 10 08:49:25 2025 GMT
        Subject: CN=56E140C84905DC87D16E106E6A5AAAA51B996DFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fa:eb:87:5d:c6:d2:5b:8c:27:b5:5d:cf:fa:
                    5d:ae:21:6f:e3:5c:5f:50:55:c9:8f:a2:60:52:05:
                    16:4d:a2:47:59:f4:88:12:b4:01:e3:f7:86:70:3b:
                    b8:11:21:98:bd:74:af:34:95:e3:6a:5d:b1:88:72:
                    6e:25:12:73:d6:41:7c:78:86:e2:6d:64:92:97:fe:
                    5d:26:97:01:66:96:30:f8:e2:66:d6:ee:27:c5:5d:
                    a7:d8:a7:18:35:4c:8f:34:42:a5:d2:f2:99:40:4e:
                    71:5a:cc:ff:dc:94:5c:82:c3:55:90:ce:78:09:83:
                    e7:00:d5:e9:df:f3:92:b6:7a:65:71:ea:63:09:d8:
                    84:4c:cd:d8:71:b9:b3:0f:84:f7:17:c3:96:3d:f7:
                    3f:d8:f9:6f:88:a0:dc:96:36:76:bb:ee:a4:dd:2d:
                    4f:17:bc:79:15:2d:f6:fd:f8:6b:c6:15:38:39:cb:
                    6f:98:b3:71:46:af:30:a2:53:62:9f:13:f6:1c:37:
                    ff:e2:a4:ca:ad:66:d9:e7:6a:17:8e:56:18:8f:38:
                    97:20:2b:7d:28:d7:67:b6:3f:ee:cb:16:71:b5:c2:
                    e4:d2:f1:47:3e:b3:2f:4f:9e:05:27:4f:c9:33:a8:
                    6e:44:59:bc:e2:34:b1:85:64:12:74:67:e7:79:28:
                    08:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E1:40:C8:49:05:DC:87:D1:6E:10:6E:6A:5A:AA:A5:1B:99:6D:FE
            X509v3 Authority Key Identifier:
                keyid:11:CC:74:3F:FA:60:28:55:5E:0B:99:3C:E7:9D:1D:FD:30:F5:31:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/Ecx0P_pgKFVeC5k8550d_TD1MSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Ecx0P_pgKFVeC5k8550d_TD1MSU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/Ecx0P_pgKFVeC5k8550d_TD1MSU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:8b:85:6a:2a:3e:80:84:62:6a:6f:37:5e:5c:bf:1a:a8:10:
         fc:ac:89:e8:ac:9f:29:35:b8:a3:fd:54:9d:25:a8:5e:24:98:
         7b:d1:b6:5b:a6:52:1b:e0:9f:00:08:6a:cc:ca:9f:13:93:fc:
         3a:2b:d3:7b:5a:f2:0e:58:1e:fd:80:9f:af:11:4e:96:1b:61:
         52:85:68:71:d9:a9:95:88:4a:c7:29:77:22:00:bf:c5:dc:ce:
         f2:74:ec:67:26:ce:97:ee:3c:18:23:91:e8:0a:ed:20:69:14:
         1a:93:2c:cd:6b:df:6e:a3:91:53:29:18:b7:42:c8:cc:c7:b9:
         cb:ea:63:65:88:a7:24:05:4b:69:8f:76:37:c1:13:a6:01:d9:
         65:bb:49:3f:22:70:0b:86:64:db:87:ec:59:4d:36:2a:d6:96:
         eb:10:0e:9f:40:9b:74:70:d1:fd:ff:b7:f1:a9:be:ee:03:1e:
         56:f0:3a:28:c0:bc:5b:69:51:c1:b0:21:d7:ff:c2:d5:2b:8f:
         e8:ec:6c:a9:9b:96:28:c4:2d:4b:b9:ce:b0:6d:e0:f1:54:46:
         89:3f:9a:b1:22:23:1d:ec:83:c3:64:cf:3e:a8:3c:a5:4b:49:
         5a:64:f8:42:c4:62:d2:99:ba:e0:97:eb:6b:7b:1c:30:b5:cd:
         7b:2d:98:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:28:56 2025 by rpki-client