Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3425/rfvoMVB70kEq-LhxELshC7RrLH4.mft
File:                     rfvoMVB70kEq-LhxELshC7RrLH4.mft (raw, json)
Hash identifier:          y+SDVy55UG3tjQ5/VLSZKajC5lDYFDmtASjdnYMfBYk=
Subject key identifier:   8A:55:C8:D3:C2:FA:F9:F1:35:8C:44:B9:E9:40:DC:67:66:0B:B1:04
Authority key identifier: AD:FB:E8:31:50:7B:D2:41:2A:F8:B8:71:10:BB:21:0B:B4:6B:2C:7E
Certificate issuer:       /CN=ADFBE831507BD2412AF8B87110BB210BB46B2C7E
Certificate serial:       B0
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rfvoMVB70kEq-LhxELshC7RrLH4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3425/rfvoMVB70kEq-LhxELshC7RrLH4.mft
Manifest number:          B0
Signing time:             Mon 02 Mar 2026 07:31:19 +0000
Manifest this update:     Mon 02 Mar 2026 07:31:19 +0000
Manifest next update:     Mon 02 Mar 2026 13:31:19 +0000
Files and hashes:         1: rfvoMVB70kEq-LhxELshC7RrLH4.crl (hash: spTTsPqHQDD1f4XlW/8TVUXFslOWcZhyS4ZjzwPZ1Tc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFBE831507BD2412AF8B87110BB210BB46B2C7E
        Validity
            Not Before: Mar  2 07:31:19 2026 GMT
            Not After : Jan 19 07:29:19 2027 GMT
        Subject: CN=8A55C8D3C2FAF9F1358C44B9E940DC67660BB104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7e:31:31:7d:40:77:f2:65:22:fc:57:99:66:
                    02:8e:b1:ad:49:f3:a7:b4:c3:02:59:b6:00:03:6e:
                    e3:d9:72:e5:53:c5:3c:45:20:d5:92:dc:68:11:a2:
                    57:ac:ac:22:a5:c4:85:67:78:20:ca:d5:8a:3b:85:
                    84:b9:71:77:25:5b:a8:16:e3:1f:7f:0e:1b:58:cd:
                    26:31:46:9f:83:e4:1a:6c:ee:29:8b:8b:c8:51:cc:
                    5d:28:22:60:ed:4e:e5:f8:cc:de:6f:1f:2d:bd:a6:
                    36:14:9e:6b:de:a6:88:87:65:c2:bd:63:7a:83:c5:
                    d4:42:4c:2b:1c:ae:5d:6c:d0:2d:ce:9e:2a:cb:b5:
                    df:a0:87:8a:06:6b:de:1e:63:7e:76:58:f1:60:6f:
                    9d:04:a2:8f:b5:92:a5:4d:5e:e3:83:63:ad:94:e1:
                    95:d0:de:17:b8:c0:fb:e6:e0:f3:24:cb:10:aa:9a:
                    cd:eb:aa:a5:18:5a:98:78:5b:27:80:0b:79:f2:52:
                    47:cb:64:3f:f4:d0:24:b8:02:01:c1:5a:0d:f3:62:
                    03:b7:79:91:7e:9f:6a:3d:3f:cc:f1:85:2a:86:12:
                    a8:25:0f:fc:aa:76:bc:83:5c:25:82:ea:37:31:05:
                    ff:8e:2a:34:c2:09:67:ef:ab:ce:1e:f6:b3:43:6a:
                    fe:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:55:C8:D3:C2:FA:F9:F1:35:8C:44:B9:E9:40:DC:67:66:0B:B1:04
            X509v3 Authority Key Identifier:
                keyid:AD:FB:E8:31:50:7B:D2:41:2A:F8:B8:71:10:BB:21:0B:B4:6B:2C:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3425/rfvoMVB70kEq-LhxELshC7RrLH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rfvoMVB70kEq-LhxELshC7RrLH4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3425/rfvoMVB70kEq-LhxELshC7RrLH4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:70:2f:f1:34:c7:8a:74:ca:9e:0d:28:ea:73:f2:7f:e4:8d:
         94:ac:ce:5f:87:30:2c:f8:0d:02:85:f7:d8:d2:2c:bc:b4:0f:
         f9:04:78:08:84:b7:c4:56:60:10:2e:80:fb:bf:6b:a9:89:11:
         3e:49:89:0b:2e:c4:57:89:1c:13:d7:b4:db:67:21:dc:e7:d0:
         46:b3:45:12:c8:95:6f:8f:4a:eb:17:fb:d4:7d:54:1b:91:42:
         ca:80:4d:08:df:ce:e0:5c:07:a9:57:0a:c6:ad:d7:75:8a:66:
         4d:f1:a6:02:aa:57:ff:ac:34:a4:3d:8b:8c:94:cd:6c:96:d3:
         06:1b:e3:b0:3b:fd:3b:3e:cd:39:c2:7d:f6:98:39:e2:d8:a2:
         7b:7f:ae:1d:69:a0:04:70:6b:5b:9a:05:23:a8:71:e1:01:ab:
         c2:6a:67:94:b7:23:56:1f:2a:5f:40:4b:32:6d:69:00:9f:f0:
         31:b5:d6:69:c7:6f:be:af:ad:a1:32:14:56:3a:11:00:be:78:
         72:19:d2:da:5c:f0:12:74:17:e7:7d:4b:6b:16:05:d9:c4:a3:
         a1:8e:6f:23:a2:52:09:33:07:d8:0b:68:fa:52:e0:98:86:31:
         44:1d:68:de:d2:cc:42:5c:b0:1a:4e:74:bb:a3:f1:ab:7f:50:
         72:aa:89:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:20:06 2026 by rpki-client