Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1228/bMukxhA3mRD8FzJKB0sOAEAkeDM.mft
File:                     bMukxhA3mRD8FzJKB0sOAEAkeDM.mft (raw, json)
Hash identifier:          bsF1QM0iO0tTB5xRpBDEmrT2oRTVIWGcJUmOCL4+xzc=
Subject key identifier:   D5:89:D4:77:C7:F2:03:1A:37:EE:D4:CE:50:4E:A8:A2:AD:F2:FB:3E
Authority key identifier: 6C:CB:A4:C6:10:37:99:10:FC:17:32:4A:07:4B:0E:00:40:24:78:33
Certificate issuer:       /CN=6CCBA4C610379910FC17324A074B0E0040247833
Certificate serial:       5D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bMukxhA3mRD8FzJKB0sOAEAkeDM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/bMukxhA3mRD8FzJKB0sOAEAkeDM.mft
Manifest number:          5D
Signing time:             Tue 03 Jun 2025 18:08:44 +0000
Manifest this update:     Tue 03 Jun 2025 18:08:44 +0000
Manifest next update:     Wed 04 Jun 2025 00:08:44 +0000
Files and hashes:         1: bMukxhA3mRD8FzJKB0sOAEAkeDM.crl (hash: K2aoEKFVE0yVduhi29hlU9r0RWdn105vFtNLlJ4KeVo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CCBA4C610379910FC17324A074B0E0040247833
        Validity
            Not Before: Jun  3 18:08:44 2025 GMT
            Not After : May 16 10:06:17 2026 GMT
        Subject: CN=D589D477C7F2031A37EED4CE504EA8A2ADF2FB3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e3:3d:34:a7:bb:0f:d3:e8:9f:f8:60:4a:5a:
                    02:d3:b1:af:5a:f6:bf:e2:17:df:84:80:e4:9e:77:
                    da:08:7c:43:e1:be:dd:1e:2e:9b:6e:2a:e7:73:aa:
                    55:3a:db:d5:5a:1b:17:ac:29:0c:90:b3:f1:f9:31:
                    9b:17:da:f5:92:18:ed:d0:9b:e0:18:53:fe:2c:bb:
                    0d:d8:78:d3:e1:f5:78:ae:34:97:4a:af:3d:2b:10:
                    ac:ea:24:cb:55:ca:ca:30:9b:b1:38:39:f8:56:11:
                    a1:f4:7e:af:49:20:02:3d:f3:b1:d9:23:a1:5d:72:
                    3f:16:40:31:4d:33:56:01:c2:42:73:fd:f8:ea:d3:
                    3a:fc:f3:35:26:c5:01:86:c7:35:66:7d:cf:e0:71:
                    fd:3a:69:f6:3c:da:8a:1d:7e:b8:5d:2d:92:f0:ba:
                    72:dd:c1:c5:4c:42:f0:52:66:54:0f:a9:33:73:59:
                    1c:e0:63:12:6c:6b:53:de:26:77:55:47:5a:40:40:
                    1e:14:a4:d7:f8:fe:0c:83:02:85:70:0b:80:08:27:
                    6c:37:36:10:aa:7c:0e:f7:ed:f5:f0:fa:3e:ba:99:
                    ed:9a:2e:90:9b:86:1b:bc:db:12:01:2a:69:16:09:
                    c3:d6:c2:de:fb:08:29:03:a3:ce:a5:a1:66:ed:df:
                    c2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:89:D4:77:C7:F2:03:1A:37:EE:D4:CE:50:4E:A8:A2:AD:F2:FB:3E
            X509v3 Authority Key Identifier:
                keyid:6C:CB:A4:C6:10:37:99:10:FC:17:32:4A:07:4B:0E:00:40:24:78:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/bMukxhA3mRD8FzJKB0sOAEAkeDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bMukxhA3mRD8FzJKB0sOAEAkeDM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/bMukxhA3mRD8FzJKB0sOAEAkeDM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:07:46:72:d8:3e:36:4f:1f:08:b3:89:be:99:27:db:fe:47:
         3c:bc:78:8f:14:5d:b5:54:c7:5a:07:d2:1a:ab:46:20:70:04:
         b4:9e:ca:de:3b:c9:e3:e9:a2:5e:0f:b5:85:8e:1b:a7:a4:1a:
         d4:db:67:93:16:c9:cf:68:5e:de:ed:d0:46:a0:be:d8:99:6c:
         a8:3b:05:76:7f:55:21:3a:04:a0:f5:d8:d4:b4:e5:75:de:ca:
         ec:84:33:1f:41:8a:3a:2e:a7:39:da:9a:33:8e:f9:54:9b:c5:
         7f:9e:72:bc:e6:3e:9a:fa:94:2d:63:6e:16:2f:e2:32:a7:08:
         d6:f9:cb:a9:a8:bf:78:bf:83:89:9e:29:17:ec:f2:8b:37:bb:
         b0:c5:3d:50:1e:4b:27:4e:f9:f1:9a:d6:91:e3:e2:fd:76:15:
         9b:0a:4a:cf:f3:d9:d3:77:ae:ca:26:46:45:e5:47:6a:6f:54:
         2f:73:68:f9:f0:ad:fb:1c:5c:88:f5:cb:1f:e6:85:1f:a0:40:
         0e:79:6a:07:d4:58:77:98:44:35:2d:1c:eb:81:d9:be:24:18:
         9a:24:4f:bb:20:b1:d4:15:5d:f9:a1:eb:81:40:b8:33:7d:af:
         66:5d:d4:30:a2:f5:bb:4f:d0:75:72:16:7e:45:4e:6d:69:89:
         bc:3d:12:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:06:45 2025 by rpki-client