Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
File:                     7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft (raw, json)
Hash identifier:          +x+W1GiJ7UMYbcvg1oGRyH0wGZvULOoXZp+EkPdRp2Q=
Subject key identifier:   9C:8A:2E:CB:9D:17:92:63:84:68:F7:EE:A8:F5:23:57:DB:56:DA:8A
Authority key identifier: EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50
Certificate issuer:       /CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
Certificate serial:       02C9
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
Manifest number:          02C4
Signing time:             Thu 05 Jun 2025 16:44:20 +0000
Manifest this update:     Thu 05 Jun 2025 16:44:20 +0000
Manifest next update:     Thu 05 Jun 2025 22:44:20 +0000
Files and hashes:         1: 1h4HuYbCbTqUa_3t_xBqkLbVK3I.roa (hash: y1yapVOWcFRVM0HkMcu6W1MzSDLeXbZvTAbExv3iZIU=)
                          2: 7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl (hash: nqBsq9Q8omax08wRhA7WW7Nj4sX8677HUhuxL52jtaA=)
                          3: CKqRUyCkQgDdCvb39FLl8nk3Gp8.roa (hash: hdqcb05bFxknkcwIdqOcWs1KgdleQYiVPEkSdv5OTow=)
                          4: LW8ZY2UtSYeujZ532V0CQrYeABA.roa (hash: F4Bh2cqcnHVRx++IenMMdugPp5fWZpfnO1OTNFONqyY=)
                          5: Yg61RxIhCNGDnQvVtwg-egnxOLU.roa (hash: 3XfY+iN0080xE/fEDKYWFBE5T1lbhQ0g9gRDubSk/jY=)
                          6: si24gGFg-sQtUpvK4DZtlqNS05c.roa (hash: /h7TLGBM959FC9Cv5rtuoN4A205gm+8xj8hpkkz0h/c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713 (0x2c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
        Validity
            Not Before: Jun  5 16:44:20 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=9C8A2ECB9D1792638468F7EEA8F52357DB56DA8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:28:17:41:ad:4f:9b:b3:3f:d5:14:f7:6e:23:
                    85:2b:f9:b4:23:58:8c:8e:b0:bf:70:21:41:33:59:
                    14:32:17:53:a4:0a:cf:90:a2:eb:1a:fc:bb:e3:5a:
                    9a:16:d5:20:3b:8b:c3:b1:92:08:7d:6f:27:ec:63:
                    ea:d5:a3:8c:05:c7:7c:2c:75:ab:d3:71:ed:2f:b6:
                    d0:01:c8:eb:78:d3:0c:8d:dd:74:12:02:6b:53:04:
                    d9:c1:c2:1d:52:35:dd:e3:9a:7a:c9:8b:de:ab:10:
                    66:1e:86:9a:68:a0:b3:30:d5:1e:e4:d2:99:f4:84:
                    26:a7:8f:8b:b5:0e:de:3b:73:c2:1c:51:06:5f:84:
                    d0:f0:47:e2:e1:df:56:51:7f:ce:85:3a:ee:f3:04:
                    5b:16:b6:8f:fd:c7:13:fa:8e:c2:3a:e2:8d:d3:de:
                    0a:2c:9d:71:51:0e:f3:4c:7f:57:c5:4a:81:98:44:
                    c0:6c:db:93:e4:f7:d9:2e:c9:d5:cb:47:0c:7f:7d:
                    99:ee:3f:37:0a:86:1a:33:f7:e8:8c:25:df:c3:d9:
                    e4:2e:c6:cb:5f:a0:e9:81:71:b2:56:d4:2a:c7:92:
                    13:2d:74:f1:a4:23:ca:fa:8f:40:c6:39:13:c6:1e:
                    06:39:d8:40:ea:55:96:62:d4:82:9c:a4:bc:14:44:
                    61:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8A:2E:CB:9D:17:92:63:84:68:F7:EE:A8:F5:23:57:DB:56:DA:8A
            X509v3 Authority Key Identifier:
                keyid:EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:4e:37:c3:0f:36:93:f5:1f:18:b3:c9:dd:c9:f4:b9:b0:a2:
         74:01:34:2b:74:38:2e:39:79:2b:7a:e9:63:2c:7d:87:28:63:
         5e:3e:6a:93:c4:69:ee:40:ce:ee:9c:e0:77:f1:da:60:49:af:
         38:44:35:99:0d:b9:fc:98:bf:32:2f:39:99:d8:ef:e5:2a:14:
         92:45:cd:8b:fd:79:ad:0c:d9:d6:5d:00:77:45:e6:22:f1:a6:
         4c:7e:21:0e:0d:da:d8:e0:44:64:69:3b:a6:eb:2b:1d:fc:15:
         14:98:5b:e1:bb:1f:ec:ef:73:e7:3a:7c:12:d3:af:fc:db:2c:
         25:7f:36:b9:7e:de:c2:be:7a:1c:6c:7a:48:8a:d5:3b:bd:3f:
         dd:33:a6:fb:fa:d6:00:c7:84:3d:1d:71:4c:0e:d2:7d:69:9d:
         24:a7:8f:8a:91:99:dc:d0:44:b5:0c:c2:4c:c1:02:0b:f7:a3:
         69:04:cd:fd:c4:06:17:b0:f6:b9:85:44:ab:0e:7a:9d:5a:1f:
         e1:a4:6a:e9:9a:99:bb:6b:df:52:0a:01:b5:e1:8c:9d:c4:79:
         cd:1e:42:22:87:3e:68:0c:a0:22:98:53:f5:f2:52:50:d4:23:
         9f:f1:10:60:3f:a9:96:6c:b6:7f:7f:4f:5c:87:69:8e:59:3c:
         66:9b:4d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:53:22 2025 by rpki-client