Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft
File:                     zfv2KGSEFu4dmdMuX5yWhae-K7w.mft (raw, json)
Hash identifier:          0N1J1Cd6y255pMsyj2QvP2m+cOtpdCH/npuSutgMSVU=
Subject key identifier:   3C:66:EB:21:CE:74:12:47:CB:2A:93:20:E2:5E:8C:EF:32:4D:46:7B
Authority key identifier: CD:FB:F6:28:64:84:16:EE:1D:99:D3:2E:5F:9C:96:85:A7:BE:2B:BC
Certificate issuer:       /CN=CDFBF628648416EE1D99D32E5F9C9685A7BE2BBC
Certificate serial:       1694
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft
Manifest number:          1694
Signing time:             Sun 02 Jun 2024 00:57:47 +0000
Manifest this update:     Sun 02 Jun 2024 00:57:47 +0000
Manifest next update:     Sun 02 Jun 2024 06:57:47 +0000
Files and hashes:         1: zfv2KGSEFu4dmdMuX5yWhae-K7w.crl (hash: IXJWfaTnFtnzrr8n1bfS1Guwem2s5cwpz1Q9uUBthMQ=)

Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Jun 2024 06:57:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5780 (0x1694)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDFBF628648416EE1D99D32E5F9C9685A7BE2BBC
        Validity
            Not Before: Jun  2 00:57:47 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=3C66EB21CE741247CB2A9320E25E8CEF324D467B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:49:8e:33:ee:b4:d8:a8:76:b4:9d:5b:cc:42:
                    2f:9f:47:62:a7:e1:8e:d7:07:e1:e0:5d:02:81:a9:
                    d0:22:bd:24:a3:6e:9b:de:62:be:2a:40:6e:38:19:
                    d3:66:28:57:3b:99:53:71:f2:5c:d4:ea:c3:bd:6c:
                    63:37:85:6b:ef:18:36:68:30:95:90:1a:8b:ee:0e:
                    89:8c:5e:43:ee:c6:df:15:16:3c:34:7e:46:5f:06:
                    ec:d9:86:c9:7c:a8:28:9c:34:56:48:c9:b3:e5:a2:
                    6c:90:33:29:c8:8c:e9:57:34:c6:f6:45:37:f6:71:
                    00:2f:1b:b8:9e:8b:f3:92:5f:88:93:ed:a9:3d:ef:
                    3b:61:74:ad:7b:bf:e7:3e:27:63:a2:88:49:0a:a3:
                    1f:63:11:40:d4:86:24:0f:5a:73:f0:17:3d:33:25:
                    61:42:8f:5f:6e:85:46:f6:90:98:fd:ae:43:2b:02:
                    e5:09:fd:c9:44:df:58:94:36:c2:a7:05:a9:60:18:
                    20:49:44:c6:b4:5a:20:a1:24:05:fa:5a:7e:e4:47:
                    fe:e9:51:73:9b:c1:59:2e:be:3e:9a:84:64:52:8f:
                    c3:c7:31:32:1f:f0:53:4d:4e:9c:81:0a:f0:13:99:
                    d8:61:bf:3b:c8:1d:59:92:30:46:36:2a:ab:87:d8:
                    08:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:66:EB:21:CE:74:12:47:CB:2A:93:20:E2:5E:8C:EF:32:4D:46:7B
            X509v3 Authority Key Identifier:
                keyid:CD:FB:F6:28:64:84:16:EE:1D:99:D3:2E:5F:9C:96:85:A7:BE:2B:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e9:4d:cd:4a:4d:c1:bb:72:90:4a:63:dc:25:75:4b:2f:85:
         a2:df:24:2e:3e:6d:f7:8e:02:d2:10:73:05:1e:5b:3b:e4:e1:
         be:58:de:0c:88:9b:4b:e6:1c:16:8a:84:32:b8:ee:c7:ed:c2:
         7f:9b:60:05:5e:e4:34:f2:9b:fd:e8:67:3b:14:85:50:ae:e0:
         2e:0d:90:0c:81:74:0d:4d:1d:10:ef:7d:07:88:b3:6f:a3:29:
         61:00:75:0b:33:b1:42:fd:a8:6d:16:54:d3:a1:be:c4:e4:34:
         59:01:3e:8e:ac:3d:e4:37:12:a3:9f:47:f9:61:1f:67:0f:8d:
         1a:91:a7:dc:e5:ed:92:37:f2:14:47:f7:ba:2c:00:8a:d3:35:
         d2:81:4e:f4:3f:9d:2e:98:0f:a2:69:cc:5f:b4:22:0d:fe:da:
         77:3d:94:14:2f:aa:22:92:90:d3:14:b2:41:39:c9:45:23:79:
         c9:eb:cd:95:92:e9:30:91:b5:99:9b:b9:25:f9:c0:31:86:7e:
         4e:75:ab:56:d6:de:82:fe:8d:38:16:46:a8:1a:cb:58:f8:04:
         ae:94:e4:a1:19:13:ee:da:0f:76:2b:f3:2a:6f:a5:9b:1e:3d:
         d3:42:29:97:e1:c9:d8:00:3e:f8:cd:b0:97:04:f2:50:ef:54:
         c8:eb:a9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:26:39 2024 by rpki-client on console-ams.rpki-client.org