Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft
File:                     zfv2KGSEFu4dmdMuX5yWhae-K7w.mft (raw, json)
Hash identifier:          h1c5/M9++ubI1ZzKZQ05BGJ6y6MtnG/wcbLArhF1nW4=
Subject key identifier:   3C:66:EB:21:CE:74:12:47:CB:2A:93:20:E2:5E:8C:EF:32:4D:46:7B
Authority key identifier: CD:FB:F6:28:64:84:16:EE:1D:99:D3:2E:5F:9C:96:85:A7:BE:2B:BC
Certificate issuer:       /CN=CDFBF628648416EE1D99D32E5F9C9685A7BE2BBC
Certificate serial:       19EB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft
Manifest number:          19EB
Signing time:             Fri 22 Nov 2024 15:25:38 +0000
Manifest this update:     Fri 22 Nov 2024 15:25:38 +0000
Manifest next update:     Fri 22 Nov 2024 21:25:38 +0000
Files and hashes:         1: zfv2KGSEFu4dmdMuX5yWhae-K7w.crl (hash: auO7W61N9Gtk3IcJcsAfN/26TrbewJqJa4oaYmn0PY4=)

Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 19:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6635 (0x19eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDFBF628648416EE1D99D32E5F9C9685A7BE2BBC
        Validity
            Not Before: Nov 22 15:25:38 2024 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=3C66EB21CE741247CB2A9320E25E8CEF324D467B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:49:8e:33:ee:b4:d8:a8:76:b4:9d:5b:cc:42:
                    2f:9f:47:62:a7:e1:8e:d7:07:e1:e0:5d:02:81:a9:
                    d0:22:bd:24:a3:6e:9b:de:62:be:2a:40:6e:38:19:
                    d3:66:28:57:3b:99:53:71:f2:5c:d4:ea:c3:bd:6c:
                    63:37:85:6b:ef:18:36:68:30:95:90:1a:8b:ee:0e:
                    89:8c:5e:43:ee:c6:df:15:16:3c:34:7e:46:5f:06:
                    ec:d9:86:c9:7c:a8:28:9c:34:56:48:c9:b3:e5:a2:
                    6c:90:33:29:c8:8c:e9:57:34:c6:f6:45:37:f6:71:
                    00:2f:1b:b8:9e:8b:f3:92:5f:88:93:ed:a9:3d:ef:
                    3b:61:74:ad:7b:bf:e7:3e:27:63:a2:88:49:0a:a3:
                    1f:63:11:40:d4:86:24:0f:5a:73:f0:17:3d:33:25:
                    61:42:8f:5f:6e:85:46:f6:90:98:fd:ae:43:2b:02:
                    e5:09:fd:c9:44:df:58:94:36:c2:a7:05:a9:60:18:
                    20:49:44:c6:b4:5a:20:a1:24:05:fa:5a:7e:e4:47:
                    fe:e9:51:73:9b:c1:59:2e:be:3e:9a:84:64:52:8f:
                    c3:c7:31:32:1f:f0:53:4d:4e:9c:81:0a:f0:13:99:
                    d8:61:bf:3b:c8:1d:59:92:30:46:36:2a:ab:87:d8:
                    08:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:66:EB:21:CE:74:12:47:CB:2A:93:20:E2:5E:8C:EF:32:4D:46:7B
            X509v3 Authority Key Identifier:
                keyid:CD:FB:F6:28:64:84:16:EE:1D:99:D3:2E:5F:9C:96:85:A7:BE:2B:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:04:55:e6:35:19:96:07:88:bd:59:2d:1e:26:48:0f:a5:91:
         7e:e4:2e:e7:f4:06:f6:9d:4a:ac:f3:f8:8b:12:2f:9d:af:aa:
         f5:2c:65:20:f1:91:2e:2f:e3:07:c6:e5:81:df:aa:07:12:1d:
         91:17:73:f8:84:ad:09:7a:0c:a8:31:f9:29:99:71:91:2f:84:
         1e:89:9c:cb:c3:40:f6:39:32:01:6e:25:1f:6f:4e:71:ac:b8:
         14:77:ae:f3:68:f9:14:5a:ea:8b:f8:09:78:1e:c7:60:b5:48:
         e6:3a:16:4c:3a:ad:2e:fb:a6:5d:92:ac:ba:72:6c:ec:28:40:
         44:2b:cf:27:7c:e9:26:d8:5b:f8:c6:cb:c3:f6:65:c2:4d:a6:
         bd:5c:df:9d:04:24:75:19:36:ca:66:01:10:ba:b4:cf:fb:af:
         19:49:56:21:34:48:26:c3:74:3d:f4:55:a6:e8:8d:fd:e0:2d:
         44:28:cf:3e:b6:f3:36:7e:33:15:34:22:a4:96:00:7b:90:e2:
         bb:f9:41:bc:4b:aa:21:95:0c:57:72:65:92:7f:66:7e:59:0f:
         ee:73:c5:ec:32:4e:e5:c3:c5:16:9d:8b:56:f2:f6:52:da:ed:
         e6:50:88:f5:30:2f:3c:8d:89:73:d8:e2:95:10:e0:f1:5d:a0:
         10:51:7d:82
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICGeswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0RG
QkY2Mjg2NDg0MTZFRTFEOTlEMzJFNUY5Qzk2ODVBN0JFMkJCQzAeFw0yNDExMjIx
NTI1MzhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDNDNjZFQjIxQ0U3NDEy
NDdDQjJBOTMyMEUyNUU4Q0VGMzI0RDQ2N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDtSY4z7rTYqHa0nVvMQi+fR2Kn4Y7XB+HgXQKBqdAivSSjbpve
Yr4qQG44GdNmKFc7mVNx8lzU6sO9bGM3hWvvGDZoMJWQGovuDomMXkPuxt8VFjw0
fkZfBuzZhsl8qCicNFZIybPlomyQMynIjOlXNMb2RTf2cQAvG7iei/OSX4iT7ak9
7zthdK17v+c+J2OiiEkKox9jEUDUhiQPWnPwFz0zJWFCj19uhUb2kJj9rkMrAuUJ
/clE31iUNsKnBalgGCBJRMa0WiChJAX6Wn7kR/7pUXObwVkuvj6ahGRSj8PHMTIf
8FNNTpyBCvATmdhhvzvIHVmSMEY2KquH2AjHAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUPGbrIc50EkfLKpMg4l6M7zJNRnswHwYDVR0jBBgwFoAUzfv2KGSEFu4dmdMu
X5yWhae+K7wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcy
My96ZnYyS0dTRUZ1NGRtZE11WDV5V2hhZS1LN3cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3pmdjJLR1NFRnU0ZG1kTXVYNXlXaGFlLUs3dy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MjMvemZ2MktHU0VGdTRk
bWRNdVg1eVdoYWUtSzd3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAGcEVeY1GZYHiL1ZLR4mSA+lkX7kLuf0BvadSqzz+IsSL52vqvUsZSDxkS4v
4wfG5YHfqgcSHZEXc/iErQl6DKgx+SmZcZEvhB6JnMvDQPY5MgFuJR9vTnGsuBR3
rvNo+RRa6ov4CXgex2C1SOY6Fkw6rS77pl2SrLpybOwoQEQrzyd86SbYW/jGy8P2
ZcJNpr1c350EJHUZNspmARC6tM/7rxlJViE0SCbDdD30Vabojf3gLUQozz628zZ+
MxU0IqSWAHuQ4rv5QbxLqiGVDFdyZZJ/Zn5ZD+5zxewyTuXDxRadi1by9lLa7eZQ
iPUwLzyNiXPY4pUQ4PFdoBBRfYI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:36:43 2024 by rpki-client on console-ams.rpki-client.org