Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2815/bg7MO7fHsBvgmhGJ-9IjV551o58.mft
File:                     bg7MO7fHsBvgmhGJ-9IjV551o58.mft (raw, json)
Hash identifier:          /1rOm0JciNIiC1QsomJeYiLvbQDRPvgNYs4IqJJNsmE=
Subject key identifier:   F7:FA:EA:3A:42:87:F5:47:FF:DB:59:C8:58:16:00:BA:70:6C:67:F9
Authority key identifier: 6E:0E:CC:3B:B7:C7:B0:1B:E0:9A:11:89:FB:D2:23:57:9E:75:A3:9F
Certificate issuer:       /CN=6E0ECC3BB7C7B01BE09A1189FBD223579E75A39F
Certificate serial:       02F9
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bg7MO7fHsBvgmhGJ-9IjV551o58.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/bg7MO7fHsBvgmhGJ-9IjV551o58.mft
Manifest number:          02EA
Signing time:             Fri 22 Nov 2024 15:24:19 +0000
Manifest this update:     Fri 22 Nov 2024 15:24:19 +0000
Manifest next update:     Fri 22 Nov 2024 21:24:19 +0000
Files and hashes:         1: _ley7e5obW1PkQ66K5ms5Of8DF4.roa (hash: eNteG0u5g1cC2q7QYrGr8WcSp4dt9Qp/UC7ykOS0sRs=)
                          2: bg7MO7fHsBvgmhGJ-9IjV551o58.crl (hash: rdlsguncXnNL7VTaOIClpswQQ98npkkIfk8841nXMtA=)
                          3: oMIph03CV5pwGtuc7Fc6DjY4eSM.roa (hash: ZFW6eUi9Bvv4cI95xW3I6Ynqho/AKREUFd8s96oVzps=)
                          4: t1Y8TkIKy-Y6d0FRqfZA7bzvwQI.roa (hash: jCLxu/qBbSEAzWraGyYK11WAkgmtaPk2EY/JcQPKA4Y=)

Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/bg7MO7fHsBvgmhGJ-9IjV551o58.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/bg7MO7fHsBvgmhGJ-9IjV551o58.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bg7MO7fHsBvgmhGJ-9IjV551o58.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 19:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 761 (0x2f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E0ECC3BB7C7B01BE09A1189FBD223579E75A39F
        Validity
            Not Before: Nov 22 15:24:19 2024 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=F7FAEA3A4287F547FFDB59C8581600BA706C67F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:03:5e:59:49:82:66:53:f3:f2:76:a2:c2:43:
                    c7:03:24:2a:02:6f:ec:01:df:71:54:cc:15:fd:15:
                    ce:3a:56:e6:d3:68:17:db:88:35:f0:3d:ab:17:c3:
                    06:04:bb:86:91:59:1f:61:0a:88:79:9f:f5:a7:c4:
                    20:24:d1:b9:84:99:c1:9f:43:c9:09:5f:64:99:6d:
                    cd:43:a1:85:ff:85:16:12:04:19:ad:ac:bc:29:92:
                    6a:94:6b:a0:ba:a3:66:df:6e:73:71:cf:39:ab:47:
                    f6:0d:13:89:84:1f:a9:b5:8f:8e:49:07:19:9b:49:
                    47:71:a5:3f:bc:99:31:aa:3a:b6:2c:5d:b7:12:1a:
                    dc:07:25:d4:35:af:ff:af:96:15:d5:ad:01:48:f0:
                    b3:b7:b3:20:8f:bc:2e:43:78:e0:09:b5:d9:53:c5:
                    03:19:e7:2d:ed:ea:94:dc:22:98:49:17:e9:f5:c0:
                    65:6c:84:66:f4:15:df:da:b4:24:04:09:47:59:f9:
                    51:7b:94:75:4a:09:26:79:52:56:c4:b3:18:68:cf:
                    3d:0a:ce:76:17:fb:fd:4a:d5:6e:95:6b:f4:54:02:
                    38:2b:6e:a3:e6:93:de:a9:74:aa:3a:d8:8c:6d:1a:
                    c1:09:c3:a7:03:44:ac:a4:f1:a8:4e:35:ac:53:d2:
                    92:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FA:EA:3A:42:87:F5:47:FF:DB:59:C8:58:16:00:BA:70:6C:67:F9
            X509v3 Authority Key Identifier:
                keyid:6E:0E:CC:3B:B7:C7:B0:1B:E0:9A:11:89:FB:D2:23:57:9E:75:A3:9F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/bg7MO7fHsBvgmhGJ-9IjV551o58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bg7MO7fHsBvgmhGJ-9IjV551o58.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/bg7MO7fHsBvgmhGJ-9IjV551o58.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:be:57:03:1b:6e:90:6e:33:80:34:7e:42:ef:4c:56:ca:8a:
         36:46:fa:2c:51:26:fd:c9:3e:e4:65:01:fc:a5:1b:3d:2f:01:
         30:a9:b5:5f:c7:46:d2:66:9f:a5:88:c0:af:3b:19:ea:7a:63:
         d4:41:55:f0:5c:eb:6a:ee:9e:57:7e:18:15:19:5d:81:17:d8:
         dd:51:b9:1a:69:55:bc:12:a5:98:b7:70:07:60:00:85:08:48:
         a9:40:54:5c:0f:a0:b8:c5:0b:dc:30:27:43:82:ef:67:b9:45:
         d3:51:dd:a0:24:63:a3:29:35:7a:f4:29:87:33:98:3f:63:9a:
         98:28:cb:79:e2:69:8b:81:bb:49:38:b8:8b:b8:c7:bf:26:b8:
         a1:22:a4:bd:4e:16:d5:da:72:47:af:ec:a7:48:59:99:31:44:
         2c:c1:bb:7b:51:b4:de:78:f3:b5:65:b5:76:3e:7b:74:a2:ab:
         dc:8e:7a:21:cd:5c:42:82:b8:e5:47:f3:e8:ed:1c:22:f8:ec:
         19:7b:99:e7:55:8f:51:18:d3:66:9a:2c:f1:2d:4f:65:13:b0:
         80:ee:ab:56:45:59:2d:c8:0f:04:68:eb:9e:39:94:97:35:15:
         68:47:0e:98:67:0c:52:5f:3b:63:e2:62:e2:c5:ca:44:8a:e4:
         49:d3:98:fd
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICAvkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkUw
RUNDM0JCN0M3QjAxQkUwOUExMTg5RkJEMjIzNTc5RTc1QTM5RjAeFw0yNDExMjIx
NTI0MTlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEY3RkFFQTNBNDI4N0Y1
NDdGRkRCNTlDODU4MTYwMEJBNzA2QzY3RjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuA15ZSYJmU/PydqLCQ8cDJCoCb+wB33FUzBX9Fc46VubTaBfb
iDXwPasXwwYEu4aRWR9hCoh5n/WnxCAk0bmEmcGfQ8kJX2SZbc1DoYX/hRYSBBmt
rLwpkmqUa6C6o2bfbnNxzzmrR/YNE4mEH6m1j45JBxmbSUdxpT+8mTGqOrYsXbcS
GtwHJdQ1r/+vlhXVrQFI8LO3syCPvC5DeOAJtdlTxQMZ5y3t6pTcIphJF+n1wGVs
hGb0Fd/atCQECUdZ+VF7lHVKCSZ5UlbEsxhozz0KznYX+/1K1W6Va/RUAjgrbqPm
k96pdKo62IxtGsEJw6cDRKyk8ahONaxT0pIdAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU9/rqOkKH9Uf/21nIWBYAunBsZ/kwHwYDVR0jBBgwFoAUbg7MO7fHsBvgmhGJ
+9IjV551o58wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx
NS9iZzdNTzdmSHNCdmdtaEdKLTlJalY1NTFvNTguY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2JnN01PN2ZIc0J2Z21oR0otOUlqVjU1MW81OC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTUvYmc3TU83ZkhzQnZn
bWhHSi05SWpWNTUxbzU4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBACW+VwMbbpBuM4A0fkLvTFbKijZG+ixRJv3JPuRlAfylGz0vATCptV/HRtJm
n6WIwK87Gep6Y9RBVfBc62runld+GBUZXYEX2N1RuRppVbwSpZi3cAdgAIUISKlA
VFwPoLjFC9wwJ0OC72e5RdNR3aAkY6MpNXr0KYczmD9jmpgoy3niaYuBu0k4uIu4
x78muKEipL1OFtXackev7KdIWZkxRCzBu3tRtN5487VltXY+e3Siq9yOeiHNXEKC
uOVH8+jtHCL47Bl7medVj1EY02aaLPEtT2UTsIDuq1ZFWS3IDwRo6545lJc1FWhH
DphnDFJfO2PiYuLFykSK5EnTmP0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:36:43 2024 by rpki-client on console-ams.rpki-client.org