Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2910/xfY9wEJF0xbOgOpILixnj8Mk2eo.mft
File:                     xfY9wEJF0xbOgOpILixnj8Mk2eo.mft (raw, json)
Hash identifier:          nhj2d8DJzJP3BBQ+1NCGtWh7JoXXOW5VykyXm9T87fU=
Subject key identifier:   41:EE:FB:98:F4:25:99:55:4A:7E:EA:3D:D2:F1:EB:1C:E7:83:F9:CD
Authority key identifier: C5:F6:3D:C0:42:45:D3:16:CE:80:EA:48:2E:2C:67:8F:C3:24:D9:EA
Certificate issuer:       /CN=C5F63DC04245D316CE80EA482E2C678FC324D9EA
Certificate serial:       13F9
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xfY9wEJF0xbOgOpILixnj8Mk2eo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2910/xfY9wEJF0xbOgOpILixnj8Mk2eo.mft
Manifest number:          13F9
Signing time:             Fri 04 Apr 2025 19:08:06 +0000
Manifest this update:     Fri 04 Apr 2025 19:08:06 +0000
Manifest next update:     Sat 05 Apr 2025 01:08:06 +0000
Files and hashes:         1: xfY9wEJF0xbOgOpILixnj8Mk2eo.crl (hash: HwbqSswRK952y1npXF3JGAW3v1xSR4dtTmylCKIw4iA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5113 (0x13f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5F63DC04245D316CE80EA482E2C678FC324D9EA
        Validity
            Not Before: Apr  4 19:08:06 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=41EEFB98F42599554A7EEA3DD2F1EB1CE783F9CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:73:56:03:e0:45:86:b0:2e:07:31:8b:bc:bf:
                    42:77:d3:36:4a:e7:48:63:64:cf:61:d6:14:e4:89:
                    38:d4:6e:0b:02:ac:40:f2:f5:cd:91:94:14:47:8f:
                    7a:0f:b6:7d:0b:6c:18:e2:03:5b:a9:49:14:83:ca:
                    d1:6e:cf:da:04:7c:8a:17:7c:64:fd:ef:5f:ab:62:
                    05:ab:42:19:dc:e5:1a:d5:c0:ac:09:94:c8:fe:98:
                    7e:32:a3:02:8c:52:31:81:a5:70:1b:bc:15:fe:69:
                    88:11:62:62:51:8d:ba:2d:de:fa:26:39:d6:6d:7b:
                    34:92:79:77:c3:63:fb:06:e5:9e:11:9a:31:cf:52:
                    d9:4a:36:75:57:60:3a:1d:0a:5b:04:19:e4:4e:a8:
                    a2:a2:15:74:aa:19:f2:b7:a6:f6:70:6f:1a:70:d4:
                    4e:86:64:66:38:ac:45:a2:72:3d:6c:4b:59:2c:74:
                    d5:21:72:6d:ba:d2:a8:01:ac:87:8a:ba:64:00:c9:
                    3a:40:19:b4:56:0b:7f:a1:b6:bf:18:fe:2e:3d:e7:
                    bc:44:e3:3a:e0:29:b5:2c:01:38:25:52:36:a4:85:
                    fc:b9:a1:c7:69:b3:cc:30:fd:fa:76:ed:8a:18:2e:
                    f1:ad:f4:b4:05:51:46:ae:5a:3a:71:c8:25:df:65:
                    29:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EE:FB:98:F4:25:99:55:4A:7E:EA:3D:D2:F1:EB:1C:E7:83:F9:CD
            X509v3 Authority Key Identifier:
                keyid:C5:F6:3D:C0:42:45:D3:16:CE:80:EA:48:2E:2C:67:8F:C3:24:D9:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2910/xfY9wEJF0xbOgOpILixnj8Mk2eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xfY9wEJF0xbOgOpILixnj8Mk2eo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2910/xfY9wEJF0xbOgOpILixnj8Mk2eo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:eb:12:5c:0b:1c:61:8a:fe:12:9d:df:dc:e4:f6:02:5b:19:
         94:16:8c:62:de:2a:9d:d1:fc:0d:ba:76:4f:43:31:56:bb:a0:
         af:24:9b:3e:a4:33:82:83:af:92:c2:fe:dc:35:f7:63:72:26:
         0b:21:e4:1e:56:fa:f8:66:08:5c:7e:99:57:1c:6f:5e:34:a4:
         07:81:5f:28:07:9e:d1:5c:df:5b:a6:97:6e:5a:4e:df:9f:af:
         96:a3:53:d5:f2:30:75:7f:f0:0b:22:3b:ae:63:90:84:7e:f5:
         2d:23:eb:ac:31:81:7c:8c:54:89:3b:9c:2c:86:68:0c:96:61:
         d1:ec:7f:14:61:b3:9a:76:3a:14:1b:bf:46:2f:99:2f:a9:b6:
         8a:aa:49:62:f6:05:dd:ed:3e:a8:3a:8c:bf:2c:e6:c8:8c:ab:
         ef:fc:67:12:ed:4e:4a:85:f0:34:99:29:8d:2e:fd:81:92:c5:
         8a:92:fe:22:8c:d4:68:e9:64:83:23:b5:e6:89:41:4b:7c:9f:
         b4:85:5b:ec:c7:40:cd:ce:2d:e2:68:92:59:93:83:0c:66:49:
         c2:70:fd:9f:44:5b:97:8a:ee:06:14:b8:9b:4c:9b:2f:66:e1:
         61:a1:1f:04:99:70:e7:21:b7:be:dc:ab:e5:77:68:ee:69:43:
         5f:a9:18:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:52 2025 by rpki-client