Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft
File:                     Nd6o5bEoW5KyERchGKNBqy3bdrU.mft (raw, json)
Hash identifier:          gK+FqFMCk6iFUPhru2GRY2eR3/RPbmQnp6VmTcQ8tJA=
Subject key identifier:   5B:F9:11:87:43:5E:01:A8:42:77:63:55:A2:D3:F3:D0:C6:B7:54:47
Authority key identifier: 35:DE:A8:E5:B1:28:5B:92:B2:11:17:21:18:A3:41:AB:2D:DB:76:B5
Certificate issuer:       /CN=35DEA8E5B1285B92B211172118A341AB2DDB76B5
Certificate serial:       064E
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft
Manifest number:          064E
Signing time:             Fri 14 Jun 2024 22:25:41 +0000
Manifest this update:     Fri 14 Jun 2024 22:25:41 +0000
Manifest next update:     Sat 15 Jun 2024 04:25:41 +0000
Files and hashes:         1: Nd6o5bEoW5KyERchGKNBqy3bdrU.crl (hash: J36l0AVHlcHsAItlJnqpmwD9BM/RDamJvV5H8Bhv4J8=)

Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Jun 2024 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1614 (0x64e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35DEA8E5B1285B92B211172118A341AB2DDB76B5
        Validity
            Not Before: Jun 14 22:25:41 2024 GMT
            Not After : Oct  8 00:16:33 2024 GMT
        Subject: CN=5BF91187435E01A842776355A2D3F3D0C6B75447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d6:4a:2e:e3:69:8c:36:a2:0f:c6:e1:ab:fa:
                    a2:b8:c7:c6:f4:4f:0b:69:37:bd:7d:e9:b1:d2:d7:
                    a3:24:85:7c:76:27:64:4d:ed:80:85:14:bb:3e:13:
                    65:f5:c8:27:33:60:41:5b:7d:61:d2:af:4a:c4:5d:
                    f4:20:d5:b9:95:1d:43:95:d1:fd:ba:e7:ac:b9:6d:
                    c7:8a:31:7c:c2:5a:43:2a:f4:7f:da:3a:06:61:59:
                    60:45:5f:ca:e3:dd:ac:ce:be:b3:ed:35:c9:6f:89:
                    0c:e8:2a:a0:99:f3:54:27:86:81:eb:1b:88:e5:55:
                    6e:b7:ef:a2:91:aa:4e:87:b5:be:43:4e:36:dc:d8:
                    aa:30:14:03:f4:1e:2b:ae:1c:1a:26:0c:5d:39:e6:
                    68:eb:10:a7:ea:b1:6f:b0:b3:e9:f9:89:a2:8e:68:
                    0a:20:19:9a:91:27:df:a5:27:05:f8:79:1a:16:80:
                    a1:0d:16:dc:2b:9c:ac:0f:8a:6b:cc:b3:3f:8d:00:
                    8e:5e:3f:3e:f5:77:80:e4:fc:9e:57:18:23:25:bf:
                    4b:c0:f7:23:72:90:43:d5:75:78:21:d0:87:e4:b2:
                    b2:fb:d8:27:55:99:82:8e:68:53:18:f8:1a:88:95:
                    97:73:d4:5c:33:89:56:99:70:1a:bf:13:72:db:07:
                    19:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F9:11:87:43:5E:01:A8:42:77:63:55:A2:D3:F3:D0:C6:B7:54:47
            X509v3 Authority Key Identifier:
                keyid:35:DE:A8:E5:B1:28:5B:92:B2:11:17:21:18:A3:41:AB:2D:DB:76:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:eb:f8:b7:a1:0d:cd:4d:40:8e:f2:e8:47:20:ec:9a:54:1c:
         62:0b:54:29:56:8f:38:98:42:b9:f9:f8:ba:53:f0:f9:41:cb:
         35:06:a3:0e:4f:39:8c:bc:82:09:e4:a9:49:1e:69:e0:cc:7e:
         d1:6e:e2:87:1a:5c:e8:14:30:a9:36:7b:f8:73:3a:e9:f1:12:
         5e:26:6b:b9:34:09:79:35:04:a3:d0:f1:f9:33:6e:4d:ec:d6:
         bd:8c:72:ab:00:ef:b0:a5:25:0a:b5:1f:57:35:2b:86:7f:56:
         7b:18:c3:95:4b:ca:f5:58:3b:69:79:52:89:e3:43:1b:3f:74:
         49:6b:eb:6e:23:f3:1e:b9:14:6a:e3:b5:e3:40:7d:49:4d:e0:
         f3:73:c7:ed:a1:4c:06:ab:9b:da:e1:22:1d:f5:95:2d:7a:1e:
         06:1e:16:f0:b5:75:e2:7a:26:d3:88:3f:11:1f:bd:3d:94:54:
         bd:c2:ee:81:54:fe:f9:fe:7b:29:a3:24:4f:f7:a0:19:7f:90:
         c6:17:9a:0b:cf:d0:d6:b3:41:29:6b:e5:74:be:3f:fb:a5:a2:
         2a:9d:36:9d:dc:0c:79:4e:7c:29:29:84:4b:a2:f8:a4:ed:2b:
         d5:26:8c:d9:97:e0:a8:1f:e3:1f:b5:aa:5c:73:40:84:d1:38:
         13:b7:99:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 22:59:44 2024 by rpki-client on console-ams.rpki-client.org