Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft
File:                     Nd6o5bEoW5KyERchGKNBqy3bdrU.mft (raw, json)
Hash identifier:          Q/cA9YsbZTEKd/EL/es/p2cwe3+0f8eEfj7T0UtB0/M=
Subject key identifier:   5B:F9:11:87:43:5E:01:A8:42:77:63:55:A2:D3:F3:D0:C6:B7:54:47
Authority key identifier: 35:DE:A8:E5:B1:28:5B:92:B2:11:17:21:18:A3:41:AB:2D:DB:76:B5
Certificate issuer:       /CN=35DEA8E5B1285B92B211172118A341AB2DDB76B5
Certificate serial:       065F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft
Manifest number:          065F
Signing time:             Tue 18 Jun 2024 09:25:44 +0000
Manifest this update:     Tue 18 Jun 2024 09:25:44 +0000
Manifest next update:     Tue 18 Jun 2024 15:25:44 +0000
Files and hashes:         1: Nd6o5bEoW5KyERchGKNBqy3bdrU.crl (hash: T/aWtq7UqoR7cyKb5+nl5EZExsgimDYcotjRJqXUC44=)

Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 18 Jun 2024 14:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1631 (0x65f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35DEA8E5B1285B92B211172118A341AB2DDB76B5
        Validity
            Not Before: Jun 18 09:25:44 2024 GMT
            Not After : Oct  8 00:16:33 2024 GMT
        Subject: CN=5BF91187435E01A842776355A2D3F3D0C6B75447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d6:4a:2e:e3:69:8c:36:a2:0f:c6:e1:ab:fa:
                    a2:b8:c7:c6:f4:4f:0b:69:37:bd:7d:e9:b1:d2:d7:
                    a3:24:85:7c:76:27:64:4d:ed:80:85:14:bb:3e:13:
                    65:f5:c8:27:33:60:41:5b:7d:61:d2:af:4a:c4:5d:
                    f4:20:d5:b9:95:1d:43:95:d1:fd:ba:e7:ac:b9:6d:
                    c7:8a:31:7c:c2:5a:43:2a:f4:7f:da:3a:06:61:59:
                    60:45:5f:ca:e3:dd:ac:ce:be:b3:ed:35:c9:6f:89:
                    0c:e8:2a:a0:99:f3:54:27:86:81:eb:1b:88:e5:55:
                    6e:b7:ef:a2:91:aa:4e:87:b5:be:43:4e:36:dc:d8:
                    aa:30:14:03:f4:1e:2b:ae:1c:1a:26:0c:5d:39:e6:
                    68:eb:10:a7:ea:b1:6f:b0:b3:e9:f9:89:a2:8e:68:
                    0a:20:19:9a:91:27:df:a5:27:05:f8:79:1a:16:80:
                    a1:0d:16:dc:2b:9c:ac:0f:8a:6b:cc:b3:3f:8d:00:
                    8e:5e:3f:3e:f5:77:80:e4:fc:9e:57:18:23:25:bf:
                    4b:c0:f7:23:72:90:43:d5:75:78:21:d0:87:e4:b2:
                    b2:fb:d8:27:55:99:82:8e:68:53:18:f8:1a:88:95:
                    97:73:d4:5c:33:89:56:99:70:1a:bf:13:72:db:07:
                    19:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F9:11:87:43:5E:01:A8:42:77:63:55:A2:D3:F3:D0:C6:B7:54:47
            X509v3 Authority Key Identifier:
                keyid:35:DE:A8:E5:B1:28:5B:92:B2:11:17:21:18:A3:41:AB:2D:DB:76:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a9:e0:4c:8d:23:75:fb:a1:d4:63:dd:3b:88:24:6f:06:9b:
         c8:5c:17:c5:92:6c:53:11:48:f4:2c:a8:8f:7a:23:3a:51:8f:
         e3:55:67:bb:b5:c1:0d:b5:b8:7a:a8:b4:30:c2:80:15:ec:22:
         6c:37:6b:da:fe:bc:70:37:21:f2:c6:c7:5f:4f:16:1f:d6:e9:
         16:f2:cb:c2:21:ef:cc:bb:65:b4:5e:39:60:c0:ea:3a:c5:46:
         fc:4c:52:a8:35:c2:df:07:65:6c:9a:4d:7c:5e:cc:ba:89:51:
         99:e4:73:90:e7:75:da:e8:aa:a8:79:73:d8:54:ef:6a:32:bf:
         07:2d:49:c1:d8:72:30:fe:61:86:90:71:b9:9f:8a:54:d1:be:
         10:19:bc:94:4e:31:f7:78:f1:cd:d7:dc:3f:6b:96:ba:87:6a:
         17:83:80:f0:87:0f:fa:7d:90:bf:dc:16:b8:7d:cd:9b:cf:9e:
         3f:fd:7e:d6:f0:b5:c4:18:7f:8a:52:cf:6b:e5:39:42:ce:4a:
         92:ac:24:5d:d8:e1:1d:b6:b4:78:ff:8e:51:bc:94:d3:51:d8:
         24:9a:a4:36:44:90:46:ab:0b:a4:23:42:00:9a:5b:db:ce:98:
         1a:17:a5:1e:e0:87:4c:5c:6b:e2:77:ff:b8:4c:a3:14:a2:ae:
         1f:9c:2a:d2
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBl8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzVE
RUE4RTVCMTI4NUI5MkIyMTExNzIxMThBMzQxQUIyRERCNzZCNTAeFw0yNDA2MTgw
OTI1NDRaFw0yNDEwMDgwMDE2MzNaMDMxMTAvBgNVBAMTKDVCRjkxMTg3NDM1RTAx
QTg0Mjc3NjM1NUEyRDNGM0QwQzZCNzU0NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDL1kou42mMNqIPxuGr+qK4x8b0TwtpN7196bHS16MkhXx2J2RN
7YCFFLs+E2X1yCczYEFbfWHSr0rEXfQg1bmVHUOV0f2656y5bceKMXzCWkMq9H/a
OgZhWWBFX8rj3azOvrPtNclviQzoKqCZ81QnhoHrG4jlVW6376KRqk6Htb5DTjbc
2KowFAP0HiuuHBomDF055mjrEKfqsW+ws+n5iaKOaAogGZqRJ9+lJwX4eRoWgKEN
FtwrnKwPimvMsz+NAI5ePz71d4Dk/J5XGCMlv0vA9yNykEPVdXgh0IfksrL72CdV
mYKOaFMY+BqIlZdz1FwziVaZcBq/E3LbBxk/AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUW/kRh0NeAahCd2NVotPz0Ma3VEcwHwYDVR0jBBgwFoAUNd6o5bEoW5KyERch
GKNBqy3bdrUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz
Mi9OZDZvNWJFb1c1S3lFUmNoR0tOQnF5M2JkclUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL05kNm81YkVvVzVLeUVSY2hHS05CcXkzYmRyVS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzIvTmQ2bzViRW9XNUt5
RVJjaEdLTkJxeTNiZHJVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAEyp4EyNI3X7odRj3TuIJG8Gm8hcF8WSbFMRSPQsqI96IzpRj+NVZ7u1wQ21
uHqotDDCgBXsImw3a9r+vHA3IfLGx19PFh/W6Rbyy8Ih78y7ZbReOWDA6jrFRvxM
Uqg1wt8HZWyaTXxezLqJUZnkc5Dnddroqqh5c9hU72oyvwctScHYcjD+YYaQcbmf
ilTRvhAZvJROMfd48c3X3D9rlrqHaheDgPCHD/p9kL/cFrh9zZvPnj/9ftbwtcQY
f4pSz2vlOULOSpKsJF3Y4R22tHj/jlG8lNNR2CSapDZEkEarC6QjQgCaW9vOmBoX
pR7gh0xca+J3/7hMoxSirh+cKtI=
-----END CERTIFICATE-----
Generated at Tue Jun 18 11:50:17 2024 by rpki-client on console-fra.rpki-client.org