Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3259/8eEYZjFmXucC71BAp9J-rFDMXf0.mft
File:                     8eEYZjFmXucC71BAp9J-rFDMXf0.mft (raw, json)
Hash identifier:          UMc4hQXnzsnGVOO3nHWAS1OsDr6iTXO0014+PmDdMS0=
Subject key identifier:   44:1D:06:ED:58:98:E6:7B:A8:50:97:32:05:8F:AA:61:00:17:59:E6
Authority key identifier: F1:E1:18:66:31:66:5E:E7:02:EF:50:40:A7:D2:7E:AC:50:CC:5D:FD
Certificate issuer:       /CN=F1E1186631665EE702EF5040A7D27EAC50CC5DFD
Certificate serial:       05EF
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8eEYZjFmXucC71BAp9J-rFDMXf0.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/8eEYZjFmXucC71BAp9J-rFDMXf0.mft
Manifest number:          05EF
Signing time:             Fri 22 Nov 2024 15:23:11 +0000
Manifest this update:     Fri 22 Nov 2024 15:23:11 +0000
Manifest next update:     Fri 22 Nov 2024 21:23:11 +0000
Files and hashes:         1: 8eEYZjFmXucC71BAp9J-rFDMXf0.crl (hash: YSgO6Toffz3FXLXqGueHk/VlHAgjWQZIuml5Byg1Jqo=)

Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/8eEYZjFmXucC71BAp9J-rFDMXf0.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/8eEYZjFmXucC71BAp9J-rFDMXf0.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8eEYZjFmXucC71BAp9J-rFDMXf0.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 21:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1519 (0x5ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1E1186631665EE702EF5040A7D27EAC50CC5DFD
        Validity
            Not Before: Nov 22 15:23:11 2024 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=441D06ED5898E67BA8509732058FAA61001759E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6e:69:f8:34:1d:a0:6b:4c:31:03:bd:7c:9e:
                    18:b4:a9:5b:c1:53:e1:54:37:f8:f4:5e:7c:b0:10:
                    8b:7a:a1:a8:d2:f9:31:f1:1b:c6:dd:36:cf:fe:04:
                    bb:d5:7f:cd:39:84:c9:f8:58:a4:4b:d1:06:45:84:
                    82:3a:b8:e6:d0:6f:9b:d1:3c:f4:46:ed:8f:5a:90:
                    6c:5e:c5:20:22:23:a2:e7:4e:fc:3b:1a:da:7b:20:
                    10:9f:b2:d9:92:c0:8c:49:21:63:43:fc:7a:d3:97:
                    4c:68:ea:b9:5f:53:eb:71:fd:ce:9c:a1:ac:57:3c:
                    ad:46:37:74:57:32:a8:38:d7:de:52:05:cf:20:c2:
                    88:72:cb:4b:3a:85:96:5d:e9:49:fe:d8:eb:4c:19:
                    b9:0b:68:d5:d9:03:6a:e9:d8:b0:6f:de:7b:7c:77:
                    db:2c:aa:49:b3:b1:1a:46:e5:e9:de:89:5c:26:4c:
                    dd:12:cd:f4:22:d5:17:30:88:99:6d:c0:8c:d5:6d:
                    88:c0:1a:21:f2:b5:24:29:b6:4b:8e:92:0d:6e:91:
                    98:0e:40:42:78:da:77:02:5f:a8:93:8c:31:71:7b:
                    1a:3a:fb:df:f6:42:ba:95:66:9c:2c:82:65:d5:8c:
                    a8:2a:92:35:d7:f2:2d:a9:50:a2:30:1a:90:88:a9:
                    31:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1D:06:ED:58:98:E6:7B:A8:50:97:32:05:8F:AA:61:00:17:59:E6
            X509v3 Authority Key Identifier:
                keyid:F1:E1:18:66:31:66:5E:E7:02:EF:50:40:A7:D2:7E:AC:50:CC:5D:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/8eEYZjFmXucC71BAp9J-rFDMXf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8eEYZjFmXucC71BAp9J-rFDMXf0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/8eEYZjFmXucC71BAp9J-rFDMXf0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:51:72:d9:33:46:59:c1:b8:41:88:e6:9b:fa:9e:cb:91:17:
         c3:14:a4:a1:a1:bf:0e:82:a1:7e:0a:a8:f5:93:68:fa:73:47:
         79:42:c3:a4:aa:a2:99:f5:c5:28:44:5b:54:ef:b7:54:23:5c:
         2f:f2:d4:92:ed:45:42:5a:3b:e3:36:50:6a:d8:a6:7e:b3:b6:
         b9:40:f4:6a:35:f7:ff:5f:2d:f2:2a:c6:b7:2e:9d:4e:31:8a:
         15:cc:2e:a5:a4:51:f1:9a:34:75:df:08:01:07:6a:e1:05:d9:
         7f:ff:a5:2b:46:ff:c8:e4:12:c0:80:05:4c:69:74:a3:46:bd:
         74:70:75:7e:07:38:fd:e1:f3:c6:08:c2:23:c6:bf:bf:50:cb:
         98:98:f9:92:93:28:3c:93:0b:b1:b7:04:7b:2e:3d:cb:c4:42:
         05:b0:2d:50:1e:88:aa:e5:6a:4d:f4:77:70:c8:ee:82:ea:89:
         63:e6:f6:24:79:7c:eb:10:5a:71:ce:b9:a2:aa:1c:c7:f3:12:
         c8:87:ca:fe:c8:29:c4:25:01:48:47:01:fe:47:5b:1b:ad:b9:
         7a:c3:1c:3b:fb:67:63:1a:cb:15:03:7c:ce:01:57:4c:a5:d4:
         f5:fc:c2:a3:65:f5:a8:b7:87:61:8e:c2:64:1d:37:91:a2:be:
         bd:17:86:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:57:43 2024 by rpki-client on console-ams.rpki-client.org