Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3267/1QAwVnGrPHmFR9q6evmujfSpq34.mft
File:                     1QAwVnGrPHmFR9q6evmujfSpq34.mft (raw, json)
Hash identifier:          ryMsUCHwZezivV8JLeG91xm7tDlB1ZfHGDpXgdlKoyw=
Subject key identifier:   51:9B:EB:12:1C:96:AD:C5:6D:A7:0E:F3:92:EE:91:5B:31:F2:0C:59
Authority key identifier: D5:00:30:56:71:AB:3C:79:85:47:DA:BA:7A:F9:AE:8D:F4:A9:AB:7E
Certificate issuer:       /CN=D500305671AB3C798547DABA7AF9AE8DF4A9AB7E
Certificate serial:       0545
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1QAwVnGrPHmFR9q6evmujfSpq34.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3267/1QAwVnGrPHmFR9q6evmujfSpq34.mft
Manifest number:          0545
Signing time:             Fri 22 Nov 2024 10:23:45 +0000
Manifest this update:     Fri 22 Nov 2024 10:23:45 +0000
Manifest next update:     Fri 22 Nov 2024 16:23:45 +0000
Files and hashes:         1: 1QAwVnGrPHmFR9q6evmujfSpq34.crl (hash: sSJUNJtmnZyQJiZ46iVaZMvKalh6FD/EB+d+HlJcmFo=)

Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3267/1QAwVnGrPHmFR9q6evmujfSpq34.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3267/1QAwVnGrPHmFR9q6evmujfSpq34.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1QAwVnGrPHmFR9q6evmujfSpq34.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 16:23:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1349 (0x545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D500305671AB3C798547DABA7AF9AE8DF4A9AB7E
        Validity
            Not Before: Nov 22 10:23:45 2024 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=519BEB121C96ADC56DA70EF392EE915B31F20C59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fc:5a:08:12:50:fa:ce:7c:45:93:8e:c2:f6:
                    34:b9:5d:99:04:ed:34:b6:83:ce:51:0e:c1:d8:8a:
                    14:31:34:78:ee:11:e8:2a:6d:b3:19:27:2c:cc:42:
                    98:88:77:8d:3b:da:71:84:e2:bf:80:38:3d:10:8b:
                    4e:cd:b7:89:72:95:d6:d2:e5:8e:c9:15:67:df:6e:
                    49:8e:49:52:59:5b:db:ee:b2:6d:b0:e8:69:f4:68:
                    2e:af:82:e4:b3:19:42:7f:d1:da:18:88:9c:43:26:
                    a5:40:23:da:aa:f8:7a:13:ad:c9:75:20:cc:67:4d:
                    97:f4:7b:ac:01:18:52:84:28:52:24:d6:87:cd:c3:
                    f1:bf:ab:d7:a0:f2:2c:bf:71:7f:c4:a3:96:e4:91:
                    d1:53:27:f9:84:60:c8:9a:c0:78:e7:01:39:ec:dd:
                    ff:27:4c:45:cb:58:48:a9:63:24:91:b5:e5:21:07:
                    a2:f4:34:14:df:fd:6b:0f:e6:71:72:e2:a1:86:bb:
                    a8:9f:a3:6c:8b:b0:37:d1:8e:cd:1c:40:71:bd:70:
                    b2:12:ae:6d:24:56:16:d2:79:db:57:9e:67:54:33:
                    c7:fc:a2:f2:42:29:c6:5d:64:b7:62:d6:7f:da:cd:
                    96:f1:ff:1c:ef:fa:e3:54:6f:94:dc:4a:47:f9:52:
                    00:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9B:EB:12:1C:96:AD:C5:6D:A7:0E:F3:92:EE:91:5B:31:F2:0C:59
            X509v3 Authority Key Identifier:
                keyid:D5:00:30:56:71:AB:3C:79:85:47:DA:BA:7A:F9:AE:8D:F4:A9:AB:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3267/1QAwVnGrPHmFR9q6evmujfSpq34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1QAwVnGrPHmFR9q6evmujfSpq34.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3267/1QAwVnGrPHmFR9q6evmujfSpq34.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:46:53:fb:58:23:9b:3a:e2:3c:f2:4b:94:02:2c:ae:a5:08:
         12:50:4c:00:56:71:67:c2:95:6e:6d:ee:9c:9b:0c:0e:8d:ed:
         10:63:87:ad:c1:88:0a:52:6f:46:39:54:80:e5:ae:c7:26:08:
         be:2a:3e:e4:92:b2:75:b9:61:89:10:08:2f:1b:1a:56:4b:32:
         55:66:e3:ed:4c:64:83:4f:5f:f4:c6:8e:4f:6f:b3:5b:7f:af:
         45:9f:6f:ff:0a:d8:43:f1:78:d1:1b:25:9e:9a:e7:5b:b3:e4:
         53:81:e2:ec:26:e0:03:df:b5:00:1d:3f:60:57:b3:07:2f:b0:
         0b:4a:e1:e0:46:0a:1e:e6:57:f1:c6:fa:24:1b:c7:59:ba:21:
         b1:d6:53:97:b7:71:30:40:77:41:4f:1a:7e:24:2d:3f:06:e8:
         bc:5e:20:8c:f6:ac:90:84:31:5c:aa:be:d1:ac:e0:0e:20:f3:
         ac:60:62:9e:8c:14:51:b0:c7:33:5a:e6:42:f3:08:58:9d:82:
         6b:9a:00:f8:e3:70:0d:20:18:cb:d9:fd:9c:26:da:24:ef:65:
         b8:b1:b7:02:1e:aa:86:34:1e:83:8c:a0:16:52:d7:d1:91:a5:
         ba:71:84:5d:2c:cb:32:74:07:22:67:36:e8:b3:6c:d7:6e:52:
         0c:58:d6:54
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBUUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDUw
MDMwNTY3MUFCM0M3OTg1NDdEQUJBN0FGOUFFOERGNEE5QUI3RTAeFw0yNDExMjIx
MDIzNDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDUxOUJFQjEyMUM5NkFE
QzU2REE3MEVGMzkyRUU5MTVCMzFGMjBDNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDD/FoIElD6znxFk47C9jS5XZkE7TS2g85RDsHYihQxNHjuEegq
bbMZJyzMQpiId4072nGE4r+AOD0Qi07Nt4lyldbS5Y7JFWffbkmOSVJZW9vusm2w
6Gn0aC6vguSzGUJ/0doYiJxDJqVAI9qq+HoTrcl1IMxnTZf0e6wBGFKEKFIk1ofN
w/G/q9eg8iy/cX/Eo5bkkdFTJ/mEYMiawHjnATns3f8nTEXLWEipYySRteUhB6L0
NBTf/WsP5nFy4qGGu6ifo2yLsDfRjs0cQHG9cLISrm0kVhbSedtXnmdUM8f8ovJC
KcZdZLdi1n/azZbx/xzv+uNUb5TcSkf5UgAVAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUUZvrEhyWrcVtpw7zku6RWzHyDFkwHwYDVR0jBBgwFoAU1QAwVnGrPHmFR9q6
evmujfSpq34wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2
Ny8xUUF3Vm5HclBIbUZSOXE2ZXZtdWpmU3BxMzQuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzFRQXdWbkdyUEhtRlI5cTZldm11amZTcHEzNC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjcvMVFBd1ZuR3JQSG1G
UjlxNmV2bXVqZlNwcTM0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAB1GU/tYI5s64jzyS5QCLK6lCBJQTABWcWfClW5t7pybDA6N7RBjh63BiApS
b0Y5VIDlrscmCL4qPuSSsnW5YYkQCC8bGlZLMlVm4+1MZINPX/TGjk9vs1t/r0Wf
b/8K2EPxeNEbJZ6a51uz5FOB4uwm4APftQAdP2BXswcvsAtK4eBGCh7mV/HG+iQb
x1m6IbHWU5e3cTBAd0FPGn4kLT8G6LxeIIz2rJCEMVyqvtGs4A4g86xgYp6MFFGw
xzNa5kLzCFidgmuaAPjjcA0gGMvZ/Zwm2iTvZbixtwIeqoY0HoOMoBZS19GRpbpx
hF0syzJ0ByJnNuizbNduUgxY1lQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:05:39 2024 by rpki-client on console-fra.rpki-client.org