Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3269/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.mft
File:                     WCQO-Tq-mV-XYbQhUzb_qpcFnqc.mft (raw, json)
Hash identifier:          5clj/CVWNml2pB8YixhsyfS2mnhcoyjSwtXWu03/liE=
Subject key identifier:   58:89:77:2F:20:9A:16:EE:13:8C:78:F5:75:71:7F:7A:4B:6B:47:43
Authority key identifier: 58:24:0E:F9:3A:BE:99:5F:97:61:B4:21:53:36:FF:AA:97:05:9E:A7
Certificate issuer:       /CN=58240EF93ABE995F9761B4215336FFAA97059EA7
Certificate serial:       050C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.mft
Manifest number:          050C
Signing time:             Fri 22 Nov 2024 15:21:01 +0000
Manifest this update:     Fri 22 Nov 2024 15:21:01 +0000
Manifest next update:     Fri 22 Nov 2024 21:21:01 +0000
Files and hashes:         1: WCQO-Tq-mV-XYbQhUzb_qpcFnqc.crl (hash: 00WYxxbMJhC0ApWFNPXGVxBeKeeacfkAO47vzkIOQ7g=)

Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 19:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1292 (0x50c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58240EF93ABE995F9761B4215336FFAA97059EA7
        Validity
            Not Before: Nov 22 15:21:01 2024 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=5889772F209A16EE138C78F575717F7A4B6B4743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:3c:7c:92:20:65:7d:db:8c:fb:8c:18:57:
                    8c:77:cc:cf:0e:9a:66:9c:1c:59:1e:cd:ce:cf:63:
                    89:d6:04:93:e7:68:a7:88:4a:6e:51:df:c9:18:c3:
                    3b:4e:34:b8:88:47:0c:55:39:f4:f7:48:db:29:5b:
                    03:15:0a:d5:86:3f:d9:3c:70:db:85:4d:29:25:3a:
                    43:a1:ea:fb:63:cb:3b:86:8b:d4:2c:75:d7:93:e2:
                    f6:69:90:dd:0a:b2:85:47:35:80:95:1c:b2:6b:71:
                    4d:7d:03:fc:54:7e:6f:ba:ff:04:6d:c3:20:f1:05:
                    8c:f3:c6:6b:19:3c:30:37:2e:e0:b9:b4:f1:a8:df:
                    47:29:0f:4a:e7:06:d5:62:d7:9b:64:b0:17:8f:f6:
                    6a:e1:f8:79:96:7b:bc:33:1f:8d:04:38:74:93:50:
                    a8:22:f7:14:be:6b:a4:e1:5f:85:b4:6c:34:7d:50:
                    9c:d7:e1:8d:94:3a:77:02:4a:b8:8d:16:69:2c:79:
                    c0:a1:7c:5f:0c:8e:e4:48:74:a3:42:f4:5e:a3:f5:
                    de:22:be:cd:64:28:be:c8:74:27:49:6c:f6:9a:59:
                    49:b2:da:f5:d0:a4:1b:61:cc:36:83:fc:89:fa:8c:
                    61:1f:2d:58:84:e6:f9:2e:84:7c:7c:20:91:0f:33:
                    ce:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:89:77:2F:20:9A:16:EE:13:8C:78:F5:75:71:7F:7A:4B:6B:47:43
            X509v3 Authority Key Identifier:
                keyid:58:24:0E:F9:3A:BE:99:5F:97:61:B4:21:53:36:FF:AA:97:05:9E:A7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:3f:3c:38:b2:dc:d7:76:cf:6b:12:cd:7a:33:11:b1:61:64:
         11:b6:db:dd:d8:f4:e1:1e:18:69:f6:76:b9:a2:e2:ea:9e:30:
         9e:85:97:4c:8c:5e:62:62:e6:e9:ba:fa:d8:1d:f4:62:d7:f5:
         e0:f4:45:eb:f3:49:66:71:1d:b2:e3:0d:5a:7a:8c:50:07:54:
         4a:84:f4:c3:84:4a:23:2c:cc:6e:cb:b2:15:88:e5:ad:ce:83:
         4e:7b:2d:13:9f:ab:24:80:f3:ce:b7:f7:fa:a6:cd:c9:32:d0:
         c2:ce:0e:57:ff:53:ac:96:59:0b:93:53:20:95:d5:42:95:ad:
         e0:fc:85:bb:62:8d:fa:eb:ba:0d:19:d8:0a:78:5c:9e:39:b3:
         19:8d:74:90:43:aa:d6:84:6f:38:78:8a:41:1b:bb:0d:13:ae:
         a6:2c:e8:7b:b6:ab:49:99:f7:1c:24:8e:ee:89:b7:01:04:a0:
         be:4d:a4:77:d4:2b:1b:f5:30:4c:fa:9e:cf:73:73:ec:3d:e3:
         bd:7f:bc:a2:8d:ac:58:c4:97:30:53:e3:a7:10:ec:eb:5b:e3:
         87:a3:85:fd:aa:b7:66:56:dd:62:85:5f:32:b4:75:a6:f0:5c:
         10:a3:2f:bd:5b:e6:c8:c7:a8:21:91:f7:4b:1b:e6:d5:85:35:
         fd:11:df:94
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBQwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTgy
NDBFRjkzQUJFOTk1Rjk3NjFCNDIxNTMzNkZGQUE5NzA1OUVBNzAeFw0yNDExMjIx
NTIxMDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDU4ODk3NzJGMjA5QTE2
RUUxMzhDNzhGNTc1NzE3RjdBNEI2QjQ3NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6aTx8kiBlfduM+4wYV4x3zM8OmmacHFkezc7PY4nWBJPnaKeI
Sm5R38kYwztONLiIRwxVOfT3SNspWwMVCtWGP9k8cNuFTSklOkOh6vtjyzuGi9Qs
ddeT4vZpkN0KsoVHNYCVHLJrcU19A/xUfm+6/wRtwyDxBYzzxmsZPDA3LuC5tPGo
30cpD0rnBtVi15tksBeP9mrh+HmWe7wzH40EOHSTUKgi9xS+a6ThX4W0bDR9UJzX
4Y2UOncCSriNFmksecChfF8MjuRIdKNC9F6j9d4ivs1kKL7IdCdJbPaaWUmy2vXQ
pBthzDaD/In6jGEfLViE5vkuhHx8IJEPM85VAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUWIl3LyCaFu4TjHj1dXF/ektrR0MwHwYDVR0jBBgwFoAUWCQO+Tq+mV+XYbQh
Uzb/qpcFnqcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2
OS9XQ1FPLVRxLW1WLVhZYlFoVXpiX3FwY0ZucWMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1dDUU8tVHEtbVYtWFliUWhVemJfcXBjRm5xYy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjkvV0NRTy1UcS1tVi1Y
WWJRaFV6Yl9xcGNGbnFjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAEY/PDiy3Nd2z2sSzXozEbFhZBG2293Y9OEeGGn2drmi4uqeMJ6Fl0yMXmJi
5um6+tgd9GLX9eD0RevzSWZxHbLjDVp6jFAHVEqE9MOESiMszG7LshWI5a3Og057
LROfqySA88639/qmzcky0MLODlf/U6yWWQuTUyCV1UKVreD8hbtijfrrug0Z2Ap4
XJ45sxmNdJBDqtaEbzh4ikEbuw0TrqYs6Hu2q0mZ9xwkju6JtwEEoL5NpHfUKxv1
MEz6ns9zc+w9471/vKKNrFjElzBT46cQ7Otb44ejhf2qt2ZW3WKFXzK0dabwXBCj
L71b5sjHqCGR90sb5tWFNf0R35Q=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:36:46 2024 by rpki-client on console-ams.rpki-client.org