Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3274/E6kuJA2Xy0iAEKz821jUUodWaMA.mft
File:                     E6kuJA2Xy0iAEKz821jUUodWaMA.mft (raw, json)
Hash identifier:          W8HVs3eX2pLf3a09HC+7co8H97tIgxdVDwYKqA7QkJc=
Subject key identifier:   17:6A:6D:6C:1C:1C:95:4F:A2:7A:00:F1:FB:78:4B:85:62:AE:09:A9
Authority key identifier: 13:A9:2E:24:0D:97:CB:48:80:10:AC:FC:DB:58:D4:52:87:56:68:C0
Certificate issuer:       /CN=13A92E240D97CB488010ACFCDB58D452875668C0
Certificate serial:       010A
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/E6kuJA2Xy0iAEKz821jUUodWaMA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/E6kuJA2Xy0iAEKz821jUUodWaMA.mft
Manifest number:          010A
Signing time:             Sun 02 Jun 2024 05:56:28 +0000
Manifest this update:     Sun 02 Jun 2024 05:56:28 +0000
Manifest next update:     Sun 02 Jun 2024 11:56:28 +0000
Files and hashes:         1: E6kuJA2Xy0iAEKz821jUUodWaMA.crl (hash: Sewe6HMStr8neP6tc2p3fcWL6nSg2GSpq4F+yrLJyrU=)

Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/E6kuJA2Xy0iAEKz821jUUodWaMA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/E6kuJA2Xy0iAEKz821jUUodWaMA.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/E6kuJA2Xy0iAEKz821jUUodWaMA.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Jun 2024 11:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13A92E240D97CB488010ACFCDB58D452875668C0
        Validity
            Not Before: Jun  2 05:56:28 2024 GMT
            Not After : Apr  2 01:20:39 2025 GMT
        Subject: CN=176A6D6C1C1C954FA27A00F1FB784B8562AE09A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:13:d1:75:fe:84:74:20:12:77:74:1f:cd:94:
                    a6:4b:01:07:ec:5d:0d:c3:d6:b0:c4:dc:0e:8e:66:
                    94:b3:61:68:0e:ab:0e:c3:20:fb:de:f9:87:85:80:
                    bf:3e:0d:f3:3e:cd:fe:79:9f:24:1c:55:ba:a2:d7:
                    07:05:9c:13:20:c5:0f:4b:77:8b:25:9d:b7:a1:8d:
                    01:06:b5:70:f3:a1:11:5f:41:16:df:8c:79:b0:32:
                    32:0a:af:b6:5e:85:10:93:d2:77:24:08:b8:b6:0a:
                    f2:95:72:29:e9:d0:78:2d:9d:68:63:1f:a9:1f:0f:
                    d7:29:a4:2d:2f:ce:a8:a4:d0:d0:ab:64:d9:44:0f:
                    e8:d0:7a:78:48:f8:87:a0:9d:ee:8f:d1:7f:2a:d6:
                    0b:c6:36:db:5b:43:c7:b6:1e:ec:a2:eb:87:70:15:
                    a8:08:d0:40:2b:3d:29:5a:5f:21:ac:cb:5e:f8:76:
                    be:fa:f9:2e:ec:f0:66:c1:b9:f9:7d:01:2d:df:a4:
                    60:1c:f1:63:d7:64:e6:ff:ae:01:12:cd:9f:a6:ec:
                    2a:eb:b6:a9:99:ad:a4:d9:c8:12:a1:be:32:ef:4b:
                    37:1e:2f:4d:78:3b:7a:92:f6:92:c6:0e:ed:db:e3:
                    45:b4:37:66:74:ca:bd:d5:93:1e:cc:c3:cc:d2:8b:
                    e3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6A:6D:6C:1C:1C:95:4F:A2:7A:00:F1:FB:78:4B:85:62:AE:09:A9
            X509v3 Authority Key Identifier:
                keyid:13:A9:2E:24:0D:97:CB:48:80:10:AC:FC:DB:58:D4:52:87:56:68:C0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/E6kuJA2Xy0iAEKz821jUUodWaMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/E6kuJA2Xy0iAEKz821jUUodWaMA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/E6kuJA2Xy0iAEKz821jUUodWaMA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b6:6a:ef:3a:ad:9c:8f:25:f3:86:cf:06:f7:82:81:c4:90:
         fc:74:89:59:d9:2b:71:b3:86:77:ef:9a:c4:2f:c1:51:66:75:
         13:92:37:cd:14:cd:f7:e9:b6:47:40:28:91:01:3a:f3:5d:a8:
         c3:aa:f3:e5:98:f3:d6:fa:fe:ae:28:be:ba:c2:4b:8a:c1:68:
         9f:d9:8e:22:4d:f3:a7:c9:74:03:89:ad:34:ec:c6:c8:a6:56:
         52:48:85:6e:3e:d6:a3:ba:29:6e:00:73:85:a3:2b:6b:90:98:
         53:1c:93:a6:6d:7e:8e:01:42:a5:6a:9c:6c:72:28:37:da:09:
         b1:d9:62:b1:2e:60:d9:6f:6a:e0:33:b9:8c:0d:a5:fe:b0:ed:
         2c:ab:e4:62:09:51:c8:95:e9:00:5b:21:55:f9:6c:1b:36:64:
         bf:d7:cb:76:68:ec:03:02:60:e7:29:7f:cf:2f:2b:1d:04:5e:
         47:64:ef:b1:b1:68:7d:13:e3:a1:b8:10:11:b8:3c:d0:46:cb:
         06:ef:8c:63:5e:bb:2b:38:92:69:d8:9e:46:24:10:37:f7:df:
         4d:ef:71:4c:b9:2b:c8:9a:40:4a:b8:55:e5:89:45:55:e9:8e:
         4b:63:2e:4d:ac:02:ad:cc:5b:17:3b:03:f9:59:cb:f8:92:24:
         6c:ef:5e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:06:21 2024 by rpki-client on console-fra.rpki-client.org