Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3278/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.mft
File:                     jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.mft (raw, json)
Hash identifier:          qna3n7AC4xJVqXy9AwWHN+ggff3tMKEwWebGj7BWG2U=
Subject key identifier:   E1:D2:AD:90:37:E3:82:20:CA:32:55:C1:4D:B0:5A:6D:FC:A7:11:B1
Authority key identifier: 8D:18:CF:78:15:82:3E:9F:99:02:81:7D:0E:72:7D:AB:C5:54:48:CB
Certificate issuer:       /CN=8D18CF7815823E9F9902817D0E727DABC55448CB
Certificate serial:       068B
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.mft
Manifest number:          068B
Signing time:             Sat 29 Mar 2025 10:28:16 +0000
Manifest this update:     Sat 29 Mar 2025 10:28:16 +0000
Manifest next update:     Sat 29 Mar 2025 16:28:16 +0000
Files and hashes:         1: jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.crl (hash: JvhjqDii7j2n0PXG1ewvN7VWAyIdTuBkznXefSWsQ54=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1675 (0x68b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D18CF7815823E9F9902817D0E727DABC55448CB
        Validity
            Not Before: Mar 29 10:28:16 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=E1D2AD9037E38220CA3255C14DB05A6DFCA711B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:67:9c:40:2b:90:b4:00:aa:ec:6b:35:6e:32:
                    f8:54:29:59:e1:ae:b9:25:2a:b5:75:8a:3d:e9:37:
                    04:5f:5b:1f:44:ce:1a:08:5e:df:94:ac:be:95:6e:
                    52:0c:e5:be:0c:fd:1a:14:d5:6a:3a:44:de:c2:f7:
                    cb:bb:7d:b8:c1:77:05:bf:41:eb:05:56:90:06:72:
                    de:12:aa:0c:3b:69:19:86:cc:4b:ec:b5:a2:7a:7b:
                    07:ac:43:3f:a0:fb:99:ee:5d:ce:15:06:63:31:d5:
                    8f:f5:e2:f8:a4:28:90:95:5e:68:45:a5:7d:09:21:
                    ee:ab:75:76:37:f0:81:3a:c9:c9:ea:91:26:6d:a1:
                    6b:bb:ab:10:8f:20:7f:dc:db:0a:36:f6:4d:25:b9:
                    39:3d:fb:18:2b:93:e6:3e:eb:d4:4c:be:c0:47:8c:
                    09:74:fa:a4:3c:a7:d1:60:80:cc:08:b8:e0:de:e3:
                    1c:34:29:4a:b2:f7:12:9b:23:55:14:58:30:fc:af:
                    ed:ff:06:21:06:f4:91:bc:78:6c:4e:44:0b:75:f4:
                    73:b1:47:1d:42:4f:d1:7b:37:a5:5c:42:47:d7:51:
                    b0:d7:7f:19:45:39:46:28:4b:07:5e:13:b6:66:25:
                    97:e6:83:24:1a:46:45:4c:cf:44:47:7b:66:53:1f:
                    bb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D2:AD:90:37:E3:82:20:CA:32:55:C1:4D:B0:5A:6D:FC:A7:11:B1
            X509v3 Authority Key Identifier:
                keyid:8D:18:CF:78:15:82:3E:9F:99:02:81:7D:0E:72:7D:AB:C5:54:48:CB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ed:b1:c0:72:92:01:65:09:80:8b:b3:4f:83:68:91:7e:65:
         cf:f0:e8:7a:b0:68:a9:95:35:0f:72:c8:a6:63:ce:79:b4:8d:
         fd:54:52:3f:a6:b2:62:6e:7a:bf:95:d2:91:37:2b:26:56:d6:
         9b:c7:eb:df:c4:87:bc:d0:5b:73:72:1a:86:aa:9d:09:5b:ce:
         e8:da:74:71:1b:cf:26:a2:9b:c0:bb:79:56:17:41:a6:6d:ac:
         2e:18:13:e0:e6:ef:6b:bc:f0:f1:59:dc:e2:e0:7e:15:86:82:
         46:14:a1:69:ee:30:c0:25:e4:95:a5:2a:02:f4:0e:0b:a2:38:
         8f:89:0b:83:c2:e8:3a:63:0c:f6:d8:dd:fd:2b:1c:e7:d1:f3:
         8a:af:f7:e0:9b:fb:6a:de:89:c1:f3:51:e1:eb:37:fe:49:20:
         8c:4f:29:24:a9:16:e9:dd:0e:3b:81:3d:0c:20:fc:53:b5:df:
         a6:74:c4:be:ea:9b:d7:f5:fa:d4:92:8d:a7:7b:1a:90:47:bd:
         2c:80:62:d0:31:33:68:ba:46:eb:f3:0f:71:37:2a:74:d1:35:
         fc:7e:bd:1f:f9:2a:61:d4:97:e7:1c:15:24:30:59:ae:64:6b:
         39:34:fa:45:63:2d:5a:e6:ee:2a:99:0b:ad:de:84:c9:62:13:
         5b:8e:27:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:35 2025 by rpki-client