Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.mft
File:                     HjLVp6TGq1Ov4e_srAET7e7SZYI.mft (raw, json)
Hash identifier:          E38rlGmUlP9CuXWGuSSRphlNyxb+u0o0e6fzIbWkviQ=
Subject key identifier:   C3:53:D4:45:0C:54:3C:80:DE:DD:52:A1:46:BC:23:76:5C:53:C4:80
Authority key identifier: 1E:32:D5:A7:A4:C6:AB:53:AF:E1:EF:EC:AC:01:13:ED:EE:D2:65:82
Certificate issuer:       /CN=1E32D5A7A4C6AB53AFE1EFECAC0113EDEED26582
Certificate serial:       06E4
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HjLVp6TGq1Ov4e_srAET7e7SZYI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.mft
Manifest number:          06E4
Signing time:             Thu 05 Jun 2025 16:42:02 +0000
Manifest this update:     Thu 05 Jun 2025 16:42:02 +0000
Manifest next update:     Thu 05 Jun 2025 22:42:02 +0000
Files and hashes:         1: HjLVp6TGq1Ov4e_srAET7e7SZYI.crl (hash: KstuKcs1CE2UmV4hindFtqqtPWH9oGeojc96QS4jwIQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1764 (0x6e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E32D5A7A4C6AB53AFE1EFECAC0113EDEED26582
        Validity
            Not Before: Jun  5 16:42:02 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=C353D4450C543C80DEDD52A146BC23765C53C480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c6:47:61:83:b2:d0:c6:93:4d:ae:70:cb:ad:
                    de:df:6e:ff:90:b4:4d:50:36:eb:1b:51:ca:37:c3:
                    5c:29:98:84:9d:df:ca:37:e1:3d:cd:e1:a9:f6:b9:
                    d9:0f:e4:6c:b3:fb:e7:e4:dd:28:11:16:d5:aa:08:
                    bc:d9:d5:3c:bf:bc:a4:66:a3:28:21:9a:f6:74:e3:
                    f6:15:bd:aa:35:5f:49:48:03:33:7f:7b:85:1b:43:
                    04:9f:8e:fc:74:dd:22:94:3c:91:67:e9:1c:0a:14:
                    81:89:56:9e:0e:77:bc:f0:73:fe:ce:74:89:52:38:
                    94:54:62:9c:7c:cf:a4:8c:4e:a6:bb:3f:42:04:73:
                    86:08:49:59:c7:5d:7d:b8:4c:36:02:80:a7:35:de:
                    47:48:15:d7:9b:95:a2:5c:1d:bb:89:91:35:69:de:
                    e8:e1:66:22:cc:e7:86:a3:81:a8:aa:f2:af:08:36:
                    86:c7:e3:fa:47:55:a3:f8:b1:52:80:57:76:36:b8:
                    f1:84:32:c5:e8:fc:35:25:3a:3f:50:39:cb:93:29:
                    6d:fb:0d:c1:ee:91:2c:fa:d4:f8:c9:83:ec:17:53:
                    89:bc:ce:82:71:00:d9:4b:e0:2b:23:cb:7a:6e:bc:
                    11:7e:66:5a:06:be:a7:29:05:01:a0:c0:c4:7b:cb:
                    cd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:53:D4:45:0C:54:3C:80:DE:DD:52:A1:46:BC:23:76:5C:53:C4:80
            X509v3 Authority Key Identifier:
                keyid:1E:32:D5:A7:A4:C6:AB:53:AF:E1:EF:EC:AC:01:13:ED:EE:D2:65:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HjLVp6TGq1Ov4e_srAET7e7SZYI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:1e:15:87:a3:77:95:61:dc:de:bb:e2:77:8c:67:9f:47:23:
         87:9f:06:bc:23:a2:98:1d:1f:3b:a3:13:e8:85:64:48:d2:13:
         2b:a9:2a:9e:d2:b3:e5:45:8e:ad:89:5f:60:02:a6:72:b9:97:
         16:a3:32:76:f5:c4:0d:6f:d9:43:6a:8e:46:83:66:62:41:fe:
         18:16:74:1a:6a:9f:28:6b:a6:c9:32:07:e7:7f:80:cf:a4:10:
         c3:f2:6c:d3:e1:ce:25:41:a5:74:19:c3:8f:46:30:80:5d:a5:
         b3:6f:1b:71:cf:90:c8:b7:08:61:45:9c:b1:42:31:31:bf:56:
         17:04:32:ad:b3:f6:f9:25:e6:a0:19:c4:78:e7:a2:f5:93:3a:
         92:dd:91:85:da:a2:c9:23:fd:34:fc:17:15:57:a3:92:ea:11:
         40:a4:77:02:ae:f9:a3:7c:63:4b:0b:33:c9:81:a9:25:8d:ad:
         69:3d:b7:71:7a:50:30:e9:bb:a9:07:44:57:71:0e:f1:d8:13:
         e9:8f:c6:35:74:d8:27:61:dc:18:7d:57:85:cf:98:f0:07:7b:
         11:64:4e:00:25:42:ac:e3:2a:32:3c:83:13:d9:16:bf:87:7f:
         18:cf:20:9e:68:12:76:a3:61:da:4f:4a:3b:15:02:a1:a9:f9:
         2c:91:76:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:54:36 2025 by rpki-client