Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3293/6qQFnleNFIT5GmbjAiBd1KoVAA4.mft
File:                     6qQFnleNFIT5GmbjAiBd1KoVAA4.mft (raw, json)
Hash identifier:          wwD2guCWZOrKcLah42SLBim0cj5ToF2FN2u1X8q1aW4=
Subject key identifier:   6F:E0:AD:C0:88:47:24:48:6F:66:CE:5C:00:0D:EA:C1:58:95:D9:7B
Authority key identifier: EA:A4:05:9E:57:8D:14:84:F9:1A:66:E3:02:20:5D:D4:AA:15:00:0E
Certificate issuer:       /CN=EAA4059E578D1484F91A66E302205DD4AA15000E
Certificate serial:       031D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6qQFnleNFIT5GmbjAiBd1KoVAA4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/6qQFnleNFIT5GmbjAiBd1KoVAA4.mft
Manifest number:          031D
Signing time:             Fri 22 Nov 2024 15:24:13 +0000
Manifest this update:     Fri 22 Nov 2024 15:24:13 +0000
Manifest next update:     Fri 22 Nov 2024 21:24:13 +0000
Files and hashes:         1: 6qQFnleNFIT5GmbjAiBd1KoVAA4.crl (hash: diidKh/vzknRAFU+FybVZV3+YCQlfKFXWm7wKK4T7As=)

Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/6qQFnleNFIT5GmbjAiBd1KoVAA4.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/6qQFnleNFIT5GmbjAiBd1KoVAA4.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6qQFnleNFIT5GmbjAiBd1KoVAA4.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 19:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 797 (0x31d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAA4059E578D1484F91A66E302205DD4AA15000E
        Validity
            Not Before: Nov 22 15:24:13 2024 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=6FE0ADC0884724486F66CE5C000DEAC15895D97B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b9:a9:f8:38:16:24:54:dc:23:e5:1a:14:60:
                    d5:a0:89:98:51:90:ed:a3:4d:a2:36:0e:97:5b:80:
                    64:cc:82:57:86:ec:6b:33:2b:f2:9e:3c:97:29:4e:
                    4e:a2:ff:e9:25:03:d7:b5:53:5b:de:f8:05:86:c0:
                    b3:97:e7:22:37:4d:08:7b:67:5a:19:4b:a3:7c:49:
                    bb:1b:8a:78:ea:77:08:f5:2d:bc:3e:b5:b1:c7:a9:
                    40:63:73:31:bf:45:2c:d0:ef:f7:4f:34:f0:59:a4:
                    9e:92:a2:a0:e2:bb:d9:ef:77:fe:e8:d8:8d:5a:5c:
                    ef:76:c1:0f:1f:ed:a3:61:29:45:aa:4e:2c:45:26:
                    31:14:3b:09:17:6b:da:5e:15:fb:0a:da:0c:e0:05:
                    de:7d:e1:fd:3f:a5:20:16:9a:b8:e1:5e:1b:26:9f:
                    1d:6c:83:21:9f:38:05:78:f0:2e:90:73:d5:8f:82:
                    0a:d9:c6:3e:e6:a8:c8:b6:84:fb:3f:85:00:b6:9a:
                    89:df:4e:1e:57:50:7e:66:bc:b9:a4:6d:2f:fd:22:
                    ba:89:b2:cd:a7:dc:94:4b:13:58:0e:9b:5b:fd:c6:
                    51:94:40:38:85:00:9b:cf:62:62:6b:be:4c:c8:07:
                    db:c5:f2:29:f3:33:b8:ec:18:e3:07:94:2a:b2:76:
                    c6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E0:AD:C0:88:47:24:48:6F:66:CE:5C:00:0D:EA:C1:58:95:D9:7B
            X509v3 Authority Key Identifier:
                keyid:EA:A4:05:9E:57:8D:14:84:F9:1A:66:E3:02:20:5D:D4:AA:15:00:0E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/6qQFnleNFIT5GmbjAiBd1KoVAA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6qQFnleNFIT5GmbjAiBd1KoVAA4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/6qQFnleNFIT5GmbjAiBd1KoVAA4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:df:9e:39:88:0b:eb:64:35:c6:5c:57:6c:46:f3:84:7f:4e:
         5a:40:5e:64:27:9a:82:cc:a0:69:3d:b8:c8:56:8d:7f:0a:2a:
         34:6d:9b:c8:c6:b3:9d:59:d7:88:6e:2d:99:bc:ec:7c:26:ce:
         7c:76:a8:91:62:b5:94:2f:7e:b6:de:c0:11:db:2d:ab:8c:f0:
         60:8c:6e:37:3e:97:48:6a:fa:0c:3c:87:63:98:d7:fa:36:6d:
         44:1d:f3:58:7b:f0:87:b4:eb:34:4f:e6:66:8b:ae:0b:e5:51:
         bb:4c:0d:70:4f:f9:72:a5:de:63:51:2a:34:f2:b2:2b:7b:f6:
         10:aa:ba:dd:09:f8:d1:d8:45:59:76:8e:bd:29:bd:07:c9:51:
         d4:bc:37:ba:fa:fd:d0:b8:e1:25:ad:3a:92:40:84:9a:c9:7f:
         14:18:c9:83:1a:fb:07:32:15:90:77:ab:07:72:f9:06:67:18:
         ed:08:64:56:33:9c:3a:a2:6f:3a:73:56:8c:db:55:c3:4b:39:
         50:fc:a7:ae:44:12:22:14:4d:5e:d1:88:c3:31:03:d9:ff:e6:
         eb:03:cc:6b:28:91:52:d2:95:f0:e2:94:b0:e2:71:c3:c6:8d:
         b1:31:08:52:1a:03:bd:d6:bd:70:4b:f5:dc:8f:5c:52:ee:8b:
         db:2f:07:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:36:46 2024 by rpki-client on console-ams.rpki-client.org