Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3301/d8dGei7gNDZsV_rH8mea6-bWobo.mft
File:                     d8dGei7gNDZsV_rH8mea6-bWobo.mft (raw, json)
Hash identifier:          Z+a9Iqkup1lDyGYM8iD5gjCuGdyU9eKaqbTL0vZKuKA=
Subject key identifier:   23:81:2E:6F:73:7D:32:E0:ED:69:64:01:B0:F6:7A:47:41:8B:C6:97
Authority key identifier: 77:C7:46:7A:2E:E0:34:36:6C:57:FA:C7:F2:67:9A:EB:E6:D6:A1:BA
Certificate issuer:       /CN=77C7467A2EE034366C57FAC7F2679AEBE6D6A1BA
Certificate serial:       02BC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d8dGei7gNDZsV_rH8mea6-bWobo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/d8dGei7gNDZsV_rH8mea6-bWobo.mft
Manifest number:          02BC
Signing time:             Fri 22 Nov 2024 10:21:00 +0000
Manifest this update:     Fri 22 Nov 2024 10:21:00 +0000
Manifest next update:     Fri 22 Nov 2024 16:21:00 +0000
Files and hashes:         1: d8dGei7gNDZsV_rH8mea6-bWobo.crl (hash: 0VSNetWpK+MawcbO3ORyknE8GRXH8WTFyfWNqra7VwU=)

Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/d8dGei7gNDZsV_rH8mea6-bWobo.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/d8dGei7gNDZsV_rH8mea6-bWobo.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d8dGei7gNDZsV_rH8mea6-bWobo.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 16:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 700 (0x2bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77C7467A2EE034366C57FAC7F2679AEBE6D6A1BA
        Validity
            Not Before: Nov 22 10:21:00 2024 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=23812E6F737D32E0ED696401B0F67A47418BC697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:94:3f:73:8b:b9:dc:95:55:ff:75:68:16:8c:
                    09:97:6b:a2:3c:81:ad:cb:cc:e7:58:64:76:9d:35:
                    e6:b2:48:af:9c:47:3a:9a:81:f5:f9:38:ea:9b:f3:
                    f6:e6:3f:03:61:fe:32:0e:71:31:26:19:c3:83:15:
                    ac:d8:5f:7e:a8:01:62:5b:5e:e6:16:a1:4f:e2:cd:
                    3f:b9:55:a7:9f:ac:3d:0e:c7:32:c1:58:ec:d8:d7:
                    aa:fb:75:da:d7:51:32:6b:75:6a:a6:92:2c:40:63:
                    f9:07:a5:dc:40:22:df:de:a0:4f:88:54:c4:40:4b:
                    bb:24:cd:63:db:e1:16:61:03:59:5f:13:e7:d4:fa:
                    d0:88:32:01:d2:8c:61:b7:fe:3b:12:b0:a1:35:78:
                    ae:2f:1a:26:eb:e5:dc:2d:3f:59:2f:e5:8c:48:19:
                    1e:76:a4:9d:8f:e3:47:6f:e7:aa:be:44:2b:92:24:
                    20:0d:14:7f:20:aa:aa:66:31:84:13:62:d2:1a:3f:
                    e4:ab:74:fd:8f:4a:cb:03:93:f7:4c:49:09:ae:c1:
                    6c:b3:c5:f8:42:ba:34:83:21:bd:69:41:93:e5:52:
                    2d:f5:07:62:6f:3d:f8:83:40:0e:07:f0:13:fc:a4:
                    6d:07:d9:69:58:59:bc:b2:ae:78:87:6b:47:c8:1f:
                    a0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:81:2E:6F:73:7D:32:E0:ED:69:64:01:B0:F6:7A:47:41:8B:C6:97
            X509v3 Authority Key Identifier:
                keyid:77:C7:46:7A:2E:E0:34:36:6C:57:FA:C7:F2:67:9A:EB:E6:D6:A1:BA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/d8dGei7gNDZsV_rH8mea6-bWobo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d8dGei7gNDZsV_rH8mea6-bWobo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/d8dGei7gNDZsV_rH8mea6-bWobo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:68:19:e5:17:bf:50:30:2a:9a:f1:47:55:85:13:52:49:fd:
         19:76:c2:ed:c7:45:a7:9d:a8:be:5f:ae:b2:c0:c4:4f:41:b2:
         20:23:82:82:b0:3f:e8:8f:2d:44:eb:62:c8:bb:5d:8e:c3:08:
         01:60:eb:2c:97:0f:fe:d8:a4:48:4b:e3:2c:cc:88:a7:35:71:
         37:b4:61:e5:7a:d8:e9:94:03:f0:cf:eb:dc:08:79:91:65:de:
         9e:08:fa:1b:ff:7a:43:42:3e:6e:b6:07:05:8b:be:0b:4d:0a:
         3a:a3:56:01:79:88:1e:4e:99:e9:0f:40:6c:95:5d:bd:c2:99:
         1c:97:31:2f:9e:f2:c3:fe:ad:f0:b9:7e:c1:c3:2b:54:d3:ba:
         9d:32:2a:a8:e2:30:c8:29:d8:c3:5c:89:76:48:90:ba:20:61:
         68:31:a0:a9:ef:ac:80:6d:2b:87:c5:6a:f0:00:1b:e4:e3:db:
         d4:69:74:d6:6b:20:6e:ff:fc:ba:e2:13:97:68:76:38:a6:6b:
         5c:4a:ee:d0:c5:5e:fd:8b:ba:f0:81:63:b5:fb:f2:cf:e0:39:
         39:98:5a:2a:81:8b:c5:71:26:b0:9d:59:8f:b8:b9:0f:06:8b:
         31:e5:41:4c:ba:ee:96:02:15:3f:7a:e1:52:c6:4b:bf:81:86:
         f2:c0:de:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:05:39 2024 by rpki-client on console-fra.rpki-client.org