Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft
File:                     rG7v4uYozkZswlwA92XMjVOKljE.mft (raw, json)
Hash identifier:          59lESAHnQ/w1as0hGYzHVElkdR/KBJDrd3BkcIFB5zU=
Subject key identifier:   5D:BC:17:74:C2:16:B6:8C:B2:FB:36:DF:32:73:F6:DA:28:54:55:05
Authority key identifier: AC:6E:EF:E2:E6:28:CE:46:6C:C2:5C:00:F7:65:CC:8D:53:8A:96:31
Certificate issuer:       /CN=AC6EEFE2E628CE466CC25C00F765CC8D538A9631
Certificate serial:       0650
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rG7v4uYozkZswlwA92XMjVOKljE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft
Manifest number:          0650
Signing time:             Thu 05 Jun 2025 16:39:40 +0000
Manifest this update:     Thu 05 Jun 2025 16:39:40 +0000
Manifest next update:     Thu 05 Jun 2025 22:39:40 +0000
Files and hashes:         1: rG7v4uYozkZswlwA92XMjVOKljE.crl (hash: CiWAQVqklYdpZ2rsAAxKMAs/xUClLKketoYIwvlChjw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1616 (0x650)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC6EEFE2E628CE466CC25C00F765CC8D538A9631
        Validity
            Not Before: Jun  5 16:39:40 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=5DBC1774C216B68CB2FB36DF3273F6DA28545505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ad:ac:7b:44:6c:5d:ff:9e:5f:48:e2:5c:c2:
                    37:32:a8:5e:a5:34:31:87:30:f0:cf:f6:0b:4b:cc:
                    ac:9c:37:fa:25:e8:d2:c0:e1:84:b2:39:ea:b5:63:
                    8d:f6:9c:1c:00:e6:13:0c:a8:1a:f0:33:39:ed:65:
                    24:bc:be:49:b0:50:8c:74:7b:e3:42:91:a1:21:f2:
                    70:2f:36:66:5e:41:b4:e2:bd:c6:cf:f1:0c:84:04:
                    12:a8:f2:ed:61:6c:b5:36:65:09:04:f0:a7:aa:82:
                    cc:69:51:7b:c0:76:ef:12:65:50:2f:8b:71:3d:05:
                    bd:d6:37:1e:8a:b7:82:ba:08:77:19:44:e1:31:f9:
                    82:3c:1a:83:73:e0:cf:e5:82:3d:25:f1:29:25:3d:
                    e0:63:be:5d:d5:08:31:89:bb:3a:c4:53:02:72:18:
                    1d:4c:1f:40:4c:86:e0:a6:0c:14:f8:6a:e6:06:23:
                    77:3e:44:06:b1:aa:78:71:e7:22:9b:90:87:44:9d:
                    60:f9:cd:01:89:3e:43:11:61:ff:72:8a:a1:3e:01:
                    ef:33:45:f3:e8:b0:08:4f:79:73:cd:85:fd:6b:57:
                    ec:42:d9:83:61:77:22:ae:1d:26:b6:12:c3:fb:34:
                    f7:4c:4e:54:00:4d:85:89:7a:cd:55:cf:58:c6:cc:
                    15:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BC:17:74:C2:16:B6:8C:B2:FB:36:DF:32:73:F6:DA:28:54:55:05
            X509v3 Authority Key Identifier:
                keyid:AC:6E:EF:E2:E6:28:CE:46:6C:C2:5C:00:F7:65:CC:8D:53:8A:96:31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rG7v4uYozkZswlwA92XMjVOKljE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:12:3d:9a:29:99:3b:ad:3a:03:9d:02:d1:4c:ea:b7:2f:e9:
         de:39:1f:d8:9c:ad:05:a8:d6:99:f8:6b:ee:ae:b4:54:b9:0f:
         77:29:8a:21:f7:67:e5:35:08:ed:9f:b4:4b:56:06:4b:ac:7c:
         89:61:18:3e:f8:2d:bc:90:2e:76:16:ac:e1:ce:21:46:9d:f0:
         62:a8:02:19:04:bd:62:ee:66:58:47:3a:34:bf:f5:df:ec:2a:
         c0:2e:86:7d:9f:41:63:41:60:2e:24:2e:2c:52:5b:00:c1:83:
         ed:28:79:a2:fd:0c:2b:2d:33:6e:da:9b:37:69:d2:ea:95:25:
         8f:ec:de:bb:8f:d5:e9:88:1f:4d:a4:be:be:de:ca:0e:3b:3f:
         81:7e:cf:fd:c5:7d:5b:f5:9d:37:b7:07:8a:29:ba:ec:83:30:
         24:d4:43:ac:1e:6d:fc:15:d3:9c:e0:41:4e:f4:cd:3f:c3:76:
         91:ea:bf:88:83:a8:ab:37:93:43:39:11:11:63:80:4a:c4:c0:
         40:73:ed:5d:d1:77:15:3c:92:fb:19:61:b3:f2:bf:26:4b:3f:
         20:05:e7:cf:45:41:b0:15:d3:f1:64:d8:d4:dd:9c:3b:48:db:
         af:40:2d:e4:9a:0b:a4:97:03:a1:f3:0d:9f:9e:c2:4a:ce:86:
         45:ac:f8:57
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBlAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUM2
RUVGRTJFNjI4Q0U0NjZDQzI1QzAwRjc2NUNDOEQ1MzhBOTYzMTAeFw0yNTA2MDUx
NjM5NDBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDVEQkMxNzc0QzIxNkI2
OENCMkZCMzZERjMyNzNGNkRBMjg1NDU1MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD0rax7RGxd/55fSOJcwjcyqF6lNDGHMPDP9gtLzKycN/ol6NLA
4YSyOeq1Y432nBwA5hMMqBrwMzntZSS8vkmwUIx0e+NCkaEh8nAvNmZeQbTivcbP
8QyEBBKo8u1hbLU2ZQkE8KeqgsxpUXvAdu8SZVAvi3E9Bb3WNx6Kt4K6CHcZROEx
+YI8GoNz4M/lgj0l8SklPeBjvl3VCDGJuzrEUwJyGB1MH0BMhuCmDBT4auYGI3c+
RAaxqnhx5yKbkIdEnWD5zQGJPkMRYf9yiqE+Ae8zRfPosAhPeXPNhf1rV+xC2YNh
dyKuHSa2EsP7NPdMTlQATYWJes1Vz1jGzBWfAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUXbwXdMIWtoyy+zbfMnP22ihUVQUwHwYDVR0jBBgwFoAUrG7v4uYozkZswlwA
92XMjVOKljEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw
Mi9yRzd2NHVZb3prWnN3bHdBOTJYTWpWT0tsakUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3JHN3Y0dVlvemtac3dsd0E5MlhNalZPS2xqRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDIvckc3djR1WW96a1pz
d2x3QTkyWE1qVk9LbGpFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAAESPZopmTutOgOdAtFM6rcv6d45H9icrQWo1pn4a+6utFS5D3cpiiH3Z+U1
CO2ftEtWBkusfIlhGD74LbyQLnYWrOHOIUad8GKoAhkEvWLuZlhHOjS/9d/sKsAu
hn2fQWNBYC4kLixSWwDBg+0oeaL9DCstM27amzdp0uqVJY/s3ruP1emIH02kvr7e
yg47P4F+z/3FfVv1nTe3B4opuuyDMCTUQ6webfwV05zgQU70zT/DdpHqv4iDqKs3
k0M5ERFjgErEwEBz7V3RdxU8kvsZYbPyvyZLPyAF589FQbAV0/Fk2NTdnDtI269A
LeSaC6SXA6HzDZ+ewkrOhkWs+Fc=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:07:55 2025 by rpki-client