Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3310/eulp1muK2ryf72OJwrw1xQoV7a0.mft
File:                     eulp1muK2ryf72OJwrw1xQoV7a0.mft (raw, json)
Hash identifier:          VmyYiHEx9bGp/FvH3vEBbcoXWktxBgh/H5ktOjSrgrI=
Subject key identifier:   00:45:18:11:47:6B:60:51:DD:DF:33:32:52:68:48:5E:CB:28:42:F3
Authority key identifier: 7A:E9:69:D6:6B:8A:DA:BC:9F:EF:63:89:C2:BC:35:C5:0A:15:ED:AD
Certificate issuer:       /CN=7AE969D66B8ADABC9FEF6389C2BC35C50A15EDAD
Certificate serial:       01B2
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eulp1muK2ryf72OJwrw1xQoV7a0.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3310/eulp1muK2ryf72OJwrw1xQoV7a0.mft
Manifest number:          01B2
Signing time:             Fri 22 Nov 2024 15:24:15 +0000
Manifest this update:     Fri 22 Nov 2024 15:24:15 +0000
Manifest next update:     Fri 22 Nov 2024 21:24:15 +0000
Files and hashes:         1: eulp1muK2ryf72OJwrw1xQoV7a0.crl (hash: lB6QGjFgWoeE0LNM8adRMuk4BT9h/Z/j0pqgf95P2pg=)

Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3310/eulp1muK2ryf72OJwrw1xQoV7a0.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3310/eulp1muK2ryf72OJwrw1xQoV7a0.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eulp1muK2ryf72OJwrw1xQoV7a0.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 19:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AE969D66B8ADABC9FEF6389C2BC35C50A15EDAD
        Validity
            Not Before: Nov 22 15:24:15 2024 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=00451811476B6051DDDF33325268485ECB2842F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:69:41:1e:2a:13:83:aa:fe:e3:4d:23:f6:
                    46:99:1d:c0:dc:c2:7d:92:dd:53:a2:7c:d2:36:74:
                    fa:25:8d:3d:45:2d:f1:65:c4:ee:13:07:80:c6:e4:
                    26:2c:c2:63:ae:9f:88:07:ce:c8:11:8e:02:8d:0f:
                    50:8a:2e:d1:0c:73:65:48:78:42:4a:d3:fe:40:d8:
                    04:8a:6b:c6:82:4b:57:8e:08:70:4d:e3:4e:7e:b1:
                    2b:8e:05:82:d6:2b:1b:c0:bc:94:c7:d0:98:10:f4:
                    ba:51:f8:55:85:e9:ff:c0:63:d0:85:c4:ce:7c:9a:
                    9c:33:bc:1f:b4:56:f1:74:f2:94:15:c8:45:33:6a:
                    1e:76:94:8f:7e:90:b3:b8:26:31:47:4f:f3:90:38:
                    74:76:41:09:28:4a:15:4a:a2:ca:d5:51:6d:31:f1:
                    eb:b0:0c:4c:ee:50:e6:9e:18:fa:e5:af:24:29:b2:
                    31:ba:41:59:56:9b:ef:cc:4d:ad:05:75:9f:c7:26:
                    d7:a5:8c:05:95:3b:ad:33:9f:6f:14:5f:f5:e8:f2:
                    04:f5:7e:33:ed:56:5d:2c:b8:7c:4c:80:ff:10:b7:
                    9c:74:86:5c:98:55:28:82:c2:9e:13:30:98:a0:9a:
                    d0:93:6c:e1:bd:b9:63:f7:42:1f:27:a4:2d:0a:b6:
                    43:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:45:18:11:47:6B:60:51:DD:DF:33:32:52:68:48:5E:CB:28:42:F3
            X509v3 Authority Key Identifier:
                keyid:7A:E9:69:D6:6B:8A:DA:BC:9F:EF:63:89:C2:BC:35:C5:0A:15:ED:AD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3310/eulp1muK2ryf72OJwrw1xQoV7a0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eulp1muK2ryf72OJwrw1xQoV7a0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3310/eulp1muK2ryf72OJwrw1xQoV7a0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0c:6b:9a:6b:2e:0b:81:76:36:61:64:1c:18:95:0d:85:62:
         b4:8c:07:d9:bd:6a:96:82:33:f0:58:4c:ed:5c:c9:76:f9:f5:
         41:2c:9b:87:c3:da:64:8d:56:44:52:e2:b5:a6:ac:09:ad:9f:
         01:4a:59:6f:da:8a:8a:41:b8:f8:8a:c1:92:23:43:a4:82:8f:
         4a:8f:55:95:9a:e9:51:7f:40:53:9a:2b:f4:d8:40:f5:bc:9c:
         2a:c2:56:07:cb:9a:fc:15:53:d7:39:b9:cf:4b:52:de:c1:2e:
         a8:bb:04:c4:01:96:03:75:d6:cf:9f:97:da:b4:8e:63:f5:d0:
         20:05:9a:f8:9b:b8:00:a8:d0:68:ae:29:f1:55:a9:fd:69:dd:
         90:af:db:40:73:6a:4b:c1:4c:d0:cf:ad:90:fc:65:72:df:f3:
         0b:5d:4a:f6:5a:19:9e:58:6d:45:50:c7:a3:df:23:ae:a1:67:
         1c:21:98:41:32:d0:df:87:2e:c3:ff:0b:e5:78:90:9e:99:f7:
         d0:ac:c1:7d:15:2e:79:fe:7b:9a:04:21:03:8a:4d:33:b5:dd:
         05:15:3c:0d:e8:98:80:be:6b:a0:b6:f5:30:ee:45:3c:ef:51:
         2d:63:aa:66:78:e0:71:15:98:1c:72:9e:7b:de:06:3f:69:6a:
         06:3a:cc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:36:46 2024 by rpki-client on console-ams.rpki-client.org