Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3328/406o9-mW0qoqsVi7lztBbAR30cw.mft
File:                     406o9-mW0qoqsVi7lztBbAR30cw.mft (raw, json)
Hash identifier:          BGxdBaOBhHGDtoRPs7XyKPncxiam/XSQQDixG+OLKns=
Subject key identifier:   6B:FA:67:FF:C3:FA:63:CA:3D:1C:DB:3C:D1:92:22:E9:13:A9:84:E3
Authority key identifier: E3:4E:A8:F7:E9:96:D2:AA:2A:B1:58:BB:97:3B:41:6C:04:77:D1:CC
Certificate issuer:       /CN=E34EA8F7E996D2AA2AB158BB973B416C0477D1CC
Certificate serial:       26
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/406o9-mW0qoqsVi7lztBbAR30cw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/406o9-mW0qoqsVi7lztBbAR30cw.mft
Manifest number:          26
Signing time:             Fri 22 Nov 2024 12:52:24 +0000
Manifest this update:     Fri 22 Nov 2024 12:52:24 +0000
Manifest next update:     Fri 22 Nov 2024 18:52:24 +0000
Files and hashes:         1: 406o9-mW0qoqsVi7lztBbAR30cw.crl (hash: k1TIRZ0/27O2YhT3nKY5YmWs0LsNUUEuQiD/i1kVJkY=)

Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/406o9-mW0qoqsVi7lztBbAR30cw.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/406o9-mW0qoqsVi7lztBbAR30cw.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/406o9-mW0qoqsVi7lztBbAR30cw.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 18:52:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E34EA8F7E996D2AA2AB158BB973B416C0477D1CC
        Validity
            Not Before: Nov 22 12:52:24 2024 GMT
            Not After : Nov 15 07:00:21 2025 GMT
        Subject: CN=6BFA67FFC3FA63CA3D1CDB3CD19222E913A984E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:55:51:4e:6a:d3:08:f1:32:68:ab:2b:45:
                    7c:5d:fd:a7:c8:d9:59:46:ee:1d:33:bc:5a:e7:c3:
                    02:65:b8:cf:c3:ab:3a:30:9e:b4:a7:d9:b0:dc:45:
                    1f:8b:9f:1d:4d:50:cd:42:d3:f2:8f:71:47:41:45:
                    e2:45:8a:2c:36:b1:c3:f3:ba:58:a5:af:35:8b:a1:
                    69:ae:b4:8c:91:f2:75:93:9c:94:fb:78:59:64:99:
                    08:35:78:e3:bf:73:a6:81:f7:9c:0d:8c:cc:99:ac:
                    46:30:eb:fe:62:ff:29:c7:ff:ff:a1:03:0e:a2:b9:
                    16:9d:b3:8c:71:fb:86:4b:c5:17:df:12:80:c2:9d:
                    ab:b2:42:0e:51:a6:a3:00:94:4f:f0:87:37:d7:10:
                    ba:a4:39:d4:c5:5b:9e:65:19:58:83:39:86:d4:7b:
                    79:63:8e:38:5e:b4:99:19:68:10:ac:c3:0f:ee:fa:
                    32:1e:b6:6a:89:3d:8b:6c:ae:94:c8:a3:8c:11:89:
                    58:a7:e0:69:b2:d0:72:97:69:4d:01:b8:00:b5:cd:
                    e1:f5:c8:25:78:17:fe:6b:44:49:03:03:ce:7d:70:
                    ea:18:b8:49:5e:0a:54:ba:d4:2a:67:cc:6d:88:50:
                    24:33:9e:5e:0e:9c:85:77:35:f2:25:7c:63:95:e0:
                    57:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FA:67:FF:C3:FA:63:CA:3D:1C:DB:3C:D1:92:22:E9:13:A9:84:E3
            X509v3 Authority Key Identifier:
                keyid:E3:4E:A8:F7:E9:96:D2:AA:2A:B1:58:BB:97:3B:41:6C:04:77:D1:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/406o9-mW0qoqsVi7lztBbAR30cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/406o9-mW0qoqsVi7lztBbAR30cw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/406o9-mW0qoqsVi7lztBbAR30cw.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:22:1b:64:a6:a0:c4:b2:64:eb:67:24:f6:d7:96:37:04:ac:
         5a:93:ba:3e:65:52:45:b5:24:4f:58:88:29:fa:63:85:9c:6e:
         3e:1b:78:6d:de:47:b8:10:ed:18:ce:ca:b1:82:d3:f3:f5:45:
         36:10:35:fe:ed:73:8e:77:22:00:f8:3e:23:ab:3d:9f:04:09:
         1f:8e:09:ed:eb:51:32:94:b6:6f:0a:44:13:ff:fc:9e:2d:bd:
         34:f8:0b:4a:0c:9d:5c:30:fb:13:28:ff:2f:1f:1d:9c:9e:ba:
         b4:aa:04:da:b0:c2:db:c1:80:4e:8b:e2:14:f7:7b:88:c0:ca:
         01:5f:da:e7:db:8f:4b:3b:75:70:15:28:27:f6:6c:9e:5f:1c:
         82:c5:7a:c9:a7:3a:84:ea:50:6e:a8:cf:11:f3:fe:31:8f:cd:
         ce:ff:65:f0:6a:93:da:66:8f:fa:a0:9e:83:4d:a9:1b:d9:86:
         d0:82:7f:b0:52:f3:14:d2:ce:19:2a:66:9f:08:17:63:8e:ac:
         21:d2:54:ac:c0:6e:41:c8:e5:83:5c:d3:fe:e0:34:f8:8b:64:
         e3:92:81:02:4e:37:d5:09:0b:82:1d:85:41:47:18:0a:dd:81:
         c0:1d:7a:a2:60:46:ea:98:35:e0:ec:94:17:60:b2:41:d3:8d:
         1b:03:28:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:36:47 2024 by rpki-client on console-ams.rpki-client.org