Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft
File:                     v53ECbEbmTO6Vq39mHrqjUQseeY.mft (raw, json)
Hash identifier:          JZ6Q2GSIds1/6kmVdZ4+61KfOIulszWil7hTbBMzE5E=
Subject key identifier:   F8:E2:2E:50:F9:3E:41:5F:34:59:D2:35:81:18:CB:2C:26:31:0B:8E
Authority key identifier: BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6
Certificate issuer:       /CN=BF9DC409B11B9933BA56ADFD987AEA8D442C79E6
Certificate serial:       7A
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft
Manifest number:          7A
Signing time:             Sat 29 Mar 2025 10:31:47 +0000
Manifest this update:     Sat 29 Mar 2025 10:31:47 +0000
Manifest next update:     Sat 29 Mar 2025 16:31:47 +0000
Files and hashes:         1: v53ECbEbmTO6Vq39mHrqjUQseeY.crl (hash: q+tsmeD/xpjmEJvHSFXyFYcyhJHZvkjgDJ8N1WVnsT0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF9DC409B11B9933BA56ADFD987AEA8D442C79E6
        Validity
            Not Before: Mar 29 10:31:47 2025 GMT
            Not After : Mar  6 01:26:51 2026 GMT
        Subject: CN=F8E22E50F93E415F3459D2358118CB2C26310B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cf:77:2d:29:68:98:00:29:fe:22:7e:7d:b9:
                    3a:e9:2b:47:d5:25:b3:7f:94:ee:92:e0:3d:94:40:
                    25:7f:40:5d:2e:bb:c1:fa:cd:e2:64:93:ee:a0:1d:
                    21:33:4e:76:b5:7e:71:6c:39:77:d8:56:9b:1a:3a:
                    ac:e1:95:97:b5:d7:9f:c4:04:05:c6:d8:6d:46:e5:
                    b1:85:ef:64:e5:f8:2d:1e:00:b4:79:cb:c3:86:73:
                    0a:05:36:dd:c5:67:41:83:03:df:ef:fe:9e:14:e7:
                    1d:d0:a3:50:3d:77:a7:ca:73:d8:53:48:71:d5:76:
                    a0:dd:b9:cb:6a:82:db:3b:82:c7:33:8d:b6:42:2c:
                    cb:05:ca:e4:95:b7:9f:fd:64:a4:7b:d9:dc:21:5b:
                    ee:0e:b2:d8:0c:81:b5:98:55:41:90:b2:cd:d4:35:
                    68:1b:5b:38:63:03:b8:5b:0c:a3:ba:e3:94:fd:c8:
                    ae:81:69:50:99:9c:b9:cd:7f:28:14:d6:b0:60:9a:
                    9f:25:35:77:fa:63:91:5c:5c:cf:a3:25:97:2f:0e:
                    5d:f1:8a:68:49:0b:94:89:74:0e:c7:ce:77:9c:8a:
                    84:14:46:4e:56:ee:f9:e4:4b:1c:d1:3c:df:94:e4:
                    8b:c8:ce:ae:af:7b:80:34:ff:6e:8a:de:a2:b3:10:
                    e7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E2:2E:50:F9:3E:41:5F:34:59:D2:35:81:18:CB:2C:26:31:0B:8E
            X509v3 Authority Key Identifier:
                keyid:BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:b0:6a:f4:12:71:f4:19:a3:99:c9:d7:0f:6b:ee:e2:5a:bb:
         1f:ca:24:be:0b:24:7b:00:2f:ad:b4:3d:27:6b:5c:29:fd:eb:
         49:6a:52:22:4e:4f:2e:0f:80:58:b5:0e:d2:3d:ec:d3:22:d1:
         b4:bb:e6:66:6a:e4:3c:8a:e9:c8:a1:59:91:03:f4:25:f9:ff:
         93:9f:f8:f9:eb:60:d9:00:71:7b:01:9c:8b:1d:bd:fa:18:8b:
         a5:8a:39:d4:a9:0a:c1:4a:35:2f:9c:f2:00:43:0f:b7:c7:d5:
         77:24:cb:71:b5:8f:e3:23:ad:55:72:fa:74:de:6a:ca:63:06:
         b5:b0:ed:b7:25:2b:08:b1:df:9e:1c:e3:cb:da:5d:be:59:d2:
         f4:3c:88:22:09:1b:c7:d0:3a:29:b0:18:77:c3:2d:0b:a6:31:
         a9:51:0b:06:ee:e8:c2:b7:ad:17:f8:19:f2:2d:33:06:ee:12:
         4c:54:36:f2:aa:1b:11:12:fc:4d:63:ff:3c:5d:31:3a:3a:58:
         90:66:dd:92:5d:b6:51:5b:f3:6f:32:64:ce:c5:4f:f1:cc:db:
         e0:d3:cb:89:9b:94:dd:b2:ef:a2:12:7e:7c:05:e4:ff:a3:e4:
         48:d9:c9:db:ac:fb:1d:6b:de:29:3c:ef:79:2e:d7:23:7f:e9:
         18:02:63:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:22 2025 by rpki-client