Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft
File:                     D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft (raw, json)
Hash identifier:          UubuPVH6qLBGJ9DZNGevxlWS45eyUtjdQy1dCixUQGA=
Subject key identifier:   FC:98:CF:7E:04:CA:93:83:B7:6A:F6:BE:63:00:43:EC:39:A6:BC:67
Authority key identifier: 0F:D1:1C:D5:9F:4F:5C:A6:63:5B:0F:7F:AB:4E:A2:3C:9D:4E:A2:EF
Certificate issuer:       /CN=0FD11CD59F4F5CA6635B0F7FAB4EA23C9D4EA2EF
Certificate serial:       1165
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft
Manifest number:          1165
Signing time:             Fri 22 Nov 2024 10:24:06 +0000
Manifest this update:     Fri 22 Nov 2024 10:24:05 +0000
Manifest next update:     Fri 22 Nov 2024 16:24:05 +0000
Files and hashes:         1: D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.crl (hash: ckM2WzEaW8btEGUOSx1rvxYzB9wdnOUraUeXGU3xt2k=)

Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 16:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4453 (0x1165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD11CD59F4F5CA6635B0F7FAB4EA23C9D4EA2EF
        Validity
            Not Before: Nov 22 10:24:05 2024 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=FC98CF7E04CA9383B76AF6BE630043EC39A6BC67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:c0:d7:1a:d5:ba:7e:e2:db:f4:fb:c8:c4:
                    eb:e2:b8:7c:49:ec:e6:df:88:20:65:d3:a1:88:c6:
                    83:c8:2d:83:6d:e4:f2:40:f9:aa:ce:5b:83:f5:08:
                    50:3a:0f:0f:5e:2e:39:30:f1:f0:1a:2b:36:70:9d:
                    40:df:46:17:8f:b2:7f:cc:ff:7e:b0:7b:81:0c:ed:
                    40:10:9e:8f:57:bd:8a:d4:3c:0c:6d:d1:ea:53:8b:
                    f2:94:8c:7a:26:92:14:6d:62:8d:a6:87:d0:d3:87:
                    e0:30:a0:92:99:51:95:2a:b1:86:8d:69:40:10:b7:
                    77:94:6c:f9:70:d8:98:e4:2d:5e:43:50:03:fa:0d:
                    7f:37:2c:b0:bd:8d:1c:a5:08:f9:a2:61:66:a2:27:
                    79:7d:e0:c0:41:e3:8d:5f:84:c5:de:a2:46:fb:2e:
                    11:d9:db:4b:4e:16:18:6f:f7:f6:ea:ac:5e:be:7c:
                    67:77:72:20:85:c2:a8:ff:d4:9a:99:53:46:e6:85:
                    f3:62:59:a2:97:b1:a4:66:5e:97:07:70:71:5a:bf:
                    d7:b8:fb:c7:5f:58:79:60:62:0b:b2:83:b6:3e:36:
                    04:38:76:99:cf:62:09:21:f0:69:dd:93:2b:d4:6c:
                    d8:c3:5c:ba:35:2e:f1:1a:6c:ab:d3:f4:eb:ae:43:
                    53:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:98:CF:7E:04:CA:93:83:B7:6A:F6:BE:63:00:43:EC:39:A6:BC:67
            X509v3 Authority Key Identifier:
                keyid:0F:D1:1C:D5:9F:4F:5C:A6:63:5B:0F:7F:AB:4E:A2:3C:9D:4E:A2:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:ce:f6:3e:19:15:0e:84:d0:76:7c:8c:cd:4d:1f:80:9d:95:
         dd:23:1a:f7:17:e6:c1:4a:ee:11:ad:9c:fb:44:7d:2a:15:5e:
         de:ec:71:da:06:f3:19:ff:ed:2a:bd:39:81:90:80:4a:e3:1e:
         f7:e7:8a:af:d8:bf:5a:d6:eb:aa:5e:60:c6:c9:e8:a8:e2:4f:
         d9:7b:f4:32:2f:b9:4c:fd:ca:35:47:61:ff:aa:af:57:8c:d0:
         ed:6d:64:e0:84:56:a0:c9:cd:10:d4:8a:52:19:d6:19:30:23:
         75:cd:24:a0:d3:7a:46:2e:aa:a9:24:03:da:44:52:61:a4:23:
         69:03:e1:4c:0e:8a:29:8d:21:d1:91:79:d9:a3:5d:0a:4f:46:
         78:8a:1e:ef:3a:16:09:e2:5e:21:72:95:6e:b1:f7:66:47:0d:
         72:f3:9c:23:bb:a5:18:b5:8f:f7:6b:90:b2:8e:54:35:5d:4d:
         c8:21:2d:e2:2e:e1:2c:61:b6:c0:6e:5e:71:60:eb:31:78:be:
         65:4b:7b:09:80:d1:75:a4:f4:36:d5:d1:8b:17:98:8f:13:ec:
         2e:2e:9b:b1:2c:2c:0b:e3:b9:e6:c9:d6:1d:73:15:41:a3:f6:
         5b:ed:16:57:a8:d6:50:10:88:29:a2:8e:14:d1:53:12:83:1a:
         49:ad:d9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:05:41 2024 by rpki-client on console-fra.rpki-client.org