Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft
File:                     5pgpU98Hd67biO4_8goVJkBXF4U.mft (raw, json)
Hash identifier:          /MGLYRtU/dfc/DbQLobNDs4Pr9kzFr66b65jIqibMbU=
Subject key identifier:   F5:6C:66:95:78:0D:DA:F1:90:BA:5F:B9:8C:69:80:AA:DF:62:15:4E
Authority key identifier: E6:98:29:53:DF:07:77:AE:DB:88:EE:3F:F2:0A:15:26:40:57:17:85
Certificate issuer:       /CN=E6982953DF0777AEDB88EE3FF20A152640571785
Certificate serial:       1EA7
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft
Manifest number:          1EA5
Signing time:             Thu 05 Jun 2025 16:40:54 +0000
Manifest this update:     Thu 05 Jun 2025 16:40:54 +0000
Manifest next update:     Thu 05 Jun 2025 22:40:54 +0000
Files and hashes:         1: 5pgpU98Hd67biO4_8goVJkBXF4U.crl (hash: pa/c9VUkgGO8f7jKo1r8WI/YNHuz6GqI7mu4pSjeQ+s=)
                          2: QwvD7ilHysLGynnkEaRLtZ8S6Us.roa (hash: YP5VY/+ASkz1LfhocyuQ44niccX27uswh8o+HNY2T1o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7847 (0x1ea7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6982953DF0777AEDB88EE3FF20A152640571785
        Validity
            Not Before: Jun  5 16:40:54 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=F56C6695780DDAF190BA5FB98C6980AADF62154E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:de:f9:ff:3a:5a:43:5a:91:63:2e:4d:ef:18:
                    5b:0b:0a:09:ca:d7:1d:0c:25:df:6d:00:13:84:bd:
                    fd:4f:6a:e7:d8:48:ff:f1:f2:0a:62:d4:37:a4:a1:
                    c8:bd:54:7c:b6:a7:72:d6:61:a8:39:d7:0f:52:21:
                    3f:56:13:3a:d7:be:50:e4:5b:ad:e0:18:7f:ce:34:
                    de:d6:2e:28:36:a7:f3:59:66:fd:13:12:63:a4:21:
                    ac:37:54:a9:5b:91:31:0c:15:3f:cb:1e:cf:cd:37:
                    59:e1:40:9e:da:92:74:06:f9:07:19:af:a2:a9:e5:
                    7c:fe:a1:6b:8a:8e:e2:4a:2d:63:fb:4f:20:fd:a5:
                    82:54:f0:25:ce:f4:b9:a1:da:b1:10:8a:7e:43:98:
                    b9:7f:8f:c9:11:e8:cd:59:de:a7:ed:85:b4:44:61:
                    a0:99:ce:f4:9b:46:27:fd:88:c1:30:d7:9a:4c:16:
                    20:04:49:a8:eb:96:d8:98:96:09:01:3f:2a:9a:c0:
                    19:ee:f8:17:ad:8d:e8:fa:b8:64:0e:f7:82:87:a6:
                    c0:59:dc:77:98:b5:6f:80:40:f6:ad:7d:c9:e9:5f:
                    21:41:b0:64:c9:53:61:c7:99:72:da:92:99:cf:ac:
                    c1:e3:dc:49:79:c2:2e:c7:58:bf:e9:f4:6a:4e:95:
                    33:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6C:66:95:78:0D:DA:F1:90:BA:5F:B9:8C:69:80:AA:DF:62:15:4E
            X509v3 Authority Key Identifier:
                keyid:E6:98:29:53:DF:07:77:AE:DB:88:EE:3F:F2:0A:15:26:40:57:17:85

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:05:b4:c5:97:14:36:5a:54:98:0c:63:e9:87:cf:af:9c:b4:
         22:23:00:35:eb:2a:18:c3:2d:c2:ae:2a:cb:51:10:7d:ab:ec:
         29:0b:e0:83:1f:41:2b:33:4e:5c:7e:41:f1:11:59:4f:1c:7b:
         96:74:a0:0d:21:cc:5a:89:2b:8a:3d:d5:c7:b0:45:b1:f3:34:
         5c:3c:b5:cc:d0:ec:74:e1:3d:06:69:8d:52:f8:ab:ab:24:cb:
         49:5f:fd:a9:3d:dd:28:5c:0c:ac:b9:ac:5b:dd:f7:15:17:34:
         cd:80:e1:67:d6:1d:2f:e9:73:4d:70:57:64:03:7d:60:a4:a4:
         de:ba:de:d9:83:8c:4d:ae:ab:65:e0:18:33:93:54:69:2d:b1:
         83:11:22:f7:f0:0e:1d:81:72:2c:6a:21:56:7a:ca:8c:8b:eb:
         8c:1a:a7:f2:e0:61:10:f2:be:f8:3d:da:a7:dd:5c:a4:02:2d:
         1c:27:f6:8b:c7:07:e1:81:4c:b8:6f:c5:9d:fa:e9:58:83:a6:
         d5:3d:4b:68:2f:8e:86:8d:b3:a9:6d:4d:f7:e0:27:20:35:89:
         b2:d3:00:98:a8:55:2f:c1:9b:47:ee:78:25:99:1c:54:31:b4:
         ac:85:68:ed:96:63:62:52:f4:9e:46:6d:59:3f:53:27:65:18:
         96:01:ce:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:27:47 2025 by rpki-client