Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft
File:                     UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft (raw, json)
Hash identifier:          kcDp8I7TP+JqCbPZW9cn68gfF/t/utf5sCNb9YvAhLQ=
Subject key identifier:   08:D4:14:59:3F:3D:C6:9E:2F:07:0F:CA:2F:84:00:7D:00:76:19:11
Authority key identifier: 51:EA:B2:8F:23:8F:D7:40:7C:2F:66:39:60:48:9D:D6:D9:51:DA:74
Certificate issuer:       /CN=51EAB28F238FD7407C2F663960489DD6D951DA74
Certificate serial:       2F9D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UeqyjyOP10B8L2Y5YEid1tlR2nQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft
Manifest number:          2F9D
Signing time:             Fri 31 Jan 2025 15:28:45 +0000
Manifest this update:     Fri 31 Jan 2025 15:28:45 +0000
Manifest next update:     Fri 31 Jan 2025 21:28:45 +0000
Files and hashes:         1: UeqyjyOP10B8L2Y5YEid1tlR2nQ.crl (hash: AGdA7ZiZBp086rDlhMDLjLGHp/BCIiH0SqS4jqrgMO0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12189 (0x2f9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51EAB28F238FD7407C2F663960489DD6D951DA74
        Validity
            Not Before: Jan 31 15:28:45 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=08D414593F3DC69E2F070FCA2F84007D00761911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:17:2a:8f:06:e1:ae:0c:1c:3b:78:88:4e:d3:
                    ca:38:21:47:26:7c:7d:0f:c0:b3:c3:90:a9:d0:63:
                    c8:23:3c:2b:af:71:3f:50:04:09:b0:ae:cb:2b:5b:
                    ae:d9:aa:b3:2a:a3:fc:82:51:0e:c0:09:a9:a9:24:
                    c2:3c:b7:e2:78:40:dc:6e:46:ce:b2:bc:ec:e2:66:
                    4a:d1:22:9e:1d:1a:03:6f:0d:7b:a8:e2:3f:5e:ee:
                    97:86:12:6e:bc:49:b9:2e:48:82:71:cd:1c:f9:9f:
                    5e:c7:9e:0f:fd:7e:b2:35:d2:0d:16:3a:4f:a5:c2:
                    17:fb:fd:37:ad:00:45:88:a9:86:d8:85:00:00:c2:
                    cc:aa:83:2f:cf:75:5c:d4:02:43:8e:f3:a9:53:b2:
                    9c:0d:81:b4:63:24:6a:0a:6d:ae:bb:ae:5d:be:3e:
                    23:21:ce:52:9c:be:1e:b0:72:94:a6:b5:90:25:c2:
                    71:ee:44:98:22:64:26:c8:1a:e6:3c:81:fb:63:25:
                    f3:88:17:e0:b4:f1:7b:88:ed:eb:66:bc:8d:a2:d2:
                    1c:99:7a:3e:db:ed:48:98:00:a8:4e:8d:64:08:31:
                    3d:6d:f8:9b:7a:03:f2:dd:86:9a:97:93:c6:f3:86:
                    c6:a7:32:59:5f:bb:5c:9b:2d:52:75:ab:1b:23:02:
                    07:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D4:14:59:3F:3D:C6:9E:2F:07:0F:CA:2F:84:00:7D:00:76:19:11
            X509v3 Authority Key Identifier:
                keyid:51:EA:B2:8F:23:8F:D7:40:7C:2F:66:39:60:48:9D:D6:D9:51:DA:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UeqyjyOP10B8L2Y5YEid1tlR2nQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:d8:40:bf:03:a0:7d:b2:58:fb:eb:d0:d5:33:26:fe:c7:3b:
         03:6c:47:b0:48:b6:51:c4:5a:10:83:d6:74:4e:88:93:e1:39:
         8c:a2:b8:80:81:84:16:a0:af:0a:26:0d:aa:1e:cf:fe:9b:b2:
         4f:c1:1b:90:ac:43:a6:1a:d9:5d:e6:89:17:e1:16:d7:df:db:
         76:81:9e:d8:5d:ca:d5:11:3b:e6:3a:90:ad:cf:11:0d:cb:b9:
         21:d8:7f:2c:a6:96:2b:dd:24:5e:31:b5:1e:67:20:e5:c2:14:
         e2:d0:ef:34:0a:a7:cc:9e:a3:32:e6:36:eb:00:e2:f2:74:fe:
         b9:12:b8:b1:60:16:45:24:a6:b7:88:88:d7:82:8d:79:a7:77:
         62:20:05:fe:58:36:dc:a4:b1:db:45:4d:df:e9:8c:5e:22:c0:
         80:47:ea:13:95:be:d5:35:cc:b3:87:1d:df:31:07:39:e5:c5:
         3e:1e:69:ab:27:b1:6f:82:68:bc:f4:70:3b:d0:48:76:f7:9a:
         34:29:fc:99:9d:9c:dd:db:c8:2c:bf:10:71:7e:18:dc:06:cc:
         c7:94:d3:ad:9c:d1:56:f6:7f:2e:1d:7c:d0:a7:1c:02:6c:41:
         6f:30:38:85:66:66:66:1c:6b:a0:20:cc:52:8a:fb:d8:d6:64:
         cc:73:38:57
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICL50wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTFF
QUIyOEYyMzhGRDc0MDdDMkY2NjM5NjA0ODlERDZEOTUxREE3NDAeFw0yNTAxMzEx
NTI4NDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDA4RDQxNDU5M0YzREM2
OUUyRjA3MEZDQTJGODQwMDdEMDA3NjE5MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRFyqPBuGuDBw7eIhO08o4IUcmfH0PwLPDkKnQY8gjPCuvcT9Q
BAmwrssrW67ZqrMqo/yCUQ7ACampJMI8t+J4QNxuRs6yvOziZkrRIp4dGgNvDXuo
4j9e7peGEm68SbkuSIJxzRz5n17Hng/9frI10g0WOk+lwhf7/TetAEWIqYbYhQAA
wsyqgy/PdVzUAkOO86lTspwNgbRjJGoKba67rl2+PiMhzlKcvh6wcpSmtZAlwnHu
RJgiZCbIGuY8gftjJfOIF+C08XuI7etmvI2i0hyZej7b7UiYAKhOjWQIMT1t+Jt6
A/LdhpqXk8bzhsanMllfu1ybLVJ1qxsjAgcDAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUCNQUWT89xp4vBw/KL4QAfQB2GREwHwYDVR0jBBgwFoAUUeqyjyOP10B8L2Y5
YEid1tlR2nQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQw
My9VZXF5anlPUDEwQjhMMlk1WUVpZDF0bFIyblEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1VlcXlqeU9QMTBCOEwyWTVZRWlkMXRsUjJuUS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI0MDMvVWVxeWp5T1AxMEI4
TDJZNVlFaWQxdGxSMm5RLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAL7YQL8DoH2yWPvr0NUzJv7HOwNsR7BItlHEWhCD1nROiJPhOYyiuICBhBag
rwomDaoez/6bsk/BG5CsQ6Ya2V3miRfhFtff23aBnthdytURO+Y6kK3PEQ3LuSHY
fyymlivdJF4xtR5nIOXCFOLQ7zQKp8yeozLmNusA4vJ0/rkSuLFgFkUkpreIiNeC
jXmnd2IgBf5YNtyksdtFTd/pjF4iwIBH6hOVvtU1zLOHHd8xBznlxT4eaasnsW+C
aLz0cDvQSHb3mjQp/JmdnN3byCy/EHF+GNwGzMeU062c0Vb2fy4dfNCnHAJsQW8w
OIVmZmYca6AgzFKK+9jWZMxzOFc=
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:46:54 2025 by rpki-client