Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft
File:                     J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft (raw, json)
Hash identifier:          uy/vzGKJJ+3PBtRtpaI+5DR1EEtYzigSoVfWxSksC74=
Subject key identifier:   7C:4E:C6:0D:45:C6:34:A4:4F:28:CF:25:93:60:4B:9F:0D:73:80:34
Authority key identifier: 27:B3:9B:01:8F:1A:D0:63:7E:30:72:7C:28:D9:2E:20:A6:3E:EF:55
Certificate issuer:       /CN=27B39B018F1AD0637E30727C28D92E20A63EEF55
Certificate serial:       15FC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/J7ObAY8a0GN-MHJ8KNkuIKY-71U.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft
Manifest number:          15FC
Signing time:             Fri 31 Jan 2025 15:24:25 +0000
Manifest this update:     Fri 31 Jan 2025 15:24:25 +0000
Manifest next update:     Fri 31 Jan 2025 21:24:25 +0000
Files and hashes:         1: J7ObAY8a0GN-MHJ8KNkuIKY-71U.crl (hash: zfXd1d/BWbmgo8cx8ocxVKGIU3PMLzLVgjxLBwXAfrs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5628 (0x15fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B39B018F1AD0637E30727C28D92E20A63EEF55
        Validity
            Not Before: Jan 31 15:24:25 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=7C4EC60D45C634A44F28CF2593604B9F0D738034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:54:da:f3:3d:08:08:c8:93:a8:23:8f:30:1f:
                    9c:9a:c2:d7:4c:9f:66:f5:91:39:61:51:b0:a4:ac:
                    d5:d9:d9:93:de:c6:01:c6:64:60:c8:6f:c3:b3:2f:
                    10:98:36:9e:b4:24:8e:8f:f9:a2:bb:e8:dd:d3:32:
                    ad:a9:a2:f5:58:b8:be:6a:42:34:a4:9c:d6:8d:95:
                    28:4a:04:d3:ff:29:98:37:d0:2a:80:18:f6:74:26:
                    77:59:66:32:57:b5:ea:c6:44:c0:6e:c4:8b:4a:b9:
                    fc:9c:d3:46:96:d3:aa:69:03:aa:4a:e5:69:2b:a3:
                    d6:63:6c:f8:4f:10:a7:96:9d:e9:0f:7a:dd:a2:d0:
                    ce:00:39:a5:ae:26:0d:a3:0a:12:1b:bc:15:1a:82:
                    7e:66:57:41:3d:64:3a:6a:33:89:59:2f:87:e5:50:
                    17:08:85:a3:db:dd:11:05:42:bb:e9:55:60:cd:de:
                    d9:d0:ba:76:bb:5d:38:6e:1a:33:c4:c3:6b:d5:cb:
                    14:e3:83:4f:ce:be:e9:5a:2b:29:7c:34:56:85:89:
                    43:a5:d6:9c:6b:74:ba:b2:0f:32:0b:5c:de:66:27:
                    fa:5c:58:50:64:a2:2b:f2:6c:9f:6f:78:dc:a2:ad:
                    51:84:d0:94:42:47:1f:54:38:ac:31:2d:28:c0:13:
                    9c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4E:C6:0D:45:C6:34:A4:4F:28:CF:25:93:60:4B:9F:0D:73:80:34
            X509v3 Authority Key Identifier:
                keyid:27:B3:9B:01:8F:1A:D0:63:7E:30:72:7C:28:D9:2E:20:A6:3E:EF:55

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/J7ObAY8a0GN-MHJ8KNkuIKY-71U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:4e:bb:d7:a8:86:dc:f0:94:e8:d0:1c:59:41:a7:97:71:fc:
         a2:c7:96:12:eb:35:a5:20:6b:8b:78:30:b9:a4:7f:5c:3e:15:
         88:8a:1b:68:a7:09:9f:2b:d0:1b:55:7a:c8:b9:87:e9:f0:36:
         1c:f7:7b:30:95:ec:6d:21:07:01:65:d7:e5:14:8e:2b:4c:42:
         46:59:7c:a1:a3:fa:a3:c1:e2:31:d7:01:a7:1f:2f:cc:36:fb:
         44:9a:a0:be:5e:e3:c9:f0:02:e2:e8:29:95:8e:d8:7a:39:a8:
         3c:5b:26:1a:29:9b:d1:e4:a9:05:cd:cb:49:5c:65:61:92:44:
         44:55:29:fb:9e:5b:65:b1:e3:4e:66:36:1b:43:cc:8b:95:b9:
         2b:c0:31:1a:ae:f8:64:44:3a:be:5c:d7:4b:33:3e:e0:f7:14:
         55:cc:98:20:17:ab:79:44:7e:11:f1:4a:f0:e6:86:44:21:99:
         89:47:ad:24:cc:b6:bb:57:33:0f:96:fc:e7:03:12:24:6f:8d:
         a8:b2:d6:98:2e:ae:f3:0a:d0:49:c9:74:e4:06:d3:02:5e:78:
         84:42:57:3e:ec:44:34:c7:e2:47:d0:fc:35:7d:2a:e1:46:4d:
         d4:a4:6f:34:49:b3:3e:e8:aa:20:a4:41:ab:ba:fa:43:ec:32:
         76:4d:80:1c
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICFfwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjdC
MzlCMDE4RjFBRDA2MzdFMzA3MjdDMjhEOTJFMjBBNjNFRUY1NTAeFw0yNTAxMzEx
NTI0MjVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDdDNEVDNjBENDVDNjM0
QTQ0RjI4Q0YyNTkzNjA0QjlGMEQ3MzgwMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwVNrzPQgIyJOoI48wH5yawtdMn2b1kTlhUbCkrNXZ2ZPexgHG
ZGDIb8OzLxCYNp60JI6P+aK76N3TMq2povVYuL5qQjSknNaNlShKBNP/KZg30CqA
GPZ0JndZZjJXterGRMBuxItKufyc00aW06ppA6pK5Wkro9ZjbPhPEKeWnekPet2i
0M4AOaWuJg2jChIbvBUagn5mV0E9ZDpqM4lZL4flUBcIhaPb3REFQrvpVWDN3tnQ
una7XThuGjPEw2vVyxTjg0/OvulaKyl8NFaFiUOl1pxrdLqyDzILXN5mJ/pcWFBk
oivybJ9veNyirVGE0JRCRx9UOKwxLSjAE5y9AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUfE7GDUXGNKRPKM8lk2BLnw1zgDQwHwYDVR0jBBgwFoAUJ7ObAY8a0GN+MHJ8
KNkuIKY+71UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx
NS9KN09iQVk4YTBHTi1NSEo4S05rdUlLWS03MVUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0o3T2JBWThhMEdOLU1ISjhLTmt1SUtZLTcxVS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTUvSjdPYkFZOGEwR04t
TUhKOEtOa3VJS1ktNzFVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAItOu9eohtzwlOjQHFlBp5dx/KLHlhLrNaUga4t4MLmkf1w+FYiKG2inCZ8r
0BtVesi5h+nwNhz3ezCV7G0hBwFl1+UUjitMQkZZfKGj+qPB4jHXAacfL8w2+0Sa
oL5e48nwAuLoKZWO2Ho5qDxbJhopm9HkqQXNy0lcZWGSRERVKfueW2Wx405mNhtD
zIuVuSvAMRqu+GREOr5c10szPuD3FFXMmCAXq3lEfhHxSvDmhkQhmYlHrSTMtrtX
Mw+W/OcDEiRvjaiy1pgurvMK0EnJdOQG0wJeeIRCVz7sRDTH4kfQ/DV9KuFGTdSk
bzRJsz7oqiCkQau6+kPsMnZNgBw=
-----END CERTIFICATE-----
Generated at Tue Apr 29 02:29:54 2025 by rpki-client