Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3345/j-YA_2Nd9MNVGBnOzRZIJuoWZZQ.mft
File:                     j-YA_2Nd9MNVGBnOzRZIJuoWZZQ.mft (raw, json)
Hash identifier:          mLo8w/Q+G2irhue2l+FZ5MNoQm7zGs6+WpF0MMFUrjE=
Subject key identifier:   63:66:43:5F:6D:5E:9E:C0:B9:35:A1:5E:F3:2E:D7:C9:41:AE:86:B7
Authority key identifier: 8F:E6:00:FF:63:5D:F4:C3:55:18:19:CE:CD:16:48:26:EA:16:65:94
Certificate issuer:       /CN=8FE600FF635DF4C3551819CECD164826EA166594
Certificate serial:       94
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j-YA_2Nd9MNVGBnOzRZIJuoWZZQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/j-YA_2Nd9MNVGBnOzRZIJuoWZZQ.mft
Manifest number:          94
Signing time:             Fri 31 Jan 2025 15:29:31 +0000
Manifest this update:     Fri 31 Jan 2025 15:29:31 +0000
Manifest next update:     Fri 31 Jan 2025 21:29:31 +0000
Files and hashes:         1: j-YA_2Nd9MNVGBnOzRZIJuoWZZQ.crl (hash: XpxtHgZyegQ4X+ZujFVtLuPkK1XqRgU1eoBGgGTeid8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FE600FF635DF4C3551819CECD164826EA166594
        Validity
            Not Before: Jan 31 15:29:31 2025 GMT
            Not After : Jan  2 02:11:12 2026 GMT
        Subject: CN=6366435F6D5E9EC0B935A15EF32ED7C941AE86B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f2:21:72:c2:04:1e:88:ee:77:6e:aa:c8:46:
                    46:fb:bf:69:8c:84:cc:15:f4:7a:07:ac:58:c2:05:
                    24:e2:be:98:8b:77:11:4f:21:90:27:b1:39:f8:5b:
                    43:3c:af:bc:31:83:b3:86:68:df:f8:70:22:30:82:
                    4e:e9:b0:c7:38:76:ee:6b:9e:c3:7b:f5:2c:ed:72:
                    7d:3c:ed:ee:8c:0e:db:77:44:cf:23:e1:e1:c5:77:
                    e2:1a:b4:de:01:13:9e:dc:a5:98:d2:9f:f2:90:2a:
                    d9:be:87:62:07:29:70:26:a9:e6:3a:de:7d:12:c4:
                    66:a1:40:3d:73:90:d9:de:5f:29:51:e8:31:a8:a4:
                    99:cd:d1:8a:69:d8:6b:d0:c1:ec:54:50:32:4d:ba:
                    c9:4c:66:8a:1f:3e:ab:79:ae:31:49:e2:d7:15:48:
                    eb:b3:66:ed:47:ff:87:a9:e8:60:13:ad:fc:78:c8:
                    db:6c:18:fe:97:4c:5f:92:f3:75:e5:b9:f8:b9:d4:
                    18:fb:5c:61:1a:d6:fc:e7:c0:8a:69:46:f8:21:28:
                    e5:66:df:b0:14:51:72:76:1b:e0:e9:83:96:23:d1:
                    a0:b1:8a:a5:15:15:9d:94:39:36:a8:aa:d7:13:15:
                    36:47:1e:37:be:77:74:66:61:35:64:6a:5d:92:40:
                    7c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:66:43:5F:6D:5E:9E:C0:B9:35:A1:5E:F3:2E:D7:C9:41:AE:86:B7
            X509v3 Authority Key Identifier:
                keyid:8F:E6:00:FF:63:5D:F4:C3:55:18:19:CE:CD:16:48:26:EA:16:65:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/j-YA_2Nd9MNVGBnOzRZIJuoWZZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j-YA_2Nd9MNVGBnOzRZIJuoWZZQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/j-YA_2Nd9MNVGBnOzRZIJuoWZZQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ca:39:8f:15:d9:41:6c:5c:9e:9f:65:76:29:34:07:db:6a:
         5a:d3:36:93:5f:d5:4b:97:a0:38:a4:99:b6:4f:61:09:a2:87:
         d6:c9:51:40:f6:4f:3c:dd:81:67:ce:a4:9e:7e:54:ec:70:e4:
         b5:03:ec:48:75:6a:52:c9:5f:ab:d2:a1:fd:b7:dd:9e:4d:50:
         bc:4e:8d:4a:ea:47:6c:8c:97:3e:b7:28:92:5f:1d:bb:54:86:
         9b:32:a0:3e:a8:91:ad:d2:51:ba:46:c7:cd:74:08:86:86:1e:
         73:ff:cc:6b:e6:ac:3a:08:79:a4:f2:7a:62:be:18:93:a9:33:
         6f:0e:42:e6:77:e4:36:93:4d:ba:06:b5:49:96:d5:0f:e7:83:
         b9:43:74:14:60:04:96:29:92:b5:07:f7:f1:d3:01:ce:5b:ac:
         07:81:f6:c6:c5:7d:cb:d3:c1:4d:21:d9:48:cb:95:99:22:93:
         43:b4:14:c4:e3:03:07:71:df:e2:ed:64:4b:0a:48:80:0a:da:
         5e:cc:59:10:73:c9:fa:ad:98:d7:24:d1:dd:6a:3c:b0:59:bb:
         1a:d6:ff:53:f7:d2:90:88:91:90:bd:e5:23:fe:de:0a:8c:08:
         3d:13:34:5e:4f:dd:30:86:83:6d:55:03:ff:5e:9e:8d:fa:8a:
         9d:14:96:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:02:33 2025 by rpki-client