Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft
File:                     UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft (raw, json)
Hash identifier:          cu5X9IEzsq/qO753SJ8r/q5qAF7ZmNNS3XXELb3yV4I=
Subject key identifier:   08:D4:14:59:3F:3D:C6:9E:2F:07:0F:CA:2F:84:00:7D:00:76:19:11
Authority key identifier: 51:EA:B2:8F:23:8F:D7:40:7C:2F:66:39:60:48:9D:D6:D9:51:DA:74
Certificate issuer:       /CN=51EAB28F238FD7407C2F663960489DD6D951DA74
Certificate serial:       3179
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UeqyjyOP10B8L2Y5YEid1tlR2nQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft
Manifest number:          3179
Signing time:             Thu 08 May 2025 02:26:00 +0000
Manifest this update:     Thu 08 May 2025 02:26:00 +0000
Manifest next update:     Thu 08 May 2025 08:26:00 +0000
Files and hashes:         1: UeqyjyOP10B8L2Y5YEid1tlR2nQ.crl (hash: Ohel32vmnPSCdQo1Wj5s6xJLcp5H4OnrzBYAX8GGr2k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12665 (0x3179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51EAB28F238FD7407C2F663960489DD6D951DA74
        Validity
            Not Before: May  8 02:26:00 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=08D414593F3DC69E2F070FCA2F84007D00761911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:17:2a:8f:06:e1:ae:0c:1c:3b:78:88:4e:d3:
                    ca:38:21:47:26:7c:7d:0f:c0:b3:c3:90:a9:d0:63:
                    c8:23:3c:2b:af:71:3f:50:04:09:b0:ae:cb:2b:5b:
                    ae:d9:aa:b3:2a:a3:fc:82:51:0e:c0:09:a9:a9:24:
                    c2:3c:b7:e2:78:40:dc:6e:46:ce:b2:bc:ec:e2:66:
                    4a:d1:22:9e:1d:1a:03:6f:0d:7b:a8:e2:3f:5e:ee:
                    97:86:12:6e:bc:49:b9:2e:48:82:71:cd:1c:f9:9f:
                    5e:c7:9e:0f:fd:7e:b2:35:d2:0d:16:3a:4f:a5:c2:
                    17:fb:fd:37:ad:00:45:88:a9:86:d8:85:00:00:c2:
                    cc:aa:83:2f:cf:75:5c:d4:02:43:8e:f3:a9:53:b2:
                    9c:0d:81:b4:63:24:6a:0a:6d:ae:bb:ae:5d:be:3e:
                    23:21:ce:52:9c:be:1e:b0:72:94:a6:b5:90:25:c2:
                    71:ee:44:98:22:64:26:c8:1a:e6:3c:81:fb:63:25:
                    f3:88:17:e0:b4:f1:7b:88:ed:eb:66:bc:8d:a2:d2:
                    1c:99:7a:3e:db:ed:48:98:00:a8:4e:8d:64:08:31:
                    3d:6d:f8:9b:7a:03:f2:dd:86:9a:97:93:c6:f3:86:
                    c6:a7:32:59:5f:bb:5c:9b:2d:52:75:ab:1b:23:02:
                    07:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D4:14:59:3F:3D:C6:9E:2F:07:0F:CA:2F:84:00:7D:00:76:19:11
            X509v3 Authority Key Identifier:
                keyid:51:EA:B2:8F:23:8F:D7:40:7C:2F:66:39:60:48:9D:D6:D9:51:DA:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UeqyjyOP10B8L2Y5YEid1tlR2nQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:77:36:57:46:5a:5a:1b:b5:d7:89:8b:cc:08:b1:48:a1:4b:
         32:bd:7b:db:8d:4d:3b:69:e1:8d:26:83:b1:3f:9d:de:4d:99:
         37:90:11:79:80:7f:61:78:98:fa:1d:7b:8f:49:6e:2e:c6:8a:
         d9:b4:6b:c7:01:3d:d8:96:bc:7e:97:3c:13:58:59:f3:96:7e:
         5b:a4:50:78:ee:cc:22:ec:82:ea:a3:40:c5:70:84:f3:b0:06:
         8d:33:90:64:28:06:3f:45:b8:b4:dc:55:60:f2:a0:3a:8b:55:
         db:ff:9a:03:35:3e:2e:57:8f:6f:17:a6:40:07:86:49:14:32:
         bf:dc:37:57:e8:30:9d:56:32:22:de:f9:e3:d8:98:3a:33:8c:
         87:15:b2:6b:06:79:55:8c:c9:78:60:57:cb:48:b6:97:38:3f:
         01:6e:58:11:d6:dc:d1:aa:49:65:7b:b3:d2:c6:13:4f:0d:c9:
         0c:ba:2f:1b:5b:62:26:c9:00:d2:f1:28:25:69:92:91:71:2d:
         d8:a8:9a:f3:bf:f9:95:8c:85:b7:a8:7d:dc:6f:67:ac:c7:46:
         e1:3a:6e:65:8d:0e:47:54:c0:b4:b2:bb:f0:b0:e2:84:9f:04:
         93:5a:88:f6:97:22:c1:c4:65:89:0d:c1:aa:4c:4c:f4:9e:4b:
         ba:62:56:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:01:38 2025 by rpki-client