Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft
File:                     SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft (raw, json)
Hash identifier:          w/4YXQc5ExF6H1F5iOZGUvbIIC8rA2mrQVOsBTszaM0=
Subject key identifier:   3E:57:93:88:59:E1:87:A2:C4:51:D1:66:42:21:06:DB:45:82:10:85
Authority key identifier: 48:E4:8A:FA:F1:F8:99:4A:66:75:66:CF:5F:D3:64:FA:75:B0:68:6F
Certificate issuer:       /CN=48E48AFAF1F8994A667566CF5FD364FA75B0686F
Certificate serial:       0C59
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft
Manifest number:          0C59
Signing time:             Sat 23 Aug 2025 11:02:24 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:24 +0000
Manifest next update:     Sat 23 Aug 2025 17:02:24 +0000
Files and hashes:         1: SOSK-vH4mUpmdWbPX9Nk-nWwaG8.crl (hash: B7Isv7Da16Z1p3prCuYiHldo6COePW0/6ydyVB8tmm8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3161 (0xc59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48E48AFAF1F8994A667566CF5FD364FA75B0686F
        Validity
            Not Before: Aug 23 11:02:24 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=3E57938859E187A2C451D166422106DB45821085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ed:ef:9a:86:f7:ef:22:38:0b:68:89:27:3e:
                    83:99:5a:37:75:00:79:34:33:93:4a:ed:6c:85:53:
                    ca:31:28:da:8b:e0:e1:7a:ae:0a:76:f2:47:a5:79:
                    0e:8e:5c:15:3c:cd:96:0c:65:ca:2a:d8:bc:ee:a4:
                    11:fb:e5:d1:33:94:31:d7:af:1c:64:f7:f7:81:06:
                    88:6c:9e:4a:59:8e:82:14:b1:a9:8a:2f:14:fd:2a:
                    0e:b6:aa:fc:48:51:e0:55:c1:2a:70:e7:ca:f5:77:
                    6c:0e:b9:9a:e2:fc:cf:59:4c:4b:66:c8:41:67:3c:
                    e5:18:9d:65:cd:da:04:00:d1:6f:4d:64:0a:44:ef:
                    3b:e4:d2:70:b6:98:36:a0:0c:fd:ac:2c:bd:73:c1:
                    aa:3a:45:6d:3c:63:6d:de:e6:1f:77:9e:94:62:00:
                    ea:05:da:02:72:e2:ca:9e:bf:a6:08:51:f6:7a:0d:
                    09:06:1a:66:54:53:4e:38:f2:f8:65:46:f0:0b:ad:
                    ea:4d:c3:fa:a2:52:78:ee:a8:ab:24:78:e9:90:9b:
                    f9:44:1e:7e:fa:1b:35:e7:32:7b:1c:1e:a1:e9:76:
                    d1:ee:a1:5a:13:98:8e:3a:d1:97:82:5d:11:52:f1:
                    de:d7:b5:ff:8b:3a:7c:3d:f7:30:23:54:c9:ac:60:
                    b6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:57:93:88:59:E1:87:A2:C4:51:D1:66:42:21:06:DB:45:82:10:85
            X509v3 Authority Key Identifier:
                keyid:48:E4:8A:FA:F1:F8:99:4A:66:75:66:CF:5F:D3:64:FA:75:B0:68:6F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:73:02:e1:69:6d:07:f3:83:98:7c:b6:91:96:05:6f:26:78:
         02:0c:36:6e:f9:35:0e:36:72:03:a7:32:96:f5:09:9d:85:26:
         91:42:74:5d:6f:fb:c0:dd:70:09:ff:2f:28:df:72:9f:06:f8:
         05:c3:b6:53:11:14:d4:fa:9a:e4:1a:fa:68:03:bc:ad:f4:7a:
         18:d4:66:28:b2:cc:08:5a:e9:8c:68:67:ff:3e:39:80:c9:e8:
         1d:67:5c:33:57:8f:b3:85:be:27:64:58:27:00:a2:6d:66:1b:
         0a:3d:1c:0d:d0:f7:06:4a:0a:f2:7d:fc:d3:38:88:2d:fd:b4:
         40:0c:24:97:f3:30:a6:68:75:e2:72:17:ff:63:81:b1:58:2b:
         e9:ca:a3:2d:ad:74:4d:e0:f6:2f:be:f2:a3:ff:1b:9b:90:81:
         74:d8:13:e9:51:c1:a8:50:95:85:dd:eb:5b:7b:65:f9:66:83:
         29:79:fe:f3:8f:cb:eb:77:d1:bd:d1:47:53:78:a4:25:f5:93:
         50:fe:55:6a:ab:0a:de:67:54:7c:7c:43:94:ef:e9:38:9d:29:
         d3:f1:60:88:8a:5e:bd:d3:87:20:e7:6b:83:a2:ed:78:36:43:
         12:26:ba:f5:f6:f4:20:a3:c5:e2:9b:eb:6c:01:2e:5f:e9:23:
         4f:7e:7d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:03 2025 by rpki-client