Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3383/2XvHH8m9pBkR8fuAruokHEj-jmI.mft
File:                     2XvHH8m9pBkR8fuAruokHEj-jmI.mft (raw, json)
Hash identifier:          m0FI9JsUCadfLEoX0Ee2Xash+DFFPTUeYP6ernKrcbY=
Subject key identifier:   3D:14:2B:1D:11:16:8C:09:9D:11:82:C8:5A:C7:1E:F0:69:25:BA:E6
Authority key identifier: D9:7B:C7:1F:C9:BD:A4:19:11:F1:FB:80:AE:EA:24:1C:48:FE:8E:62
Certificate issuer:       /CN=D97BC71FC9BDA41911F1FB80AEEA241C48FE8E62
Certificate serial:       C7
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2XvHH8m9pBkR8fuAruokHEj-jmI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/2XvHH8m9pBkR8fuAruokHEj-jmI.mft
Manifest number:          C7
Signing time:             Sun 24 Aug 2025 03:01:55 +0000
Manifest this update:     Sun 24 Aug 2025 03:01:55 +0000
Manifest next update:     Sun 24 Aug 2025 09:01:55 +0000
Files and hashes:         1: 2XvHH8m9pBkR8fuAruokHEj-jmI.crl (hash: Z4ij+bGkbjeytbgIgG3f3MrCVgQSx7HxbdEechvTZfY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D97BC71FC9BDA41911F1FB80AEEA241C48FE8E62
        Validity
            Not Before: Aug 24 03:01:55 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=3D142B1D11168C099D1182C85AC71EF06925BAE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:d0:9b:24:5e:2b:e8:e7:90:1b:7e:6f:13:
                    63:8d:46:2e:46:56:06:1b:7d:fc:75:1b:14:da:8d:
                    b4:b0:15:2c:26:7d:ed:90:d5:d0:01:56:f6:28:ad:
                    1f:2f:9d:08:39:e9:04:cf:5c:9d:9a:3b:33:9b:a2:
                    85:51:ba:d3:60:c9:53:27:34:23:67:94:33:af:b3:
                    20:8b:bf:b6:1b:e4:e5:85:ed:e0:b4:14:63:ff:79:
                    28:ad:0f:dd:3f:01:f3:18:73:64:7e:62:7c:60:02:
                    e0:83:06:3f:a5:73:c9:97:93:cc:20:ef:a3:11:3e:
                    84:40:db:f0:fc:5e:0d:fb:93:8b:ff:3a:f6:7a:ea:
                    25:aa:7e:8e:29:92:be:56:bf:42:0f:1e:fe:4f:14:
                    e3:f9:73:4b:04:60:5b:e2:c2:da:78:ae:5c:fa:0f:
                    cc:09:b5:42:57:60:ce:9e:a6:1b:20:97:0e:b4:2f:
                    3b:89:7f:e5:26:b7:df:3e:89:61:db:c9:de:27:3f:
                    dd:dc:16:3c:e3:32:c9:0c:85:cd:18:09:9d:0c:3f:
                    f9:9e:bf:3b:d0:78:ad:b1:da:d9:45:df:b3:36:ff:
                    95:35:72:bd:46:75:1f:03:03:13:29:18:59:ce:d0:
                    f0:86:07:5a:6b:96:78:95:2a:d0:74:9e:88:ba:e6:
                    87:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:14:2B:1D:11:16:8C:09:9D:11:82:C8:5A:C7:1E:F0:69:25:BA:E6
            X509v3 Authority Key Identifier:
                keyid:D9:7B:C7:1F:C9:BD:A4:19:11:F1:FB:80:AE:EA:24:1C:48:FE:8E:62

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/2XvHH8m9pBkR8fuAruokHEj-jmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2XvHH8m9pBkR8fuAruokHEj-jmI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/2XvHH8m9pBkR8fuAruokHEj-jmI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:1d:f5:a3:c6:7b:6f:48:28:ca:2b:fb:11:74:55:f3:59:65:
         1a:f9:db:ca:b4:23:a7:fa:71:a2:3e:27:d7:02:39:8c:dc:98:
         ae:28:c3:1a:5d:bb:39:62:c4:c2:cb:7a:e6:ab:ce:89:0d:24:
         62:c5:6a:86:be:85:d5:bf:7d:8f:3f:7c:9a:9d:fa:29:16:0a:
         f2:2a:89:21:61:e1:a3:02:09:a6:a5:ef:39:76:cb:44:23:11:
         5a:93:59:ff:d7:dd:4d:bf:f3:c8:92:66:88:89:61:7a:6b:bc:
         32:90:3a:5b:ae:89:18:bd:68:86:7f:bc:eb:bb:64:b8:10:38:
         bb:29:e8:13:5a:80:1d:72:06:e1:ed:8d:82:4e:18:6d:41:68:
         c5:7a:7f:97:73:3d:84:34:5c:c4:b2:9f:b2:ec:b8:94:62:a5:
         0f:f6:5a:96:3e:f1:5d:dd:19:bc:c8:a5:a7:f2:8b:e6:d0:fc:
         b0:88:c3:44:00:1d:51:8c:ee:d5:78:70:19:cb:25:71:d4:25:
         67:78:22:8f:7b:5e:a4:b9:a5:a9:f4:52:4b:16:42:bc:32:2f:
         b6:86:b8:d5:f5:57:67:6a:05:2a:18:51:27:e5:8e:ea:ae:fc:
         6f:f5:b9:67:84:e8:cf:f9:74:f6:7e:ec:05:fa:8e:2b:e7:7b:
         2d:e0:d5:b1
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDk3
QkM3MUZDOUJEQTQxOTExRjFGQjgwQUVFQTI0MUM0OEZFOEU2MjAeFw0yNTA4MjQw
MzAxNTVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDNEMTQyQjFEMTExNjhD
MDk5RDExODJDODVBQzcxRUYwNjkyNUJBRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5uNCbJF4r6OeQG35vE2ONRi5GVgYbffx1GxTajbSwFSwmfe2Q
1dABVvYorR8vnQg56QTPXJ2aOzObooVRutNgyVMnNCNnlDOvsyCLv7Yb5OWF7eC0
FGP/eSitD90/AfMYc2R+YnxgAuCDBj+lc8mXk8wg76MRPoRA2/D8Xg37k4v/OvZ6
6iWqfo4pkr5Wv0IPHv5PFOP5c0sEYFviwtp4rlz6D8wJtUJXYM6ephsglw60LzuJ
f+Umt98+iWHbyd4nP93cFjzjMskMhc0YCZ0MP/mevzvQeK2x2tlF37M2/5U1cr1G
dR8DAxMpGFnO0PCGB1prlniVKtB0noi65oczAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUPRQrHREWjAmdEYLIWsce8GkluuYwHwYDVR0jBBgwFoAU2XvHH8m9pBkR8fuA
ruokHEj+jmIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4
My8yWHZISDhtOXBCa1I4ZnVBcnVva0hFai1qbUkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzJYdkhIOG05cEJrUjhmdUFydW9rSEVqLWptSS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODMvMlh2SEg4bTlwQmtS
OGZ1QXJ1b2tIRWotam1JLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJQd9aPGe29IKMor+xF0VfNZZRr528q0I6f6caI+J9cCOYzcmK4owxpduzli
xMLLeuarzokNJGLFaoa+hdW/fY8/fJqd+ikWCvIqiSFh4aMCCaal7zl2y0QjEVqT
Wf/X3U2/88iSZoiJYXprvDKQOluuiRi9aIZ/vOu7ZLgQOLsp6BNagB1yBuHtjYJO
GG1BaMV6f5dzPYQ0XMSyn7LsuJRipQ/2WpY+8V3dGbzIpafyi+bQ/LCIw0QAHVGM
7tV4cBnLJXHUJWd4Io97XqS5pan0UksWQrwyL7aGuNX1V2dqBSoYUSfljuqu/G/1
uWeE6M/5dPZ+7AX6jivney3g1bE=
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:17:48 2025 by rpki-client