Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.mft
File:                     78pGd_Mh9N8jFzkfmOIjZGdF5-4.mft (raw, json)
Hash identifier:          /2OPLg/gEOz97QMazjODcnvzKlwtaTZEqdYkVE2QUCY=
Subject key identifier:   24:10:06:95:B2:66:8A:43:51:75:F1:22:95:B0:8B:08:7A:7D:A4:0E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Certificate issuer:       /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial:       1DBF
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.mft
Manifest number:          1554
Signing time:             Thu 09 May 2024 06:54:23 +0000
Manifest this update:     Thu 09 May 2024 06:54:23 +0000
Manifest next update:     Thu 09 May 2024 12:54:23 +0000
Files and hashes:         1: 78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl (hash: FfP8r0Su2tXsgkXGFxw+HjSUwk6FsaiQsfG2bxVoemY=)
                          2: VYTnjGr4abUurEVDVWeTgW19V3I.roa (hash: z9Padt3OOzDOiAs5uHldHeiTRunhO02r9fgiuM4iwLE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7615 (0x1dbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
        Validity
            Not Before: May  9 06:54:23 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=24100695B2668A435175F12295B08B087A7DA40E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:39:c6:f5:d9:89:a9:b6:38:5e:a3:b6:10:0a:
                    d7:62:3e:1d:12:6a:cb:e1:5a:3e:b0:6c:8e:cb:6a:
                    32:83:0b:20:97:25:7e:a2:b0:26:66:32:e9:c7:1a:
                    1d:fa:49:22:c8:21:70:66:9b:37:3c:a7:2d:ea:27:
                    1b:5b:c1:42:b9:77:66:13:34:b0:a6:2b:7a:c5:49:
                    c5:eb:fe:12:41:a6:b5:19:ac:7a:fe:12:63:aa:e5:
                    e7:04:2d:4b:22:95:54:7f:76:08:1d:3e:57:02:bf:
                    ec:cc:21:bb:07:73:6b:20:f9:e1:61:6b:a9:39:ab:
                    24:e5:02:46:05:bf:aa:f7:d5:39:a9:c4:37:fb:2c:
                    78:66:c0:99:11:ef:0f:66:20:8b:2a:5b:9e:b2:e7:
                    a0:07:61:e7:81:22:50:eb:fe:e4:a3:43:e4:8f:f2:
                    db:bb:78:26:99:09:1e:f0:fc:3e:c1:a8:35:af:75:
                    27:53:b8:b8:0d:ab:a0:92:13:02:3f:5c:92:47:b0:
                    34:0a:54:32:60:db:f1:8e:e3:76:94:bf:1d:03:bb:
                    68:0e:b6:59:c2:fc:f1:40:35:82:08:53:40:45:27:
                    84:a1:db:09:e5:ba:e1:a9:22:4d:2d:16:34:58:8d:
                    6f:54:48:57:58:f1:8b:36:ce:e1:e7:2a:6b:05:63:
                    6c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:10:06:95:B2:66:8A:43:51:75:F1:22:95:B0:8B:08:7A:7D:A4:0E
            X509v3 Authority Key Identifier:
                keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:a1:51:9b:4d:56:b1:2f:0d:55:95:50:0a:9e:61:19:bd:c6:
         c7:a2:e4:17:55:5c:9a:f2:72:bc:61:18:b5:d6:e3:98:3c:68:
         00:df:25:e4:87:31:2b:b8:79:1a:45:a3:20:63:a4:cc:0e:53:
         9f:91:2e:91:58:05:50:25:04:36:ad:13:05:af:67:23:9f:ca:
         f2:dd:07:16:e3:43:4c:f1:6e:6b:14:b7:95:26:ae:2f:a8:e2:
         c6:5a:8d:67:0b:95:67:3f:b6:fd:aa:bb:f8:78:61:38:31:75:
         10:a3:c7:f8:d2:d4:6a:7a:13:92:c5:a9:5f:9a:10:98:70:89:
         87:c2:d2:41:b5:33:fc:ee:61:28:6b:e3:59:60:50:cd:2b:f7:
         26:5b:db:cb:b0:7b:99:be:3f:f0:bb:f6:b4:42:ae:44:0f:ba:
         df:0d:9a:02:f2:63:88:04:af:3a:f8:31:b4:f0:6c:ab:0f:e6:
         ed:47:33:92:f8:69:89:06:92:f7:9a:49:8b:95:65:15:f8:18:
         61:51:21:83:1a:b0:15:9b:86:3f:a8:db:2c:e1:ae:40:75:19:
         bd:37:a4:ae:18:0e:f7:5f:95:64:74:dd:64:84:c6:df:69:5c:
         08:72:df:ea:8c:81:df:b9:c8:73:2b:c1:5f:ff:90:c9:94:04:
         32:84:5b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 16:53:43 2025 by rpki-client