Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
File: vevthkDLplk9qfmj3SKNOJEkWOo.mft (raw, json)
Hash identifier: CNzfQpEU4rbWMJowQD8xKGNABS4EwpWv72IsO+hoIBI=
Subject key identifier: E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5D3B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
Manifest number: 40B8
Signing time: Fri 31 Jan 2025 15:26:08 +0000
Manifest this update: Fri 31 Jan 2025 15:26:08 +0000
Manifest next update: Fri 31 Jan 2025 21:26:08 +0000
Files and hashes: 1: TSY7JcOEbzPWgbE9NK4zQt1XAvY.roa (hash: aLhl2+Q8OwATqdMYpJ2RVYRINELa+dVAZvh7RXDHT3g=)
2: uVgk8t-O2k60XCEaCsMauOlrBAo.roa (hash: owHUj/RmYqUVmV7ohWesDrEdgk+fQY/BCNEPtGgDvC4=)
3: vevthkDLplk9qfmj3SKNOJEkWOo.crl (hash: hUw1sTKqD7TqMPT8nErD47lGJuPECxrEg5Yt+WHz8GY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23867 (0x5d3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jan 31 15:26:08 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E892465B0A4F35613D692B3B68536E8EC10E0BB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:d1:e8:f6:24:57:3c:ef:97:6d:d5:2b:6c:
a0:43:f7:62:68:e2:1a:b2:45:65:5e:23:9b:ef:ef:
6f:f8:4f:e5:a0:c5:16:77:ae:b9:40:6d:d2:ec:5d:
e8:22:56:4e:fb:f3:2c:d2:21:f5:4c:e2:31:de:06:
74:58:9c:d1:2c:39:10:7c:8a:23:b3:4d:7b:a7:fe:
aa:4a:f0:65:09:b9:5b:b2:09:d3:01:18:53:fc:2a:
f1:cf:04:ed:ed:09:eb:7a:94:4a:8f:e7:76:d8:7c:
74:e3:f8:2d:52:45:b0:57:fc:8f:5d:ed:fc:ab:86:
4c:1a:d4:e7:24:b7:00:86:7d:89:b0:2a:df:0b:ab:
21:f8:b4:42:82:cd:ed:c4:73:34:ee:9f:c9:84:2c:
3b:49:c6:b8:64:46:8f:82:9b:c8:80:ed:4f:05:7c:
d3:e0:23:00:7d:52:4b:26:12:68:09:26:58:58:70:
45:bf:d7:26:7d:05:7f:60:d7:79:78:7b:49:0f:ed:
42:71:86:b3:fe:5f:7b:e7:42:fa:6e:e8:76:8c:0c:
95:8b:59:fb:88:e9:4a:6a:f2:12:bb:78:82:36:ce:
e9:40:51:2f:09:2c:a5:c8:6c:2b:fe:61:5b:54:e4:
4a:c0:cd:b3:ac:60:48:f5:bd:2a:93:0a:fc:aa:ad:
8e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:5b:92:91:2c:83:f0:59:0a:fc:7b:dc:52:71:0e:22:fc:8d:
b8:c3:fc:c5:9b:ee:1e:d6:2b:b3:25:71:70:0a:4b:bf:c9:6f:
aa:0e:e7:7d:5e:6a:0d:98:25:af:7f:86:67:1e:d8:e9:13:5e:
e5:8b:90:1c:46:a9:5b:51:00:48:95:88:e2:d6:a0:74:ec:b3:
ae:be:8a:04:8c:a9:b0:93:92:6c:34:ab:4c:b0:bb:cd:60:69:
59:b2:11:69:84:84:2e:3d:61:9b:a7:3a:f5:2d:5a:64:3d:5d:
4e:85:b1:95:83:00:18:11:f2:7f:bb:82:35:b4:ff:37:5d:a3:
59:51:4a:a9:7b:8c:71:5c:98:7d:42:47:ac:4c:22:ca:59:39:
9c:ca:2f:a5:98:87:c8:74:03:2d:0f:ac:9b:92:7b:61:8f:64:
6e:16:69:25:5b:c8:32:bb:5a:ab:1e:cd:82:d7:71:b7:f7:a2:
80:81:50:37:5c:ff:1e:9f:42:e0:7a:1f:f9:8c:82:63:da:07:
0b:bd:92:9b:01:d5:de:7c:11:8c:2b:f5:27:f0:5e:26:e2:e6:
d2:91:50:b6:c6:ca:12:e4:71:f5:aa:72:fd:09:44:25:d6:e0:
19:1c:36:19:e4:65:e3:68:25:12:c6:79:b4:ac:9f:45:8d:cf:
a7:10:ec:9a
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICXTswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTAxMzEx
NTI2MDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEU4OTI0NjVCMEE0RjM1
NjEzRDY5MkIzQjY4NTM2RThFQzEwRTBCQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7L9Ho9iRXPO+XbdUrbKBD92Jo4hqyRWVeI5vv72/4T+WgxRZ3
rrlAbdLsXegiVk778yzSIfVM4jHeBnRYnNEsORB8iiOzTXun/qpK8GUJuVuyCdMB
GFP8KvHPBO3tCet6lEqP53bYfHTj+C1SRbBX/I9d7fyrhkwa1OcktwCGfYmwKt8L
qyH4tEKCze3EczTun8mELDtJxrhkRo+Cm8iA7U8FfNPgIwB9UksmEmgJJlhYcEW/
1yZ9BX9g13l4e0kP7UJxhrP+X3vnQvpu6HaMDJWLWfuI6Upq8hK7eII2zulAUS8J
LKXIbCv+YVtU5ErAzbOsYEj1vSqTCvyqrY79AgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQU6JJGWwpPNWE9aSs7aFNujsEOC7MwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3ZldnRoa0RMcGxrOXFm
bWozU0tOT0pFa1dPby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBYW5KRLIPwWQr8e9xScQ4i/I24w/zFm+4e1iuzJXFwCku/yW+qDud9XmoNmCWv
f4ZnHtjpE17li5AcRqlbUQBIlYji1qB07LOuvooEjKmwk5JsNKtMsLvNYGlZshFp
hIQuPWGbpzr1LVpkPV1OhbGVgwAYEfJ/u4I1tP83XaNZUUqpe4xxXJh9QkesTCLK
WTmcyi+lmIfIdAMtD6ybknthj2RuFmklW8gyu1qrHs2C13G396KAgVA3XP8en0Lg
eh/5jIJj2gcLvZKbAdXefBGMK/Un8F4m4ubSkVC2xsoS5HH1qnL9CUQl1uAZHDYZ
5GXjaCUSxnm0rJ9Fjc+nEOya
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:55:56 2025 by rpki-client