Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2141/1rsep985B3YngQY-7FeZ2Qdz2cI.mft
File: 1rsep985B3YngQY-7FeZ2Qdz2cI.mft (raw, json)
Hash identifier: INTfJv1iXXeIzXocwJViBWgEcHPaQucsxlWH8deUqF0=
Subject key identifier: A1:44:D7:61:B9:8C:3D:6E:46:F9:9E:23:85:93:4E:20:7F:3F:56:08
Authority key identifier: D6:BB:1E:A7:DF:39:07:76:27:81:06:3E:EC:57:99:D9:07:73:D9:C2
Certificate issuer: /CN=D6BB1EA7DF3907762781063EEC5799D90773D9C2
Certificate serial: 4E0A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1rsep985B3YngQY-7FeZ2Qdz2cI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2141/1rsep985B3YngQY-7FeZ2Qdz2cI.mft
Manifest number: 4E0A
Signing time: Fri 31 Jan 2025 15:30:15 +0000
Manifest this update: Fri 31 Jan 2025 15:30:15 +0000
Manifest next update: Fri 31 Jan 2025 21:30:15 +0000
Files and hashes: 1: 1rsep985B3YngQY-7FeZ2Qdz2cI.crl (hash: nj8mku4l8RsUlRQM0l74vraIeK59ivf99CPEoULq4nE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19978 (0x4e0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6BB1EA7DF3907762781063EEC5799D90773D9C2
Validity
Not Before: Jan 31 15:30:15 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A144D761B98C3D6E46F99E2385934E207F3F5608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:8d:e3:1f:16:6d:a5:05:7c:2e:71:f0:c5:
80:18:2c:f5:ec:f3:a6:6b:0d:9d:64:b9:17:52:69:
6f:ad:06:89:79:31:51:8b:38:54:24:21:0c:51:7f:
7f:2c:03:bc:de:70:b6:81:21:2a:5e:d9:e8:64:c6:
58:ee:55:18:8f:c8:1e:4f:a7:a1:62:0c:c5:e0:d6:
6e:9b:98:24:01:5b:8d:77:19:78:c9:24:d8:d0:72:
11:1a:8a:e8:dc:03:ff:57:96:aa:a7:5f:86:ba:9f:
c4:9e:3b:8b:ed:d9:eb:9f:dd:60:33:f4:bc:df:58:
13:04:46:da:ba:9a:30:2e:eb:95:ca:cf:9c:d1:b5:
11:0f:fe:76:dc:74:ac:90:b1:e2:06:77:63:f5:64:
11:97:9d:91:29:55:ba:46:bf:08:bb:94:87:e0:39:
a7:0b:f3:e9:5f:c9:f3:1c:9f:10:73:d0:30:ae:23:
6b:b0:d3:5f:47:7e:3f:c8:d1:42:a5:1e:42:12:72:
5d:27:dd:4e:40:ab:b5:0d:ba:05:58:d6:bb:6f:74:
50:2d:45:53:a8:a1:17:22:0c:d7:6f:85:71:f4:22:
d4:81:9c:a3:51:c4:06:ed:54:71:07:5f:d7:b2:49:
18:9b:2c:3b:cd:7d:1f:2b:f6:c1:40:71:20:e8:01:
a2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:44:D7:61:B9:8C:3D:6E:46:F9:9E:23:85:93:4E:20:7F:3F:56:08
X509v3 Authority Key Identifier:
keyid:D6:BB:1E:A7:DF:39:07:76:27:81:06:3E:EC:57:99:D9:07:73:D9:C2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2141/1rsep985B3YngQY-7FeZ2Qdz2cI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1rsep985B3YngQY-7FeZ2Qdz2cI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2141/1rsep985B3YngQY-7FeZ2Qdz2cI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c4:30:b2:2b:f1:1e:bf:6e:0c:3d:40:cc:86:6e:82:c3:aa:
11:19:80:93:8c:fb:c9:e2:59:6f:b0:d6:16:12:b6:a3:01:f3:
fd:6d:ee:cb:0f:64:3e:ee:61:df:3f:a5:5e:a1:1a:b8:db:4f:
a3:35:12:b1:8b:be:ca:c0:a1:39:9b:1f:8c:03:62:89:fb:f8:
f2:e1:16:f2:a0:2d:7a:ec:4b:7c:05:a2:a7:88:45:b0:d1:18:
6d:7c:4a:16:d4:48:69:dd:54:f8:82:ab:65:09:0f:a8:d6:84:
4e:02:39:14:01:0b:07:81:de:98:1b:d5:a6:b9:d6:65:b4:cf:
b6:d0:6f:10:22:91:9b:34:81:d9:34:1a:bb:89:48:dd:60:d1:
0a:53:19:46:03:4d:f9:be:8b:95:63:c1:97:8c:67:11:05:90:
6c:ee:27:cd:e0:ca:16:ec:6d:21:85:fe:10:bf:3c:0b:6a:61:
1e:18:b7:c0:e9:c1:f6:2b:e4:49:f8:c9:ba:72:c5:ae:26:37:
43:3a:b5:fe:b2:84:6e:0b:76:b9:ad:6b:91:03:d1:c9:71:02:
21:c0:ec:4e:29:b8:63:4c:9c:55:f3:87:52:16:1a:c1:a1:6d:
19:11:32:bf:3f:64:e6:9d:cb:22:42:8a:41:28:21:96:51:fd:
48:7c:f8:d5
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICTgowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDZC
QjFFQTdERjM5MDc3NjI3ODEwNjNFRUM1Nzk5RDkwNzczRDlDMjAeFw0yNTAxMzEx
NTMwMTVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEExNDRENzYxQjk4QzNE
NkU0NkY5OUUyMzg1OTM0RTIwN0YzRjU2MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClXY3jHxZtpQV8LnHwxYAYLPXs86ZrDZ1kuRdSaW+tBol5MVGL
OFQkIQxRf38sA7zecLaBISpe2ehkxljuVRiPyB5Pp6FiDMXg1m6bmCQBW413GXjJ
JNjQchEaiujcA/9XlqqnX4a6n8SeO4vt2euf3WAz9LzfWBMERtq6mjAu65XKz5zR
tREP/nbcdKyQseIGd2P1ZBGXnZEpVbpGvwi7lIfgOacL8+lfyfMcnxBz0DCuI2uw
019Hfj/I0UKlHkIScl0n3U5Aq7UNugVY1rtvdFAtRVOooRciDNdvhXH0ItSBnKNR
xAbtVHEHX9eySRibLDvNfR8r9sFAcSDoAaI/AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUoUTXYbmMPW5G+Z4jhZNOIH8/VggwHwYDVR0jBBgwFoAU1rsep985B3YngQY+
7FeZ2Qdz2cIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjE0
MS8xcnNlcDk4NUIzWW5nUVktN0ZlWjJRZHoyY0kuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzFyc2VwOTg1QjNZbmdRWS03RmVaMlFkejJjSS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxNDEvMXJzZXA5ODVCM1lu
Z1FZLTdGZVoyUWR6MmNJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBACzEMLIr8R6/bgw9QMyGboLDqhEZgJOM+8niWW+w1hYStqMB8/1t7ssPZD7u
Yd8/pV6hGrjbT6M1ErGLvsrAoTmbH4wDYon7+PLhFvKgLXrsS3wFoqeIRbDRGG18
ShbUSGndVPiCq2UJD6jWhE4CORQBCweB3pgb1aa51mW0z7bQbxAikZs0gdk0GruJ
SN1g0QpTGUYDTfm+i5VjwZeMZxEFkGzuJ83gyhbsbSGF/hC/PAtqYR4Yt8DpwfYr
5En4ybpyxa4mN0M6tf6yhG4Ldrmta5ED0clxAiHA7E4puGNMnFXzh1IWGsGhbRkR
Mr8/ZOadyyJCikEoIZZR/Uh8+NU=
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:04:05 2025 by rpki-client