Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2815/bg7MO7fHsBvgmhGJ-9IjV551o58.mft
File: bg7MO7fHsBvgmhGJ-9IjV551o58.mft (raw, json)
Hash identifier: cntykbfoGCDmYbGI/vX/c8YP9RneekNq+ywAFbyEYIQ=
Subject key identifier: F7:FA:EA:3A:42:87:F5:47:FF:DB:59:C8:58:16:00:BA:70:6C:67:F9
Authority key identifier: 6E:0E:CC:3B:B7:C7:B0:1B:E0:9A:11:89:FB:D2:23:57:9E:75:A3:9F
Certificate issuer: /CN=6E0ECC3BB7C7B01BE09A1189FBD223579E75A39F
Certificate serial: 0454
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bg7MO7fHsBvgmhGJ-9IjV551o58.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/bg7MO7fHsBvgmhGJ-9IjV551o58.mft
Manifest number: 0445
Signing time: Fri 31 Jan 2025 15:27:55 +0000
Manifest this update: Fri 31 Jan 2025 15:27:55 +0000
Manifest next update: Fri 31 Jan 2025 21:27:55 +0000
Files and hashes: 1: _ley7e5obW1PkQ66K5ms5Of8DF4.roa (hash: eNteG0u5g1cC2q7QYrGr8WcSp4dt9Qp/UC7ykOS0sRs=)
2: bg7MO7fHsBvgmhGJ-9IjV551o58.crl (hash: UJfCdSiiLuQZcrsgyWaOiCA1VTztdfJl2u3haDMX7yc=)
3: oMIph03CV5pwGtuc7Fc6DjY4eSM.roa (hash: ZFW6eUi9Bvv4cI95xW3I6Ynqho/AKREUFd8s96oVzps=)
4: t1Y8TkIKy-Y6d0FRqfZA7bzvwQI.roa (hash: jCLxu/qBbSEAzWraGyYK11WAkgmtaPk2EY/JcQPKA4Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1108 (0x454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E0ECC3BB7C7B01BE09A1189FBD223579E75A39F
Validity
Not Before: Jan 31 15:27:55 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F7FAEA3A4287F547FFDB59C8581600BA706C67F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:5e:59:49:82:66:53:f3:f2:76:a2:c2:43:
c7:03:24:2a:02:6f:ec:01:df:71:54:cc:15:fd:15:
ce:3a:56:e6:d3:68:17:db:88:35:f0:3d:ab:17:c3:
06:04:bb:86:91:59:1f:61:0a:88:79:9f:f5:a7:c4:
20:24:d1:b9:84:99:c1:9f:43:c9:09:5f:64:99:6d:
cd:43:a1:85:ff:85:16:12:04:19:ad:ac:bc:29:92:
6a:94:6b:a0:ba:a3:66:df:6e:73:71:cf:39:ab:47:
f6:0d:13:89:84:1f:a9:b5:8f:8e:49:07:19:9b:49:
47:71:a5:3f:bc:99:31:aa:3a:b6:2c:5d:b7:12:1a:
dc:07:25:d4:35:af:ff:af:96:15:d5:ad:01:48:f0:
b3:b7:b3:20:8f:bc:2e:43:78:e0:09:b5:d9:53:c5:
03:19:e7:2d:ed:ea:94:dc:22:98:49:17:e9:f5:c0:
65:6c:84:66:f4:15:df:da:b4:24:04:09:47:59:f9:
51:7b:94:75:4a:09:26:79:52:56:c4:b3:18:68:cf:
3d:0a:ce:76:17:fb:fd:4a:d5:6e:95:6b:f4:54:02:
38:2b:6e:a3:e6:93:de:a9:74:aa:3a:d8:8c:6d:1a:
c1:09:c3:a7:03:44:ac:a4:f1:a8:4e:35:ac:53:d2:
92:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FA:EA:3A:42:87:F5:47:FF:DB:59:C8:58:16:00:BA:70:6C:67:F9
X509v3 Authority Key Identifier:
keyid:6E:0E:CC:3B:B7:C7:B0:1B:E0:9A:11:89:FB:D2:23:57:9E:75:A3:9F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/bg7MO7fHsBvgmhGJ-9IjV551o58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bg7MO7fHsBvgmhGJ-9IjV551o58.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/bg7MO7fHsBvgmhGJ-9IjV551o58.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:53:f2:e0:71:3c:6d:34:a7:10:b6:83:97:6e:ab:53:71:d9:
de:9c:ab:f1:d3:1d:94:82:be:a7:3e:2c:5a:1a:7f:b4:66:6d:
a1:4f:b6:60:e2:65:f2:5d:be:0a:78:97:06:3f:31:cd:25:96:
bc:54:8f:76:2b:06:ec:be:5d:53:1b:b7:41:3c:19:a8:ec:52:
70:4e:16:c9:89:df:03:e3:89:9f:60:98:fb:bc:a8:12:55:3b:
9a:44:a5:49:5c:2b:ae:a0:bf:50:f9:15:d2:0e:10:02:77:d4:
7c:89:8e:e2:90:df:70:55:c3:5a:6f:0e:e1:33:21:c4:d7:68:
b8:a2:ae:a0:5b:c6:eb:4a:12:c0:fd:27:04:12:b0:dd:30:ad:
08:b6:c7:26:85:e1:98:40:29:88:7b:96:d6:57:88:01:38:35:
ff:f2:4c:bd:7d:f9:d2:39:95:6a:04:6b:0a:c4:40:c0:f0:b0:
cb:62:aa:3a:d5:28:22:14:d1:41:7b:11:fd:44:31:75:eb:50:
23:81:76:d5:52:6b:70:00:b5:ed:28:de:c1:e5:4f:f5:9c:05:
5e:56:1c:04:4f:ba:fb:b3:7d:d0:e1:84:bd:c0:b0:72:8c:0d:
cd:e8:93:60:1d:c6:29:0e:90:d4:b1:42:75:cb:07:31:aa:a2:
0f:38:62:d3
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkUw
RUNDM0JCN0M3QjAxQkUwOUExMTg5RkJEMjIzNTc5RTc1QTM5RjAeFw0yNTAxMzEx
NTI3NTVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEY3RkFFQTNBNDI4N0Y1
NDdGRkRCNTlDODU4MTYwMEJBNzA2QzY3RjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuA15ZSYJmU/PydqLCQ8cDJCoCb+wB33FUzBX9Fc46VubTaBfb
iDXwPasXwwYEu4aRWR9hCoh5n/WnxCAk0bmEmcGfQ8kJX2SZbc1DoYX/hRYSBBmt
rLwpkmqUa6C6o2bfbnNxzzmrR/YNE4mEH6m1j45JBxmbSUdxpT+8mTGqOrYsXbcS
GtwHJdQ1r/+vlhXVrQFI8LO3syCPvC5DeOAJtdlTxQMZ5y3t6pTcIphJF+n1wGVs
hGb0Fd/atCQECUdZ+VF7lHVKCSZ5UlbEsxhozz0KznYX+/1K1W6Va/RUAjgrbqPm
k96pdKo62IxtGsEJw6cDRKyk8ahONaxT0pIdAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU9/rqOkKH9Uf/21nIWBYAunBsZ/kwHwYDVR0jBBgwFoAUbg7MO7fHsBvgmhGJ
+9IjV551o58wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx
NS9iZzdNTzdmSHNCdmdtaEdKLTlJalY1NTFvNTguY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2JnN01PN2ZIc0J2Z21oR0otOUlqVjU1MW81OC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTUvYmc3TU83ZkhzQnZn
bWhHSi05SWpWNTUxbzU4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBABdT8uBxPG00pxC2g5duq1Nx2d6cq/HTHZSCvqc+LFoaf7RmbaFPtmDiZfJd
vgp4lwY/Mc0llrxUj3YrBuy+XVMbt0E8GajsUnBOFsmJ3wPjiZ9gmPu8qBJVO5pE
pUlcK66gv1D5FdIOEAJ31HyJjuKQ33BVw1pvDuEzIcTXaLiirqBbxutKEsD9JwQS
sN0wrQi2xyaF4ZhAKYh7ltZXiAE4Nf/yTL19+dI5lWoEawrEQMDwsMtiqjrVKCIU
0UF7Ef1EMXXrUCOBdtVSa3AAte0o3sHlT/WcBV5WHARPuvuzfdDhhL3AsHKMDc3o
k2AdxikOkNSxQnXLBzGqog84YtM=
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:31:38 2025 by rpki-client