Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2890/QANTiAtHjVuXKhIEzwZR3ilfjso.mft
File: QANTiAtHjVuXKhIEzwZR3ilfjso.mft (raw, json)
Hash identifier: 71mh4y2HKGbnC/HW1I8MpB4nUGjz2DeohnJ6Q88TMLM=
Subject key identifier: 3E:02:B0:EC:72:B4:53:6E:FB:18:99:9F:8A:FE:BD:6B:63:5D:F8:01
Authority key identifier: 40:03:53:88:0B:47:8D:5B:97:2A:12:04:CF:06:51:DE:29:5F:8E:CA
Certificate issuer: /CN=400353880B478D5B972A1204CF0651DE295F8ECA
Certificate serial: 12E6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QANTiAtHjVuXKhIEzwZR3ilfjso.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/QANTiAtHjVuXKhIEzwZR3ilfjso.mft
Manifest number: 12E1
Signing time: Fri 31 Jan 2025 15:25:04 +0000
Manifest this update: Fri 31 Jan 2025 15:25:04 +0000
Manifest next update: Fri 31 Jan 2025 21:25:04 +0000
Files and hashes: 1: QANTiAtHjVuXKhIEzwZR3ilfjso.crl (hash: A0YDvOs83ZZwo6TMUueozUc3ADPEa/xn6lAuZM9I0HY=)
2: YChybX2-uPVVnqdSYmR5njJNPi8.roa (hash: Eoa/Wqb1zFLj0i5Y48PjM9Jp4VzTiVGXZggsf4eLD9A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4838 (0x12e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400353880B478D5B972A1204CF0651DE295F8ECA
Validity
Not Before: Jan 31 15:25:04 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3E02B0EC72B4536EFB18999F8AFEBD6B635DF801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:58:a9:d9:69:b3:4b:f1:61:4b:87:6a:75:
b6:dc:4a:1c:b4:5f:ba:82:db:a0:72:66:f1:81:08:
59:bd:57:ef:79:43:59:e7:38:14:5a:62:1f:35:98:
41:d2:5f:f0:df:8d:c1:62:65:50:ca:e2:5c:08:a0:
d0:6d:af:98:80:82:a4:85:45:bf:5e:83:60:f2:53:
99:f3:2d:fe:d7:95:35:30:00:87:20:de:a5:5b:69:
1b:0a:1c:b3:83:65:27:64:be:d9:fa:d4:cf:99:f4:
d7:e5:de:c4:9d:7f:a1:a4:37:55:3a:fd:04:50:66:
34:88:f5:cc:62:55:6b:03:3b:7b:eb:ae:8e:0c:8f:
b5:3b:c8:7f:cc:ab:c1:4a:b6:6f:10:e5:80:06:dd:
6b:19:c4:d5:49:fe:f5:33:13:ad:62:ec:cf:17:5f:
1c:1b:8b:b4:7a:89:1b:87:32:d1:c7:ee:ea:c5:9d:
2c:19:b7:11:ca:ca:d4:6d:17:bf:f6:4a:2c:0f:8e:
5f:5a:63:d4:33:f4:86:05:10:71:4b:25:a4:fa:95:
f1:4d:2a:24:7b:a9:55:95:ee:4e:94:86:70:36:a4:
80:c0:b0:62:2e:39:5b:48:f4:14:d7:a4:b6:9c:0f:
6d:91:f2:30:19:7e:6d:86:c6:12:7b:5a:a2:a1:e5:
0c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:02:B0:EC:72:B4:53:6E:FB:18:99:9F:8A:FE:BD:6B:63:5D:F8:01
X509v3 Authority Key Identifier:
keyid:40:03:53:88:0B:47:8D:5B:97:2A:12:04:CF:06:51:DE:29:5F:8E:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/QANTiAtHjVuXKhIEzwZR3ilfjso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QANTiAtHjVuXKhIEzwZR3ilfjso.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/QANTiAtHjVuXKhIEzwZR3ilfjso.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:e8:e1:af:d1:99:dc:97:02:8f:f0:c1:38:f4:c5:03:85:01:
c8:9c:f2:80:70:9c:c5:61:a2:78:97:cf:c6:a8:2e:db:ed:05:
89:9e:40:51:e8:77:cf:51:57:38:c4:b5:59:6f:5b:fd:a6:48:
d3:6b:c0:71:b2:cb:e8:b0:9f:e6:56:b8:bb:b5:43:53:64:16:
4e:96:72:8a:8f:15:8b:35:5d:60:41:8b:8d:7c:65:88:8d:a9:
d3:1f:57:4d:95:c4:30:7d:c7:b6:b7:c3:21:d8:c8:aa:1d:19:
95:e7:cb:b9:d6:59:3f:4e:03:25:23:43:35:23:8b:f2:1e:64:
d5:33:45:35:d8:9d:fb:de:71:f4:35:a2:f2:f9:d9:58:04:8d:
e5:57:25:57:5d:5d:66:bd:7a:11:99:15:ff:5b:09:cf:1d:fa:
92:de:9d:d5:50:e4:52:0d:52:99:ba:35:e0:ef:4c:24:3c:b4:
ad:08:5c:30:34:8b:05:7a:7b:e0:cf:27:2e:b6:42:b2:a3:f1:
46:c0:a7:3a:4e:f5:f0:5d:02:ed:5a:8d:24:67:6d:f8:a8:37:
99:61:bc:d6:e9:14:0c:8f:b5:7f:8a:f5:3b:0e:ba:e1:c8:09:
db:a3:58:ca:f4:f5:1f:26:94:19:1c:1a:3b:62:38:2d:74:e6:
51:df:56:05
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICEuYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDAw
MzUzODgwQjQ3OEQ1Qjk3MkExMjA0Q0YwNjUxREUyOTVGOEVDQTAeFw0yNTAxMzEx
NTI1MDRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDNFMDJCMEVDNzJCNDUz
NkVGQjE4OTk5RjhBRkVCRDZCNjM1REY4MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOMlip2WmzS/FhS4dqdbbcShy0X7qC26ByZvGBCFm9V+95Q1nn
OBRaYh81mEHSX/DfjcFiZVDK4lwIoNBtr5iAgqSFRb9eg2DyU5nzLf7XlTUwAIcg
3qVbaRsKHLODZSdkvtn61M+Z9Nfl3sSdf6GkN1U6/QRQZjSI9cxiVWsDO3vrro4M
j7U7yH/Mq8FKtm8Q5YAG3WsZxNVJ/vUzE61i7M8XXxwbi7R6iRuHMtHH7urFnSwZ
txHKytRtF7/2SiwPjl9aY9Qz9IYFEHFLJaT6lfFNKiR7qVWV7k6UhnA2pIDAsGIu
OVtI9BTXpLacD22R8jAZfm2GxhJ7WqKh5Qz1AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUPgKw7HK0U277GJmfiv69a2Nd+AEwHwYDVR0jBBgwFoAUQANTiAtHjVuXKhIE
zwZR3ilfjsowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg5
MC9RQU5UaUF0SGpWdVhLaElFendaUjNpbGZqc28uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1FBTlRpQXRIalZ1WEtoSUV6d1pSM2lsZmpzby5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4OTAvUUFOVGlBdEhqVnVY
S2hJRXp3WlIzaWxmanNvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBACbo4a/RmdyXAo/wwTj0xQOFAcic8oBwnMVhoniXz8aoLtvtBYmeQFHod89R
VzjEtVlvW/2mSNNrwHGyy+iwn+ZWuLu1Q1NkFk6WcoqPFYs1XWBBi418ZYiNqdMf
V02VxDB9x7a3wyHYyKodGZXny7nWWT9OAyUjQzUji/IeZNUzRTXYnfvecfQ1ovL5
2VgEjeVXJVddXWa9ehGZFf9bCc8d+pLendVQ5FINUpm6NeDvTCQ8tK0IXDA0iwV6
e+DPJy62QrKj8UbApzpO9fBdAu1ajSRnbfioN5lhvNbpFAyPtX+K9TsOuuHICduj
WMr09R8mlBkcGjtiOC105lHfVgU=
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:54:10 2025 by rpki-client