Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.mft
File: wdMSkWOPSkBAzT1S3sP_K5cJxfI.mft (raw, json)
Hash identifier: 7hVQPMfgQ5d4DHzQaizYBN17mxNLgThXU2z7Q6g1pJw=
Subject key identifier: 80:C5:F0:5A:0C:56:AA:43:B1:1A:07:DE:30:80:98:F4:12:4A:37:66
Authority key identifier: C1:D3:12:91:63:8F:4A:40:40:CD:3D:52:DE:C3:FF:2B:97:09:C5:F2
Certificate issuer: /CN=C1D31291638F4A4040CD3D52DEC3FF2B9709C5F2
Certificate serial: 10A9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wdMSkWOPSkBAzT1S3sP_K5cJxfI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.mft
Manifest number: 1097
Signing time: Fri 31 Jan 2025 15:28:33 +0000
Manifest this update: Fri 31 Jan 2025 15:28:33 +0000
Manifest next update: Fri 31 Jan 2025 21:28:33 +0000
Files and hashes: 1: SYjAfi0lWO4VUcWEZyu6ay2aivE.roa (hash: WpsblR9kVPNn114J/aQtNqA0/vOqQOXaPI95AzMP4h8=)
2: WwhYoGpzHS3AWtY2_rLx2jCdH28.roa (hash: HUKIxbLW9sU8i1IJCRzoVFe5zFBzm2zcEHJ2jgjqtD0=)
3: nSRgEczP2Vah6cKvfQ3tFq7a3no.roa (hash: b4moQm23csiDLb5kUqMGU2XFsorLRE9/0BS2ulVpWw8=)
4: wOO1IUt0b4QpGwsHFF1DCDFXL2c.roa (hash: 3UUSZj4EE6g7iwWFskgE2wH0pWTu3Li4PZOPkm9Vn2o=)
5: wdMSkWOPSkBAzT1S3sP_K5cJxfI.crl (hash: tWxLlj8AIK2J5HL1P+QNHfP5dCfE57l5H2gE5G7RxoQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4265 (0x10a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1D31291638F4A4040CD3D52DEC3FF2B9709C5F2
Validity
Not Before: Jan 31 15:28:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=80C5F05A0C56AA43B11A07DE308098F4124A3766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:b3:69:e8:5c:3b:bd:c0:09:4d:7d:25:e4:
60:b3:e0:62:80:d7:72:07:b7:6f:79:9f:5f:17:6e:
d7:97:fd:64:a0:ef:60:0a:25:11:5b:9d:62:98:01:
e7:22:c2:3d:9f:31:63:f3:52:ae:3b:77:ae:96:2f:
e7:3e:80:f6:d8:60:1a:6d:4a:60:db:25:c4:dd:05:
ec:33:3c:58:b2:36:bc:9a:b9:1c:c1:e4:d2:f6:e6:
97:c3:79:a3:f6:84:dc:0c:fa:01:72:e3:a3:71:d4:
5b:c0:31:70:19:bc:ac:ba:28:6e:0a:d3:76:39:5f:
4f:50:bb:33:a7:55:b9:55:2b:05:68:ee:87:db:09:
9e:06:09:5e:ff:cc:c8:ca:7d:a6:11:64:c1:b7:a2:
4e:2c:23:dc:da:d7:49:a2:2a:d5:75:64:2d:2f:87:
7f:2e:a5:29:aa:43:da:bb:76:39:da:b9:40:6e:86:
fe:78:e2:63:7e:47:34:98:68:39:15:ee:89:97:a5:
0b:14:b4:c1:bd:c4:a6:5c:04:47:8e:71:15:bf:46:
6b:77:ae:a4:62:e2:e8:7d:24:67:34:c5:1c:99:22:
a5:5f:32:8c:23:29:1b:f8:17:37:9d:a4:c0:75:b5:
c4:99:30:b9:a4:c0:9a:60:2f:eb:5d:33:98:10:c9:
47:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C5:F0:5A:0C:56:AA:43:B1:1A:07:DE:30:80:98:F4:12:4A:37:66
X509v3 Authority Key Identifier:
keyid:C1:D3:12:91:63:8F:4A:40:40:CD:3D:52:DE:C3:FF:2B:97:09:C5:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wdMSkWOPSkBAzT1S3sP_K5cJxfI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:a0:c6:1a:64:72:8e:20:d8:2d:32:f0:e6:fa:84:32:93:f4:
95:f3:89:80:aa:18:ee:b2:d2:d8:83:f8:25:c4:38:27:03:0c:
4e:1f:a9:99:20:7c:e1:97:25:bb:e9:1a:9e:1f:c2:74:1e:cb:
e4:8c:57:57:17:04:b9:34:5f:27:07:82:c4:f9:5b:21:a4:c5:
28:dc:fb:fd:19:64:a6:76:75:11:cc:09:20:d9:19:ae:e8:37:
02:26:1a:19:fe:de:4b:be:d3:3d:50:0e:f0:ce:94:ef:5d:09:
ac:d9:b0:dd:fb:2e:9d:98:5f:ed:3a:a8:b3:a3:cc:3e:2a:93:
c1:94:3b:5f:26:92:ff:21:77:c1:2c:bc:77:4d:a2:e3:e3:40:
9b:6d:dc:2e:de:80:e7:e8:d0:b5:1e:d3:1d:c3:e9:f7:b2:54:
93:f5:ce:50:7c:50:61:e0:e3:60:af:95:f2:2c:48:d6:ea:e4:
a1:cb:fc:ed:b2:e9:dd:3f:cc:db:2e:87:e9:78:e5:49:f9:1f:
17:2c:51:c6:58:8a:64:ce:97:30:3d:ee:d6:80:a7:40:95:c9:
c0:f6:15:e0:0a:39:d7:f3:57:df:ec:5f:4d:f6:1e:63:9b:e9:
09:37:a1:67:c7:19:6d:8b:c7:68:c7:3c:74:3f:37:6a:ac:75:
6e:dd:5b:fa
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICEKkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzFE
MzEyOTE2MzhGNEE0MDQwQ0QzRDUyREVDM0ZGMkI5NzA5QzVGMjAeFw0yNTAxMzEx
NTI4MzNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDgwQzVGMDVBMEM1NkFB
NDNCMTFBMDdERTMwODA5OEY0MTI0QTM3NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuc7Np6Fw7vcAJTX0l5GCz4GKA13IHt295n18XbteX/WSg72AK
JRFbnWKYAeciwj2fMWPzUq47d66WL+c+gPbYYBptSmDbJcTdBewzPFiyNryauRzB
5NL25pfDeaP2hNwM+gFy46Nx1FvAMXAZvKy6KG4K03Y5X09QuzOnVblVKwVo7ofb
CZ4GCV7/zMjKfaYRZMG3ok4sI9za10miKtV1ZC0vh38upSmqQ9q7djnauUBuhv54
4mN+RzSYaDkV7omXpQsUtMG9xKZcBEeOcRW/Rmt3rqRi4uh9JGc0xRyZIqVfMowj
KRv4FzedpMB1tcSZMLmkwJpgL+tdM5gQyUdfAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUgMXwWgxWqkOxGgfeMICY9BJKN2YwHwYDVR0jBBgwFoAUwdMSkWOPSkBAzT1S
3sP/K5cJxfIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx
NC93ZE1Ta1dPUFNrQkF6VDFTM3NQX0s1Y0p4ZkkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3dkTVNrV09QU2tCQXpUMVMzc1BfSzVjSnhmSS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvd2RNU2tXT1BTa0JB
elQxUzNzUF9LNWNKeGZJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJGgxhpkco4g2C0y8Ob6hDKT9JXziYCqGO6y0tiD+CXEOCcDDE4fqZkgfOGX
JbvpGp4fwnQey+SMV1cXBLk0XycHgsT5WyGkxSjc+/0ZZKZ2dRHMCSDZGa7oNwIm
Ghn+3ku+0z1QDvDOlO9dCazZsN37Lp2YX+06qLOjzD4qk8GUO18mkv8hd8EsvHdN
ouPjQJtt3C7egOfo0LUe0x3D6feyVJP1zlB8UGHg42CvlfIsSNbq5KHL/O2y6d0/
zNsuh+l45Un5HxcsUcZYimTOlzA97taAp0CVycD2FeAKOdfzV9/sX032HmOb6Qk3
oWfHGW2Lx2jHPHQ/N2qsdW7dW/o=
-----END CERTIFICATE-----
Generated at Wed Apr 30 14:26:54 2025 by rpki-client