Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3145/33lDthlXGcWMANEetBElEP3_nJM.mft
File: 33lDthlXGcWMANEetBElEP3_nJM.mft (raw, json)
Hash identifier: UWTnbKdmhq3M1/YApDEq6CURIEMagU83gFJv0+KY3O8=
Subject key identifier: 14:C5:A4:3B:E8:00:35:45:6D:B1:AA:EF:F7:5F:BD:3F:19:4D:C3:D2
Authority key identifier: DF:79:43:B6:19:57:19:C5:8C:00:D1:1E:B4:11:25:10:FD:FF:9C:93
Certificate issuer: /CN=DF7943B6195719C58C00D11EB4112510FDFF9C93
Certificate serial: 13C5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33lDthlXGcWMANEetBElEP3_nJM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/33lDthlXGcWMANEetBElEP3_nJM.mft
Manifest number: 13C5
Signing time: Fri 31 Jan 2025 15:24:52 +0000
Manifest this update: Fri 31 Jan 2025 15:24:52 +0000
Manifest next update: Fri 31 Jan 2025 21:24:52 +0000
Files and hashes: 1: 33lDthlXGcWMANEetBElEP3_nJM.crl (hash: SnQDF0ES+do+QXUXkUToQGuu20DfqpXeqQtH0DXhU+c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5061 (0x13c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF7943B6195719C58C00D11EB4112510FDFF9C93
Validity
Not Before: Jan 31 15:24:52 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=14C5A43BE80035456DB1AAEFF75FBD3F194DC3D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:75:6c:5a:64:c2:5c:22:d7:fb:f4:44:fa:
51:1c:bd:6d:1c:35:5c:6f:94:89:51:c0:d0:8d:8d:
0c:0a:1d:a6:dd:84:77:5a:16:2a:9b:3b:d6:15:b4:
9c:a8:28:66:2f:fb:16:b9:2e:82:ab:3f:64:f0:d5:
fa:d7:b4:4c:3a:60:91:eb:88:c0:c5:54:06:03:c6:
23:f3:46:ac:fa:57:86:e4:91:35:80:6e:04:3e:08:
7d:ff:34:24:61:95:87:e5:26:07:e8:29:05:38:46:
32:b7:88:bb:10:12:c3:30:c7:1b:f5:77:38:a2:6f:
87:48:44:1e:03:95:48:68:e6:5a:91:36:13:c8:1e:
56:68:2d:5f:bb:a3:27:5d:c2:b6:08:68:ba:29:c1:
ca:04:26:2e:0e:11:5a:eb:e2:de:07:d9:68:c0:8f:
fe:4b:8c:82:df:b2:f1:1c:d8:4c:df:bd:4d:df:6b:
9d:da:11:47:ff:03:e1:4b:d0:60:13:3e:cf:dc:fe:
57:e9:9b:be:7b:57:89:c5:97:c9:2c:87:75:80:66:
45:78:34:d1:0c:f2:19:e0:5a:10:a0:a7:63:e1:24:
95:ce:c6:8f:af:5c:dc:99:92:76:23:10:3b:bf:4c:
f6:fd:13:b0:8c:8a:ab:1d:49:8c:e6:14:33:51:c1:
ff:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C5:A4:3B:E8:00:35:45:6D:B1:AA:EF:F7:5F:BD:3F:19:4D:C3:D2
X509v3 Authority Key Identifier:
keyid:DF:79:43:B6:19:57:19:C5:8C:00:D1:1E:B4:11:25:10:FD:FF:9C:93
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/33lDthlXGcWMANEetBElEP3_nJM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33lDthlXGcWMANEetBElEP3_nJM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/33lDthlXGcWMANEetBElEP3_nJM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b0:0d:e0:cd:af:b4:1d:bd:92:ae:f1:b4:6b:fc:32:53:37:
e6:10:3f:ef:34:50:8f:be:21:97:8a:74:60:cb:28:91:56:af:
fc:7a:d5:62:ea:fb:ab:9a:2f:a2:3f:fc:dc:5e:39:f0:dd:db:
e2:c3:9a:39:21:8d:2f:5b:c1:50:c9:d5:63:fe:dc:d6:54:c3:
e1:ff:fa:43:e9:e7:6e:c5:be:5e:58:a3:5a:3f:2e:80:fc:1b:
7c:99:76:f4:60:94:55:ef:92:47:40:7d:38:bb:60:4e:86:0f:
d2:06:ca:ad:73:c2:8c:de:cc:7f:4f:99:28:9c:27:29:5a:e4:
00:fa:3a:41:41:04:47:a1:88:f6:58:4f:08:e6:b0:95:d1:b8:
2c:54:25:05:4a:e1:73:b3:3d:a1:77:a5:1f:2b:ce:d0:db:49:
91:24:be:21:e2:29:7d:7f:9b:9c:dc:86:13:49:91:5a:48:5d:
7c:2e:ef:4b:73:2e:42:b2:fd:0f:f0:34:59:f8:3b:9c:e2:c4:
18:f5:89:19:fc:79:4f:ec:e6:b0:69:3f:65:61:6c:6c:7b:b4:
71:4c:82:10:7a:1b:fc:74:fc:60:70:f7:fd:be:f1:06:db:5f:
6e:3c:49:56:d2:0b:b1:b4:43:67:16:8c:20:b7:9b:b6:a0:98:
55:7f:24:e1
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICE8UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY3
OTQzQjYxOTU3MTlDNThDMDBEMTFFQjQxMTI1MTBGREZGOUM5MzAeFw0yNTAxMzEx
NTI0NTJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDE0QzVBNDNCRTgwMDM1
NDU2REIxQUFFRkY3NUZCRDNGMTk0REMzRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDB7XVsWmTCXCLX+/RE+lEcvW0cNVxvlIlRwNCNjQwKHabdhHda
FiqbO9YVtJyoKGYv+xa5LoKrP2Tw1frXtEw6YJHriMDFVAYDxiPzRqz6V4bkkTWA
bgQ+CH3/NCRhlYflJgfoKQU4RjK3iLsQEsMwxxv1dziib4dIRB4DlUho5lqRNhPI
HlZoLV+7oyddwrYIaLopwcoEJi4OEVrr4t4H2WjAj/5LjILfsvEc2EzfvU3fa53a
EUf/A+FL0GATPs/c/lfpm757V4nFl8ksh3WAZkV4NNEM8hngWhCgp2PhJJXOxo+v
XNyZknYjEDu/TPb9E7CMiqsdSYzmFDNRwf93AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUFMWkO+gANUVtsarv91+9PxlNw9IwHwYDVR0jBBgwFoAU33lDthlXGcWMANEe
tBElEP3/nJMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE0
NS8zM2xEdGhsWEdjV01BTkVldEJFbEVQM19uSk0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzMzbER0aGxYR2NXTUFORWV0QkVsRVAzX25KTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNDUvMzNsRHRobFhHY1dN
QU5FZXRCRWxFUDNfbkpNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAH6wDeDNr7QdvZKu8bRr/DJTN+YQP+80UI++IZeKdGDLKJFWr/x61WLq+6ua
L6I//NxeOfDd2+LDmjkhjS9bwVDJ1WP+3NZUw+H/+kPp527Fvl5Yo1o/LoD8G3yZ
dvRglFXvkkdAfTi7YE6GD9IGyq1zwozezH9PmSicJyla5AD6OkFBBEehiPZYTwjm
sJXRuCxUJQVK4XOzPaF3pR8rztDbSZEkviHiKX1/m5zchhNJkVpIXXwu70tzLkKy
/Q/wNFn4O5zixBj1iRn8eU/s5rBpP2VhbGx7tHFMghB6G/x0/GBw9/2+8QbbX248
SVbSC7G0Q2cWjCC3m7agmFV/JOE=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:12:41 2025 by rpki-client