Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft
File: HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft (raw, json)
Hash identifier: F1kSyeuE2AuvU+7/1Zjb5CYPIEq1FrXeCJM9Oc1+/bE=
Subject key identifier: DF:2B:63:0C:2F:6B:91:8F:02:6F:B0:C2:B2:33:BA:07:5B:C4:72:A7
Authority key identifier: 1E:09:9E:05:E6:C1:A1:01:EF:05:79:12:FB:C1:33:F1:70:DE:E0:A7
Certificate issuer: /CN=1E099E05E6C1A101EF057912FBC133F170DEE0A7
Certificate serial: 0785
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft
Manifest number: 0785
Signing time: Fri 31 Jan 2025 15:24:33 +0000
Manifest this update: Fri 31 Jan 2025 15:24:33 +0000
Manifest next update: Fri 31 Jan 2025 21:24:33 +0000
Files and hashes: 1: HgmeBebBoQHvBXkS-8Ez8XDe4Kc.crl (hash: blXLrgo8csF6nbmPVXGA4DwSIvwRlcgQAmGs1RKCUBI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1925 (0x785)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E099E05E6C1A101EF057912FBC133F170DEE0A7
Validity
Not Before: Jan 31 15:24:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DF2B630C2F6B918F026FB0C2B233BA075BC472A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:68:4a:be:88:df:bc:8a:aa:56:f4:0c:14:
e3:4b:49:e5:78:fb:38:31:46:38:0f:90:f2:e7:7e:
04:d7:35:a3:76:a4:d9:a2:27:a6:da:fd:91:9b:d9:
5f:ed:ed:2b:ad:3f:2f:ee:de:c5:11:69:ac:f7:a0:
c5:0c:d4:17:9d:d3:d5:65:dc:65:fa:93:03:01:ed:
66:90:40:c2:5e:7d:96:97:31:cd:b4:d8:14:e0:b9:
23:67:e5:43:0f:4b:3b:f9:6d:1b:ea:98:f4:b5:6b:
63:dc:18:5a:af:eb:46:6e:77:0d:bc:f4:48:09:5d:
28:9c:b3:ee:a3:bb:d8:04:d6:04:ca:26:21:14:c1:
58:ad:c3:94:d3:8c:c1:06:1c:84:79:67:98:6a:9b:
3b:ae:18:7f:f1:09:9c:67:76:7d:04:84:77:17:55:
bb:0e:16:e2:3e:ac:46:b1:56:03:1a:c6:78:69:cb:
3b:ad:c1:87:73:dd:d7:3d:59:e5:4d:51:30:17:9e:
63:30:db:ac:f9:21:df:11:68:3b:b3:6a:ae:91:e7:
92:52:ce:94:27:84:b7:66:82:59:eb:6b:c5:55:05:
75:bc:73:da:70:aa:b0:5d:d1:a5:43:3d:88:04:0c:
37:d0:ff:5c:30:20:03:d7:ef:75:2b:e0:38:63:b7:
c6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2B:63:0C:2F:6B:91:8F:02:6F:B0:C2:B2:33:BA:07:5B:C4:72:A7
X509v3 Authority Key Identifier:
keyid:1E:09:9E:05:E6:C1:A1:01:EF:05:79:12:FB:C1:33:F1:70:DE:E0:A7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:79:0e:74:e9:64:d0:53:89:9e:17:54:65:b6:77:ad:f2:ff:
17:c2:21:ce:3a:0c:73:73:26:8a:ab:fa:bd:09:29:c7:c8:d6:
43:f8:14:b6:1c:4b:f8:91:ac:73:9b:f7:75:21:84:9e:6a:40:
67:d4:ba:b4:99:93:10:7e:87:69:b8:36:72:f4:4b:7f:b3:70:
7c:0e:bd:59:2d:fe:ff:11:d0:0c:6f:8a:a4:ee:fa:d3:79:aa:
b8:01:74:06:1e:0b:e3:34:60:cd:06:e6:46:d0:ff:3b:05:8d:
9b:63:a2:35:1b:07:17:ce:fa:6b:e0:cb:63:e9:48:1e:e4:e6:
e4:d4:eb:de:d7:c6:89:6b:5f:c7:c3:9b:b0:9f:23:c9:49:ce:
e8:70:41:a0:e0:b7:ff:9a:e3:6d:51:e4:a7:88:a5:e5:91:20:
4c:bc:7b:aa:af:1d:b3:aa:97:3c:53:01:d2:0a:a9:99:51:22:
a5:68:1f:be:0e:36:aa:6a:14:a6:ef:85:ce:90:f6:db:13:b1:
92:52:c3:0d:45:1a:4c:6b:9e:c9:03:e2:f5:25:79:b9:e9:c2:
e2:04:b0:bd:49:67:d0:6a:8c:b1:2b:14:89:55:58:b9:e0:03:
dc:25:b5:71:48:e3:43:88:b4:b1:96:4b:d9:e9:01:05:72:22:
07:23:1f:a1
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICB4UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUUw
OTlFMDVFNkMxQTEwMUVGMDU3OTEyRkJDMTMzRjE3MERFRTBBNzAeFw0yNTAxMzEx
NTI0MzNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKERGMkI2MzBDMkY2Qjkx
OEYwMjZGQjBDMkIyMzNCQTA3NUJDNDcyQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCr9GhKvojfvIqqVvQMFONLSeV4+zgxRjgPkPLnfgTXNaN2pNmi
J6ba/ZGb2V/t7SutPy/u3sURaaz3oMUM1Bed09Vl3GX6kwMB7WaQQMJefZaXMc20
2BTguSNn5UMPSzv5bRvqmPS1a2PcGFqv60Zudw289EgJXSics+6ju9gE1gTKJiEU
wVitw5TTjMEGHIR5Z5hqmzuuGH/xCZxndn0EhHcXVbsOFuI+rEaxVgMaxnhpyzut
wYdz3dc9WeVNUTAXnmMw26z5Id8RaDuzaq6R55JSzpQnhLdmglnra8VVBXW8c9pw
qrBd0aVDPYgEDDfQ/1wwIAPX73Ur4Dhjt8YvAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU3ytjDC9rkY8Cb7DCsjO6B1vEcqcwHwYDVR0jBBgwFoAUHgmeBebBoQHvBXkS
+8Ez8XDe4KcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1
Ni9IZ21lQmViQm9RSHZCWGtTLThFejhYRGU0S2MuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0hnbWVCZWJCb1FIdkJYa1MtOEV6OFhEZTRLYy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTYvSGdtZUJlYkJvUUh2
QlhrUy04RXo4WERlNEtjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBALR5DnTpZNBTiZ4XVGW2d63y/xfCIc46DHNzJoqr+r0JKcfI1kP4FLYcS/iR
rHOb93UhhJ5qQGfUurSZkxB+h2m4NnL0S3+zcHwOvVkt/v8R0AxviqTu+tN5qrgB
dAYeC+M0YM0G5kbQ/zsFjZtjojUbBxfO+mvgy2PpSB7k5uTU697XxolrX8fDm7Cf
I8lJzuhwQaDgt/+a421R5KeIpeWRIEy8e6qvHbOqlzxTAdIKqZlRIqVoH74ONqpq
FKbvhc6Q9tsTsZJSww1FGkxrnskD4vUlebnpwuIEsL1JZ9BqjLErFIlVWLngA9wl
tXFI40OItLGWS9npAQVyIgcjH6E=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:08:52 2025 by rpki-client