Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3265/iycD7R0_m0UahwI8nl3YqBeSK9Y.mft
File: iycD7R0_m0UahwI8nl3YqBeSK9Y.mft (raw, json)
Hash identifier: YytUjvfHm+K/cVBFQ81dZIOwy6MGICpMSbX6drdeV3Q=
Subject key identifier: 6E:79:18:34:F0:37:EE:5E:D4:F6:3B:80:E4:52:40:E1:B4:7C:3D:57
Authority key identifier: 8B:27:03:ED:1D:3F:9B:45:1A:87:02:3C:9E:5D:D8:A8:17:92:2B:D6
Certificate issuer: /CN=8B2703ED1D3F9B451A87023C9E5DD8A817922BD6
Certificate serial: 0536
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iycD7R0_m0UahwI8nl3YqBeSK9Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/iycD7R0_m0UahwI8nl3YqBeSK9Y.mft
Manifest number: 0536
Signing time: Fri 31 Jan 2025 15:24:57 +0000
Manifest this update: Fri 31 Jan 2025 15:24:57 +0000
Manifest next update: Fri 31 Jan 2025 21:24:57 +0000
Files and hashes: 1: iycD7R0_m0UahwI8nl3YqBeSK9Y.crl (hash: 8HikKlxPG/LIh0FaeKTr3/fLYAiZHiHATzI8MZJ+xfY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1334 (0x536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B2703ED1D3F9B451A87023C9E5DD8A817922BD6
Validity
Not Before: Jan 31 15:24:57 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6E791834F037EE5ED4F63B80E45240E1B47C3D57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:00:d7:7f:ac:5e:6c:08:67:dc:e6:0b:c3:2d:
c1:4f:9e:30:a1:c1:59:4c:bc:ef:f3:9c:4b:09:46:
be:23:57:f0:e7:4e:0a:ce:fd:4c:2c:38:2c:bb:03:
72:26:35:c3:52:23:5e:fa:bb:10:bf:dc:a9:27:a2:
95:e9:c6:f0:3b:ea:1a:ed:75:68:9e:b4:5a:22:5a:
ae:32:2a:8f:94:79:81:13:24:3a:d1:9d:4f:cd:1d:
02:20:9d:74:25:96:1b:f7:59:24:66:78:32:2d:b6:
f2:84:f3:b0:5c:f4:35:60:1a:f9:eb:d5:53:29:9b:
b4:3a:78:57:65:53:0d:1e:47:a7:92:41:f1:ad:af:
db:a6:0c:56:49:79:8a:7d:05:ac:d6:7d:b1:22:a4:
1c:a1:69:e5:5c:d8:0d:29:f4:5f:ff:88:d1:8d:de:
09:6d:4b:cf:97:fd:62:ae:4c:9d:b3:8e:37:9d:c8:
54:9c:8b:64:a8:77:c0:75:d5:14:1e:01:a8:4a:55:
34:b7:88:b1:de:bf:77:90:66:e5:16:dc:43:22:e5:
5a:ed:33:e6:d1:f2:cf:4c:1f:41:98:1b:0a:aa:ab:
ad:e0:7b:83:f6:54:8a:93:98:d4:41:8c:7e:fb:87:
23:16:03:8b:e9:36:a2:d2:8d:f5:2f:27:23:35:df:
fd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:79:18:34:F0:37:EE:5E:D4:F6:3B:80:E4:52:40:E1:B4:7C:3D:57
X509v3 Authority Key Identifier:
keyid:8B:27:03:ED:1D:3F:9B:45:1A:87:02:3C:9E:5D:D8:A8:17:92:2B:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/iycD7R0_m0UahwI8nl3YqBeSK9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iycD7R0_m0UahwI8nl3YqBeSK9Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/iycD7R0_m0UahwI8nl3YqBeSK9Y.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:4d:10:b6:ef:77:94:ca:44:02:2f:38:cc:fb:77:c6:2e:96:
39:3c:c5:a1:35:0b:9f:19:d7:3f:cc:20:8c:f3:85:08:2b:e1:
7b:40:b8:59:f5:f7:f3:63:ef:51:e5:56:ec:5b:27:c7:60:ed:
99:ed:c5:75:d8:eb:fb:a7:95:ec:a1:3b:e7:8f:fc:8e:55:c4:
29:61:d5:b1:fe:99:3e:9b:b2:bb:91:30:6c:08:6c:c9:53:72:
c1:57:a4:ee:1a:db:52:d1:a2:95:96:dd:72:ef:f1:5e:00:3c:
f4:87:58:d4:ae:68:00:0b:0f:c9:07:d7:5e:4e:29:25:b1:d6:
e6:f6:b9:b1:69:b8:b1:71:87:88:17:1a:34:75:9c:06:35:31:
c4:a2:7b:a1:04:14:52:40:9f:2f:d3:de:b4:8a:e4:cf:3d:15:
63:62:d6:c3:0a:a2:12:82:62:3b:0e:c0:d8:36:d9:43:dc:37:
28:36:0f:18:dd:85:c9:a0:15:9e:ef:53:6e:0e:78:6c:81:45:
f6:89:0e:a5:46:92:bc:85:ba:14:11:25:96:60:37:5e:93:0d:
fa:27:0f:c4:cc:f9:06:b6:d5:ed:c7:6f:94:44:ec:cd:54:92:
f5:43:7b:85:bb:70:75:c4:90:11:7b:2f:c9:49:47:84:d7:76:
69:7b:33:a5
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBTYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEIy
NzAzRUQxRDNGOUI0NTFBODcwMjNDOUU1REQ4QTgxNzkyMkJENjAeFw0yNTAxMzEx
NTI0NTdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDZFNzkxODM0RjAzN0VF
NUVENEY2M0I4MEU0NTI0MEUxQjQ3QzNENTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXANd/rF5sCGfc5gvDLcFPnjChwVlMvO/znEsJRr4jV/DnTgrO
/UwsOCy7A3ImNcNSI176uxC/3KknopXpxvA76hrtdWietFoiWq4yKo+UeYETJDrR
nU/NHQIgnXQllhv3WSRmeDIttvKE87Bc9DVgGvnr1VMpm7Q6eFdlUw0eR6eSQfGt
r9umDFZJeYp9BazWfbEipByhaeVc2A0p9F//iNGN3gltS8+X/WKuTJ2zjjedyFSc
i2Sod8B11RQeAahKVTS3iLHev3eQZuUW3EMi5VrtM+bR8s9MH0GYGwqqq63ge4P2
VIqTmNRBjH77hyMWA4vpNqLSjfUvJyM13/05AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUbnkYNPA37l7U9juA5FJA4bR8PVcwHwYDVR0jBBgwFoAUiycD7R0/m0UahwI8
nl3YqBeSK9YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2
NS9peWNEN1IwX20wVWFod0k4bmwzWXFCZVNLOVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2l5Y0Q3UjBfbTBVYWh3SThubDNZcUJlU0s5WS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjUvaXljRDdSMF9tMFVh
aHdJOG5sM1lxQmVTSzlZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAGlNELbvd5TKRAIvOMz7d8Yuljk8xaE1C58Z1z/MIIzzhQgr4XtAuFn19/Nj
71HlVuxbJ8dg7ZntxXXY6/unleyhO+eP/I5VxClh1bH+mT6bsruRMGwIbMlTcsFX
pO4a21LRopWW3XLv8V4APPSHWNSuaAALD8kH115OKSWx1ub2ubFpuLFxh4gXGjR1
nAY1McSie6EEFFJAny/T3rSK5M89FWNi1sMKohKCYjsOwNg22UPcNyg2Dxjdhcmg
FZ7vU24OeGyBRfaJDqVGkryFuhQRJZZgN16TDfonD8TM+Qa21e3Hb5RE7M1UkvVD
e4W7cHXEkBF7L8lJR4TXdml7M6U=
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:53:38 2025 by rpki-client