Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3277/b9AjRMs0VRt1rQS0HGQaJAmBRa0.mft
File: b9AjRMs0VRt1rQS0HGQaJAmBRa0.mft (raw, json)
Hash identifier: apM6RYDBnZFdims7TtDwpbcAsUWEKT2XTofTRXdOie8=
Subject key identifier: 48:F8:71:02:E1:75:17:F8:0A:22:91:31:DF:61:A4:BB:EF:C4:7D:59
Authority key identifier: 6F:D0:23:44:CB:34:55:1B:75:AD:04:B4:1C:64:1A:24:09:81:45:AD
Certificate issuer: /CN=6FD02344CB34551B75AD04B41C641A24098145AD
Certificate serial: 05BB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b9AjRMs0VRt1rQS0HGQaJAmBRa0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3277/b9AjRMs0VRt1rQS0HGQaJAmBRa0.mft
Manifest number: 05BB
Signing time: Fri 31 Jan 2025 15:25:02 +0000
Manifest this update: Fri 31 Jan 2025 15:25:02 +0000
Manifest next update: Fri 31 Jan 2025 21:25:02 +0000
Files and hashes: 1: b9AjRMs0VRt1rQS0HGQaJAmBRa0.crl (hash: ZTVr++HDQDoemsIWDdkedRXJDMYD+pIfQoI3WVHGEuw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1467 (0x5bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FD02344CB34551B75AD04B41C641A24098145AD
Validity
Not Before: Jan 31 15:25:02 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=48F87102E17517F80A229131DF61A4BBEFC47D59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:85:be:6d:64:ec:e8:6d:9a:24:fb:25:17:
a3:1e:c3:bd:be:d3:e2:48:9e:74:57:7b:31:8a:97:
8a:2c:e8:ba:87:c5:a2:04:0d:49:92:19:57:10:01:
72:6e:5b:d2:77:40:75:ba:34:a9:4a:84:98:13:0d:
52:b8:1b:f5:d5:8b:8a:de:a7:99:a3:80:60:ef:f9:
d7:c0:af:cb:11:fb:e5:6b:4e:2a:d6:df:bf:e3:b9:
cb:83:0a:25:65:24:7c:b2:5c:ef:78:93:6c:79:6a:
1e:26:84:ad:dd:8b:0b:19:75:1d:a7:3f:1c:bc:0c:
b6:31:bd:b1:84:19:1b:2a:dc:39:ae:73:b2:a5:e6:
1c:fd:a6:9c:fd:a1:81:79:d7:1b:35:d2:00:7b:c4:
cb:7c:c2:eb:48:1a:86:d9:76:89:3d:6a:5c:4d:67:
51:8b:6d:d3:51:32:c1:21:7e:da:33:57:e7:dd:aa:
a7:9b:a1:d0:12:ec:39:3c:de:bc:e3:ea:23:cf:be:
f5:a3:f4:88:48:e6:39:28:8b:a3:b9:e5:61:31:33:
63:5c:98:38:12:f9:59:cf:2f:e0:80:22:b5:38:eb:
1c:3f:e0:ba:8d:d2:e4:17:b1:09:0b:ae:fd:e3:b5:
4b:e9:f6:b2:02:b7:47:23:bc:c8:9d:88:99:bb:66:
8e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F8:71:02:E1:75:17:F8:0A:22:91:31:DF:61:A4:BB:EF:C4:7D:59
X509v3 Authority Key Identifier:
keyid:6F:D0:23:44:CB:34:55:1B:75:AD:04:B4:1C:64:1A:24:09:81:45:AD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3277/b9AjRMs0VRt1rQS0HGQaJAmBRa0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b9AjRMs0VRt1rQS0HGQaJAmBRa0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3277/b9AjRMs0VRt1rQS0HGQaJAmBRa0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:09:5c:62:15:e4:f4:da:f0:fb:c2:1a:b8:bb:c9:6a:05:59:
75:e5:5f:34:7d:ce:39:d0:af:63:b2:0d:3b:bb:73:4c:85:22:
8d:1f:50:2e:0e:88:7a:8e:b0:4a:5e:f1:58:9e:39:ea:bd:4c:
c1:74:cd:d4:87:d5:a0:3c:93:9b:e4:9d:71:62:01:25:97:87:
82:c1:1e:24:36:f2:21:49:c7:04:74:a1:9c:a0:af:3e:91:5c:
92:55:de:9b:0d:30:eb:17:b6:84:48:cf:66:9a:91:a3:b1:63:
70:e6:ad:41:92:fc:ea:f4:41:17:bc:e1:95:95:b2:7d:07:00:
52:9b:a4:1d:73:a6:49:68:50:3a:d6:63:a8:95:31:35:ab:99:
43:08:4a:bf:52:65:da:8f:8e:a7:39:18:39:22:8f:a2:6c:b1:
bb:14:15:87:5e:ff:45:de:6b:5b:87:9e:d1:80:ee:35:6e:a6:
0c:15:ff:9c:4f:ff:d0:bd:86:97:a6:d2:b1:c9:f1:1e:91:89:
50:63:dd:f3:6c:99:ba:aa:fc:18:c5:14:58:c5:3f:11:3f:b7:
3b:95:7b:6c:df:d3:c1:84:6c:2e:18:55:55:c6:1b:93:6f:78:
6b:92:23:fc:84:f0:31:24:b8:7d:96:0c:e6:88:a6:2a:9c:5e:
27:82:16:da
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBbswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZE
MDIzNDRDQjM0NTUxQjc1QUQwNEI0MUM2NDFBMjQwOTgxNDVBRDAeFw0yNTAxMzEx
NTI1MDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQ4Rjg3MTAyRTE3NTE3
RjgwQTIyOTEzMURGNjFBNEJCRUZDNDdENTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3uoW+bWTs6G2aJPslF6Mew72+0+JInnRXezGKl4os6LqHxaIE
DUmSGVcQAXJuW9J3QHW6NKlKhJgTDVK4G/XVi4rep5mjgGDv+dfAr8sR++VrTirW
37/jucuDCiVlJHyyXO94k2x5ah4mhK3diwsZdR2nPxy8DLYxvbGEGRsq3Dmuc7Kl
5hz9ppz9oYF51xs10gB7xMt8wutIGobZdok9alxNZ1GLbdNRMsEhftozV+fdqqeb
odAS7Dk83rzj6iPPvvWj9IhI5jkoi6O55WExM2NcmDgS+VnPL+CAIrU46xw/4LqN
0uQXsQkLrv3jtUvp9rICt0cjvMidiJm7Zo65AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUSPhxAuF1F/gKIpEx32Gku+/EfVkwHwYDVR0jBBgwFoAUb9AjRMs0VRt1rQS0
HGQaJAmBRa0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3
Ny9iOUFqUk1zMFZSdDFyUVMwSEdRYUpBbUJSYTAuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2I5QWpSTXMwVlJ0MXJRUzBIR1FhSkFtQlJhMC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzcvYjlBalJNczBWUnQx
clFTMEhHUWFKQW1CUmEwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAHMJXGIV5PTa8PvCGri7yWoFWXXlXzR9zjnQr2OyDTu7c0yFIo0fUC4OiHqO
sEpe8VieOeq9TMF0zdSH1aA8k5vknXFiASWXh4LBHiQ28iFJxwR0oZygrz6RXJJV
3psNMOsXtoRIz2aakaOxY3DmrUGS/Or0QRe84ZWVsn0HAFKbpB1zpkloUDrWY6iV
MTWrmUMISr9SZdqPjqc5GDkij6JssbsUFYde/0Xea1uHntGA7jVupgwV/5xP/9C9
hpem0rHJ8R6RiVBj3fNsmbqq/BjFFFjFPxE/tzuVe2zf08GEbC4YVVXGG5NveGuS
I/yE8DEkuH2WDOaIpiqcXieCFto=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:29:41 2025 by rpki-client