Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3278/N3Z104GJWPsoPxmxJ8mVg1G0Vh4.mft
File: N3Z104GJWPsoPxmxJ8mVg1G0Vh4.mft (raw, json)
Hash identifier: bGn1fEovL9e/jxUY/OmbfkvclPbma4fdWWSgMIo2vVU=
Subject key identifier: AE:5B:58:BC:3A:A8:70:50:9F:C8:DE:40:CE:D4:7A:91:98:35:F3:A6
Authority key identifier: 37:76:75:D3:81:89:58:FB:28:3F:19:B1:27:C9:95:83:51:B4:56:1E
Certificate issuer: /CN=377675D3818958FB283F19B127C9958351B4561E
Certificate serial: 0572
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/N3Z104GJWPsoPxmxJ8mVg1G0Vh4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/N3Z104GJWPsoPxmxJ8mVg1G0Vh4.mft
Manifest number: 0572
Signing time: Fri 31 Jan 2025 15:27:14 +0000
Manifest this update: Fri 31 Jan 2025 15:27:14 +0000
Manifest next update: Fri 31 Jan 2025 21:27:14 +0000
Files and hashes: 1: N3Z104GJWPsoPxmxJ8mVg1G0Vh4.crl (hash: TCgB4YNt+IQWoMe/h5XpHckgAdd2CIc2frriudghPY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1394 (0x572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377675D3818958FB283F19B127C9958351B4561E
Validity
Not Before: Jan 31 15:27:14 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=AE5B58BC3AA870509FC8DE40CED47A919835F3A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9f:63:98:98:1c:65:2f:80:de:3e:66:e4:d1:
63:66:ea:a3:9d:da:de:08:5f:68:17:19:9d:8f:b0:
a1:75:cd:1f:ef:19:c7:1c:1c:e0:4b:7c:37:77:4a:
da:67:10:5f:b7:bb:0f:f9:df:b1:b0:14:2c:84:c9:
bb:2f:a0:05:05:63:1c:b5:24:69:33:5c:df:9f:25:
a2:19:c5:8b:0c:4a:10:6e:94:a3:92:18:90:73:3d:
5f:cb:6a:dd:73:8a:28:8c:95:a1:dd:a6:db:f3:e9:
9b:ec:19:6b:14:74:a5:a0:8d:5a:e2:f8:3e:e6:b0:
02:37:ce:c7:c8:f0:d2:a9:7a:5b:e0:0b:5b:c7:e3:
00:0f:43:94:ba:39:54:82:87:67:f1:2e:f1:98:8a:
ac:0f:5c:f1:5e:d3:ef:7a:03:0f:8f:3b:c4:86:7c:
82:0a:fa:db:f6:7a:77:e9:90:72:1f:a1:2c:41:f7:
d3:0f:69:dc:44:18:ad:30:43:7a:7c:dc:66:28:90:
8f:07:40:27:42:29:d6:9e:19:5a:40:5a:e3:72:b7:
cb:8a:3a:2a:04:73:27:c8:10:6e:16:73:94:b0:99:
01:23:06:f4:04:ae:87:e6:9f:5c:3c:2b:d1:a7:56:
6d:26:a7:b2:79:f0:3b:23:cb:99:8a:8a:fb:e2:44:
4d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5B:58:BC:3A:A8:70:50:9F:C8:DE:40:CE:D4:7A:91:98:35:F3:A6
X509v3 Authority Key Identifier:
keyid:37:76:75:D3:81:89:58:FB:28:3F:19:B1:27:C9:95:83:51:B4:56:1E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/N3Z104GJWPsoPxmxJ8mVg1G0Vh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/N3Z104GJWPsoPxmxJ8mVg1G0Vh4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/N3Z104GJWPsoPxmxJ8mVg1G0Vh4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:a6:53:fa:0f:80:f9:46:a3:ec:5f:57:f1:d5:a5:a2:aa:04:
b8:4c:81:5b:94:05:bb:fb:d0:cd:2e:2b:60:b5:b9:e6:a5:09:
ab:e9:65:aa:3a:6b:93:8b:31:81:5e:f5:62:e9:b3:9d:fc:61:
75:43:0a:6c:aa:c7:05:93:58:57:d2:4f:6b:4c:d6:d8:86:ae:
85:8f:a2:e1:aa:43:86:ca:ff:b7:1c:e5:36:d3:14:62:0a:38:
2b:ae:26:7e:b9:e5:e2:96:d9:65:b2:a6:94:77:77:a6:ce:1d:
8f:32:bc:3b:17:5a:fe:e5:08:91:ac:bf:42:6a:c2:d2:1b:8f:
2b:65:7e:46:4a:4b:83:ba:08:35:28:e7:5a:fc:08:c9:f2:7f:
79:59:76:f0:2a:2a:18:f7:80:63:2e:7e:e4:86:93:eb:23:0e:
36:19:f6:8c:83:e1:c2:f4:2b:d6:c4:ec:e3:ac:01:07:b9:00:
fd:20:1b:f2:e1:5b:ee:4a:f3:01:57:e0:ca:76:23:39:36:55:
e9:97:7c:0d:f4:c4:b1:a8:90:2f:d1:22:7a:ae:7a:a4:ef:9d:
86:26:be:b9:25:f8:31:58:18:7e:51:23:d0:48:cd:d6:b9:f0:
4f:a7:e3:67:2e:b2:f7:cd:10:61:6f:88:46:34:43:e5:4e:24:
b0:24:1a:95
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBXIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzc3
Njc1RDM4MTg5NThGQjI4M0YxOUIxMjdDOTk1ODM1MUI0NTYxRTAeFw0yNTAxMzEx
NTI3MTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEFFNUI1OEJDM0FBODcw
NTA5RkM4REU0MENFRDQ3QTkxOTgzNUYzQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCan2OYmBxlL4DePmbk0WNm6qOd2t4IX2gXGZ2PsKF1zR/vGccc
HOBLfDd3StpnEF+3uw/537GwFCyEybsvoAUFYxy1JGkzXN+fJaIZxYsMShBulKOS
GJBzPV/Lat1ziiiMlaHdptvz6ZvsGWsUdKWgjVri+D7msAI3zsfI8NKpelvgC1vH
4wAPQ5S6OVSCh2fxLvGYiqwPXPFe0+96Aw+PO8SGfIIK+tv2enfpkHIfoSxB99MP
adxEGK0wQ3p83GYokI8HQCdCKdaeGVpAWuNyt8uKOioEcyfIEG4Wc5SwmQEjBvQE
rofmn1w8K9GnVm0mp7J58Dsjy5mKivviRE0fAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUrltYvDqocFCfyN5AztR6kZg186YwHwYDVR0jBBgwFoAUN3Z104GJWPsoPxmx
J8mVg1G0Vh4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3
OC9OM1oxMDRHSldQc29QeG14SjhtVmcxRzBWaDQuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL04zWjEwNEdKV1Bzb1B4bXhKOG1WZzFHMFZoNC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzgvTjNaMTA0R0pXUHNv
UHhteEo4bVZnMUcwVmg0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJemU/oPgPlGo+xfV/HVpaKqBLhMgVuUBbv70M0uK2C1uealCavpZao6a5OL
MYFe9WLps538YXVDCmyqxwWTWFfST2tM1tiGroWPouGqQ4bK/7cc5TbTFGIKOCuu
Jn655eKW2WWyppR3d6bOHY8yvDsXWv7lCJGsv0JqwtIbjytlfkZKS4O6CDUo51r8
CMnyf3lZdvAqKhj3gGMufuSGk+sjDjYZ9oyD4cL0K9bE7OOsAQe5AP0gG/LhW+5K
8wFX4Mp2Izk2VemXfA30xLGokC/RInqueqTvnYYmvrkl+DFYGH5RI9BIzda58E+n
42cusvfNEGFviEY0Q+VOJLAkGpU=
-----END CERTIFICATE-----
Generated at Wed Apr 30 11:18:13 2025 by rpki-client