Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft
File: rG7v4uYozkZswlwA92XMjVOKljE.mft (raw, json)
Hash identifier: sW1lAareKICU4z/XqnMJ1CwGv5so87s7IIXGc1W3pAM=
Subject key identifier: 5D:BC:17:74:C2:16:B6:8C:B2:FB:36:DF:32:73:F6:DA:28:54:55:05
Authority key identifier: AC:6E:EF:E2:E6:28:CE:46:6C:C2:5C:00:F7:65:CC:8D:53:8A:96:31
Certificate issuer: /CN=AC6EEFE2E628CE466CC25C00F765CC8D538A9631
Certificate serial: 03E3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rG7v4uYozkZswlwA92XMjVOKljE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft
Manifest number: 03E3
Signing time: Fri 31 Jan 2025 15:25:05 +0000
Manifest this update: Fri 31 Jan 2025 15:25:05 +0000
Manifest next update: Fri 31 Jan 2025 21:25:05 +0000
Files and hashes: 1: rG7v4uYozkZswlwA92XMjVOKljE.crl (hash: nR+ij8gHPSWeLt6c6Mijxmn7Xtlv/hnE4Vxw/8hlrgg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 995 (0x3e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC6EEFE2E628CE466CC25C00F765CC8D538A9631
Validity
Not Before: Jan 31 15:25:05 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5DBC1774C216B68CB2FB36DF3273F6DA28545505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ad:ac:7b:44:6c:5d:ff:9e:5f:48:e2:5c:c2:
37:32:a8:5e:a5:34:31:87:30:f0:cf:f6:0b:4b:cc:
ac:9c:37:fa:25:e8:d2:c0:e1:84:b2:39:ea:b5:63:
8d:f6:9c:1c:00:e6:13:0c:a8:1a:f0:33:39:ed:65:
24:bc:be:49:b0:50:8c:74:7b:e3:42:91:a1:21:f2:
70:2f:36:66:5e:41:b4:e2:bd:c6:cf:f1:0c:84:04:
12:a8:f2:ed:61:6c:b5:36:65:09:04:f0:a7:aa:82:
cc:69:51:7b:c0:76:ef:12:65:50:2f:8b:71:3d:05:
bd:d6:37:1e:8a:b7:82:ba:08:77:19:44:e1:31:f9:
82:3c:1a:83:73:e0:cf:e5:82:3d:25:f1:29:25:3d:
e0:63:be:5d:d5:08:31:89:bb:3a:c4:53:02:72:18:
1d:4c:1f:40:4c:86:e0:a6:0c:14:f8:6a:e6:06:23:
77:3e:44:06:b1:aa:78:71:e7:22:9b:90:87:44:9d:
60:f9:cd:01:89:3e:43:11:61:ff:72:8a:a1:3e:01:
ef:33:45:f3:e8:b0:08:4f:79:73:cd:85:fd:6b:57:
ec:42:d9:83:61:77:22:ae:1d:26:b6:12:c3:fb:34:
f7:4c:4e:54:00:4d:85:89:7a:cd:55:cf:58:c6:cc:
15:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BC:17:74:C2:16:B6:8C:B2:FB:36:DF:32:73:F6:DA:28:54:55:05
X509v3 Authority Key Identifier:
keyid:AC:6E:EF:E2:E6:28:CE:46:6C:C2:5C:00:F7:65:CC:8D:53:8A:96:31
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rG7v4uYozkZswlwA92XMjVOKljE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:fb:53:7f:19:f3:74:6f:ca:5a:ff:7e:e1:3e:4c:44:6c:41:
b8:0c:ce:dc:c5:4a:5c:47:5b:a0:90:e9:e9:cc:65:3e:6a:3f:
85:02:8b:27:a9:04:40:d4:1e:6f:24:1e:a2:de:49:49:1c:50:
89:97:c1:d9:73:76:f8:8a:11:b0:b0:a0:cc:08:8f:09:f1:f3:
e9:02:49:9b:f2:70:9a:c0:50:0b:f3:d1:e4:d5:91:78:cc:e5:
eb:02:59:ba:6a:e5:38:01:e8:d9:3f:3b:88:0a:b2:c6:9f:65:
fb:9e:b2:cb:3a:32:c3:74:4b:cc:d0:d8:ad:aa:be:59:4e:52:
90:39:83:c4:b4:3d:12:96:00:6a:02:79:9d:64:36:57:b5:c2:
a3:79:d4:a1:3a:77:65:d1:e9:d8:90:53:ba:19:e2:2a:50:5e:
4a:b1:a7:0c:6f:12:16:23:d9:8a:97:e2:5b:e6:5d:d2:ec:95:
95:64:40:63:6a:f5:fb:d7:cb:51:e8:5b:fd:5d:7d:3c:fb:f3:
e9:71:c1:ce:11:4c:3f:d7:6d:de:01:8d:74:e2:1b:b6:31:29:
04:b0:35:bd:92:97:32:72:47:07:0e:5c:ac:b9:02:44:b4:56:
a5:e8:a1:22:2b:8d:6c:27:8d:fb:8f:9b:15:bb:81:54:ee:3c:
c5:6c:6b:f4
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICA+MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUM2
RUVGRTJFNjI4Q0U0NjZDQzI1QzAwRjc2NUNDOEQ1MzhBOTYzMTAeFw0yNTAxMzEx
NTI1MDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDVEQkMxNzc0QzIxNkI2
OENCMkZCMzZERjMyNzNGNkRBMjg1NDU1MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD0rax7RGxd/55fSOJcwjcyqF6lNDGHMPDP9gtLzKycN/ol6NLA
4YSyOeq1Y432nBwA5hMMqBrwMzntZSS8vkmwUIx0e+NCkaEh8nAvNmZeQbTivcbP
8QyEBBKo8u1hbLU2ZQkE8KeqgsxpUXvAdu8SZVAvi3E9Bb3WNx6Kt4K6CHcZROEx
+YI8GoNz4M/lgj0l8SklPeBjvl3VCDGJuzrEUwJyGB1MH0BMhuCmDBT4auYGI3c+
RAaxqnhx5yKbkIdEnWD5zQGJPkMRYf9yiqE+Ae8zRfPosAhPeXPNhf1rV+xC2YNh
dyKuHSa2EsP7NPdMTlQATYWJes1Vz1jGzBWfAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUXbwXdMIWtoyy+zbfMnP22ihUVQUwHwYDVR0jBBgwFoAUrG7v4uYozkZswlwA
92XMjVOKljEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw
Mi9yRzd2NHVZb3prWnN3bHdBOTJYTWpWT0tsakUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3JHN3Y0dVlvemtac3dsd0E5MlhNalZPS2xqRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDIvckc3djR1WW96a1pz
d2x3QTkyWE1qVk9LbGpFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAFf7U38Z83Rvylr/fuE+TERsQbgMztzFSlxHW6CQ6enMZT5qP4UCiyepBEDU
Hm8kHqLeSUkcUImXwdlzdviKEbCwoMwIjwnx8+kCSZvycJrAUAvz0eTVkXjM5esC
Wbpq5TgB6Nk/O4gKssafZfuesss6MsN0S8zQ2K2qvllOUpA5g8S0PRKWAGoCeZ1k
Nle1wqN51KE6d2XR6diQU7oZ4ipQXkqxpwxvEhYj2YqX4lvmXdLslZVkQGNq9fvX
y1HoW/1dfTz78+lxwc4RTD/Xbd4BjXTiG7YxKQSwNb2SlzJyRwcOXKy5AkS0VqXo
oSIrjWwnjfuPmxW7gVTuPMVsa/Q=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:43:21 2025 by rpki-client