Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3307/4D4PjKiQjhc6NwrDMIv3bA6iep0.mft
File: 4D4PjKiQjhc6NwrDMIv3bA6iep0.mft (raw, json)
Hash identifier: xcO1UAMc6vjwjv4ukMTWjqNJA2PEwTmskp5m3orP3ho=
Subject key identifier: 74:A7:94:06:07:38:05:A9:F4:45:68:1B:96:96:9F:04:F5:E1:F5:92
Authority key identifier: E0:3E:0F:8C:A8:90:8E:17:3A:37:0A:C3:30:8B:F7:6C:0E:A2:7A:9D
Certificate issuer: /CN=E03E0F8CA8908E173A370AC3308BF76C0EA27A9D
Certificate serial: 03A1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4D4PjKiQjhc6NwrDMIv3bA6iep0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/4D4PjKiQjhc6NwrDMIv3bA6iep0.mft
Manifest number: 03A1
Signing time: Fri 31 Jan 2025 15:24:10 +0000
Manifest this update: Fri 31 Jan 2025 15:24:10 +0000
Manifest next update: Fri 31 Jan 2025 21:24:10 +0000
Files and hashes: 1: 4D4PjKiQjhc6NwrDMIv3bA6iep0.crl (hash: aqLnONl+E06nG03z44ah232/Q5x8BZcSenGcuiC5VQ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 929 (0x3a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E03E0F8CA8908E173A370AC3308BF76C0EA27A9D
Validity
Not Before: Jan 31 15:24:10 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=74A79406073805A9F445681B96969F04F5E1F592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f2:3a:9d:5e:bc:cb:a1:ee:ef:5f:8f:2a:0d:
5d:b2:d6:88:1a:ae:d6:12:50:ac:8b:44:0c:e8:ba:
42:2d:b8:55:49:0a:75:e9:f5:96:43:7c:08:01:cc:
23:41:32:00:d5:ca:81:29:88:0c:32:80:55:4b:f4:
54:b6:b7:1d:cf:cb:91:05:3f:ae:80:e8:9c:5b:e9:
55:81:f9:2c:73:99:d9:ba:20:43:ec:d0:b0:9d:f4:
16:f9:27:f3:1a:c4:03:0c:c2:3e:8e:fe:ff:22:d1:
8e:50:30:36:5e:3c:38:0c:48:3b:99:6c:35:3a:39:
bc:78:68:3f:c8:3d:a9:c4:77:01:79:21:0c:1f:ba:
e6:70:33:21:91:bb:a4:2a:30:10:82:a6:90:93:85:
84:9b:30:76:60:ec:31:e9:67:5d:51:7e:5a:f3:15:
e2:64:f8:ac:d8:02:86:b7:fc:40:be:3f:c3:bd:10:
3b:20:ea:76:27:4f:65:41:bd:a7:70:5a:ba:77:52:
bc:b6:cf:4f:f6:50:d6:cf:d6:2b:ce:0b:80:03:d8:
f8:aa:8c:02:0a:40:7a:03:89:e9:ba:be:a9:f6:85:
ff:45:d7:1a:b2:bf:89:54:5d:f0:7d:a3:a4:bc:8d:
4b:1a:6a:aa:62:5e:e6:90:11:0e:2a:9a:43:b6:a6:
44:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A7:94:06:07:38:05:A9:F4:45:68:1B:96:96:9F:04:F5:E1:F5:92
X509v3 Authority Key Identifier:
keyid:E0:3E:0F:8C:A8:90:8E:17:3A:37:0A:C3:30:8B:F7:6C:0E:A2:7A:9D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/4D4PjKiQjhc6NwrDMIv3bA6iep0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4D4PjKiQjhc6NwrDMIv3bA6iep0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/4D4PjKiQjhc6NwrDMIv3bA6iep0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fd:ac:bf:40:3e:d8:31:b4:ce:cb:e3:8c:b5:f2:c0:e6:0e:
b3:bd:cf:a7:8b:0b:fd:4a:ea:f5:b2:8c:62:3d:a2:45:c4:39:
1d:4b:8f:1b:46:3e:d0:b4:8e:9f:e0:06:c2:2a:0d:9a:a6:cd:
6a:23:b4:f5:5d:77:7b:54:aa:b9:52:45:9f:93:aa:47:0f:67:
11:f2:dd:8f:30:2b:f2:b3:b9:15:78:04:63:d6:f6:71:3a:c2:
e0:ba:0e:f3:48:f5:b1:f2:a2:13:f1:89:f1:7c:96:9c:ae:fe:
1e:80:4b:56:81:2d:48:43:8d:ad:6d:6e:95:00:71:4f:93:5d:
89:01:8f:8f:dd:f4:7a:35:e9:f1:7a:9e:a1:db:94:47:f5:ca:
ad:73:95:a7:6f:6d:a5:86:8e:77:31:79:90:d8:f9:e3:1b:8c:
3b:fd:ff:ee:f6:55:bb:ba:07:e1:a6:a1:a1:f5:0a:9a:23:c7:
1c:26:94:83:83:ce:90:c9:2e:cd:fd:03:63:25:2b:70:a5:3d:
34:75:16:03:e3:2d:0b:e4:94:63:06:8a:2f:c9:01:1b:2e:44:
6d:3a:73:92:4d:d3:8f:9a:33:d1:92:4d:c6:f9:d9:94:17:cf:
12:ce:16:50:06:48:12:72:ba:ff:6c:34:0d:66:cc:9a:fa:b4:
4e:9a:9f:a3
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICA6EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAz
RTBGOENBODkwOEUxNzNBMzcwQUMzMzA4QkY3NkMwRUEyN0E5RDAeFw0yNTAxMzEx
NTI0MTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDc0QTc5NDA2MDczODA1
QTlGNDQ1NjgxQjk2OTY5RjA0RjVFMUY1OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDj8jqdXrzLoe7vX48qDV2y1ogartYSUKyLRAzoukItuFVJCnXp
9ZZDfAgBzCNBMgDVyoEpiAwygFVL9FS2tx3Py5EFP66A6Jxb6VWB+Sxzmdm6IEPs
0LCd9Bb5J/MaxAMMwj6O/v8i0Y5QMDZePDgMSDuZbDU6Obx4aD/IPanEdwF5IQwf
uuZwMyGRu6QqMBCCppCThYSbMHZg7DHpZ11RflrzFeJk+KzYAoa3/EC+P8O9EDsg
6nYnT2VBvadwWrp3Ury2z0/2UNbP1ivOC4AD2PiqjAIKQHoDiem6vqn2hf9F1xqy
v4lUXfB9o6S8jUsaaqpiXuaQEQ4qmkO2pkRPAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUdKeUBgc4Ban0RWgblpafBPXh9ZIwHwYDVR0jBBgwFoAU4D4PjKiQjhc6NwrD
MIv3bA6iep0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw
Ny80RDRQaktpUWpoYzZOd3JETUl2M2JBNmllcDAuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzRENFBqS2lRamhjNk53ckRNSXYzYkE2aWVwMC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDcvNEQ0UGpLaVFqaGM2
TndyRE1JdjNiQTZpZXAwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBABv9rL9APtgxtM7L44y18sDmDrO9z6eLC/1K6vWyjGI9okXEOR1LjxtGPtC0
jp/gBsIqDZqmzWojtPVdd3tUqrlSRZ+TqkcPZxHy3Y8wK/KzuRV4BGPW9nE6wuC6
DvNI9bHyohPxifF8lpyu/h6AS1aBLUhDja1tbpUAcU+TXYkBj4/d9Ho16fF6nqHb
lEf1yq1zladvbaWGjncxeZDY+eMbjDv9/+72Vbu6B+GmoaH1CpojxxwmlIODzpDJ
Ls39A2MlK3ClPTR1FgPjLQvklGMGii/JARsuRG06c5JN04+aM9GSTcb52ZQXzxLO
FlAGSBJyuv9sNA1mzJr6tE6an6M=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:06:35 2025 by rpki-client