Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3324/_oQChpLxLQXu2qBVm09ecNjMNDA.mft
File: _oQChpLxLQXu2qBVm09ecNjMNDA.mft (raw, json)
Hash identifier: zWHxodaLa58pu69jbVgQwJ+e09F2O/YUUbJ/FqWvLEA=
Subject key identifier: 0E:E5:E8:A1:D3:AC:93:C4:20:D9:9B:5E:CE:10:99:DB:CF:D2:E5:CC
Authority key identifier: FE:84:02:86:92:F1:2D:05:EE:DA:A0:55:9B:4F:5E:70:D8:CC:34:30
Certificate issuer: /CN=FE84028692F12D05EEDAA0559B4F5E70D8CC3430
Certificate serial: 0180
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_oQChpLxLQXu2qBVm09ecNjMNDA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/_oQChpLxLQXu2qBVm09ecNjMNDA.mft
Manifest number: 0180
Signing time: Fri 31 Jan 2025 15:27:20 +0000
Manifest this update: Fri 31 Jan 2025 15:27:19 +0000
Manifest next update: Fri 31 Jan 2025 21:27:19 +0000
Files and hashes: 1: _oQChpLxLQXu2qBVm09ecNjMNDA.crl (hash: SnDARbvyKiRc2eXkebFCSlM2InMJIZjbeAepTZCSXSs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE84028692F12D05EEDAA0559B4F5E70D8CC3430
Validity
Not Before: Jan 31 15:27:19 2025 GMT
Not After : Oct 18 02:16:55 2025 GMT
Subject: CN=0EE5E8A1D3AC93C420D99B5ECE1099DBCFD2E5CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:0e:60:8f:fd:6f:17:6f:59:0f:25:37:ae:
05:4a:da:1b:89:c7:e0:06:66:85:c9:4a:2d:37:a0:
8b:96:b9:38:70:8e:68:b9:2a:95:e4:28:9f:77:f9:
52:b2:66:e9:3d:24:31:21:bd:3a:1f:9a:38:27:7a:
ad:67:10:5f:76:50:b2:91:9f:9f:d9:8d:1a:17:fd:
8b:b3:91:b4:c2:80:b3:41:63:83:1a:3a:86:a5:b5:
d1:d8:c7:69:6c:8a:ab:08:85:a6:e1:21:55:ae:18:
d2:9f:91:a0:65:f1:5c:55:7e:92:8c:2a:79:98:f9:
f2:b5:43:ec:3f:04:24:24:f9:c3:45:24:bf:c6:4e:
25:0a:0b:db:28:49:61:34:47:b8:00:86:23:db:96:
87:5b:43:69:e5:ee:ce:4b:8a:27:45:99:38:76:19:
b7:cf:e9:6f:ad:38:3f:52:7d:ef:9c:dd:35:ae:1e:
fa:97:2c:e8:f0:2d:d6:1c:67:93:d1:0e:05:48:45:
6a:2f:16:26:58:f9:aa:d8:2a:e0:7e:d2:6f:fd:b3:
87:ae:45:b7:79:cf:2c:84:ad:f7:b7:88:ae:de:7c:
af:8e:3b:f0:6a:ba:ed:b5:a2:01:01:e3:a3:22:6e:
dc:39:31:d5:1c:2d:b5:65:a8:8e:26:67:dc:e5:e5:
eb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E5:E8:A1:D3:AC:93:C4:20:D9:9B:5E:CE:10:99:DB:CF:D2:E5:CC
X509v3 Authority Key Identifier:
keyid:FE:84:02:86:92:F1:2D:05:EE:DA:A0:55:9B:4F:5E:70:D8:CC:34:30
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/_oQChpLxLQXu2qBVm09ecNjMNDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_oQChpLxLQXu2qBVm09ecNjMNDA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/_oQChpLxLQXu2qBVm09ecNjMNDA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:6a:0a:bc:c3:28:4d:97:e9:65:bd:5a:9b:ce:0e:40:8b:a6:
37:16:ff:41:5f:46:83:19:83:79:40:af:1b:83:b5:85:aa:f0:
97:ee:a2:3f:79:b0:9c:54:a8:fe:24:c2:de:71:21:fe:9b:f7:
b4:76:3d:47:5d:21:aa:5c:62:59:e9:bc:11:4b:dc:b5:69:d3:
ec:ea:ed:b0:61:4e:58:d2:26:80:e2:d6:cc:62:2c:6c:93:ce:
91:e1:eb:1b:18:75:3e:c3:e4:30:15:18:50:51:91:87:6d:33:
8c:5b:da:41:5a:ef:13:d0:59:23:01:4e:3f:c7:57:29:74:95:
ce:12:ec:d5:4f:4e:42:b2:4e:46:a0:e6:eb:4b:02:b2:61:4e:
f3:38:f1:ce:6d:00:65:86:be:f2:48:0c:06:11:95:62:3c:6d:
c1:c7:a8:f1:06:8b:5a:98:35:da:3c:38:dc:ca:32:64:77:b1:
d2:cf:15:6c:ba:76:0a:c8:76:37:98:05:23:44:5b:b6:f8:c5:
dd:8a:85:f6:ec:0c:1d:60:4a:b9:e0:bc:42:2a:9f:14:4b:ed:
ee:cc:66:54:cf:23:07:81:62:da:c9:ef:7c:ad:2f:7f:a1:6c:
97:88:0d:fe:2a:33:bc:79:34:d3:55:8e:47:59:ca:21:25:3f:
bc:9d:4c:61
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkU4
NDAyODY5MkYxMkQwNUVFREFBMDU1OUI0RjVFNzBEOENDMzQzMDAeFw0yNTAxMzEx
NTI3MTlaFw0yNTEwMTgwMjE2NTVaMDMxMTAvBgNVBAMTKDBFRTVFOEExRDNBQzkz
QzQyMEQ5OUI1RUNFMTA5OURCQ0ZEMkU1Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKgA5gj/1vF29ZDyU3rgVK2huJx+AGZoXJSi03oIuWuThwjmi5
KpXkKJ93+VKyZuk9JDEhvTofmjgneq1nEF92ULKRn5/ZjRoX/YuzkbTCgLNBY4Ma
OoaltdHYx2lsiqsIhabhIVWuGNKfkaBl8VxVfpKMKnmY+fK1Q+w/BCQk+cNFJL/G
TiUKC9soSWE0R7gAhiPblodbQ2nl7s5LiidFmTh2GbfP6W+tOD9Sfe+c3TWuHvqX
LOjwLdYcZ5PRDgVIRWovFiZY+arYKuB+0m/9s4euRbd5zyyErfe3iK7efK+OO/Bq
uu21ogEB46Mibtw5MdUcLbVlqI4mZ9zl5eszAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUDuXoodOsk8Qg2ZtezhCZ28/S5cwwHwYDVR0jBBgwFoAU/oQChpLxLQXu2qBV
m09ecNjMNDAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy
NC9fb1FDaHBMeExRWHUycUJWbTA5ZWNOak1OREEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL19vUUNocEx4TFFYdTJxQlZtMDllY05qTU5EQS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjQvX29RQ2hwTHhMUVh1
MnFCVm0wOWVjTmpNTkRBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBANZqCrzDKE2X6WW9WpvODkCLpjcW/0FfRoMZg3lArxuDtYWq8Jfuoj95sJxU
qP4kwt5xIf6b97R2PUddIapcYlnpvBFL3LVp0+zq7bBhTljSJoDi1sxiLGyTzpHh
6xsYdT7D5DAVGFBRkYdtM4xb2kFa7xPQWSMBTj/HVyl0lc4S7NVPTkKyTkag5utL
ArJhTvM48c5tAGWGvvJIDAYRlWI8bcHHqPEGi1qYNdo8ONzKMmR3sdLPFWy6dgrI
djeYBSNEW7b4xd2KhfbsDB1gSrngvEIqnxRL7e7MZlTPIweBYtrJ73ytL3+hbJeI
Df4qM7x5NNNVjkdZyiElP7ydTGE=
-----END CERTIFICATE-----
Generated at Wed Apr 30 07:01:22 2025 by rpki-client