Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3340/4gVcAoq4tapUsWMav0wjwUIFSro.mft
File: 4gVcAoq4tapUsWMav0wjwUIFSro.mft (raw, json)
Hash identifier: eMU5Uh2Az+nzVrli5UpGmpY8TBeMWIucvHgRjE+GoGE=
Subject key identifier: F0:A9:86:ED:F2:89:F4:96:B6:B6:C7:F3:4A:4E:7A:81:2D:48:11:59
Authority key identifier: E2:05:5C:02:8A:B8:B5:AA:54:B1:63:1A:BF:4C:23:C1:42:05:4A:BA
Certificate issuer: /CN=E2055C028AB8B5AA54B1631ABF4C23C142054ABA
Certificate serial: D5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4gVcAoq4tapUsWMav0wjwUIFSro.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/4gVcAoq4tapUsWMav0wjwUIFSro.mft
Manifest number: D5
Signing time: Fri 31 Jan 2025 15:25:05 +0000
Manifest this update: Fri 31 Jan 2025 15:25:05 +0000
Manifest next update: Fri 31 Jan 2025 21:25:05 +0000
Files and hashes: 1: 4gVcAoq4tapUsWMav0wjwUIFSro.crl (hash: GYRN4pq7V/ylqbOHylwsIeCA3q5K4y6L4ufsVgB0twE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2055C028AB8B5AA54B1631ABF4C23C142054ABA
Validity
Not Before: Jan 31 15:25:05 2025 GMT
Not After : Dec 20 00:30:32 2025 GMT
Subject: CN=F0A986EDF289F496B6B6C7F34A4E7A812D481159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:86:36:19:22:9f:71:ad:7a:63:bb:6d:8b:e7:
14:2a:9b:8d:34:51:1c:0e:75:78:49:2e:e6:1f:fa:
50:bb:c2:1c:21:41:42:02:70:84:ef:dc:73:16:29:
c5:f7:b9:b0:7d:85:66:c8:39:58:34:d1:fe:f8:d9:
19:e7:e7:66:9f:22:a7:e5:c4:60:c9:72:73:a9:c8:
1c:3e:74:0f:e0:be:69:09:6d:b6:73:75:46:b1:0a:
da:32:84:3e:76:c4:9e:4f:c2:a4:45:02:5d:29:cf:
e9:bf:a9:f7:24:5e:07:3f:5c:1f:ad:7d:1a:b9:ec:
b4:c9:02:8a:fa:bb:c4:53:70:98:5a:c3:76:1f:54:
a8:d4:65:a9:28:b9:af:a6:79:39:b2:78:f2:2b:35:
5f:69:07:25:b6:70:b1:bd:5d:12:79:5f:00:c9:84:
bb:1f:93:d1:a7:ac:bf:eb:78:65:3a:c6:62:f0:ae:
e5:ec:e3:d4:93:d5:8e:f2:0c:70:2b:a6:48:00:65:
dd:eb:b1:d2:3d:ef:14:d5:87:01:24:a7:fd:92:63:
b8:13:f6:f3:8b:96:3b:fb:41:29:d8:b3:d9:26:ae:
74:31:3b:56:6d:ea:dc:ec:12:5d:84:67:14:be:25:
85:e0:19:49:ad:55:c1:73:ea:e2:94:c1:9d:43:0c:
d0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A9:86:ED:F2:89:F4:96:B6:B6:C7:F3:4A:4E:7A:81:2D:48:11:59
X509v3 Authority Key Identifier:
keyid:E2:05:5C:02:8A:B8:B5:AA:54:B1:63:1A:BF:4C:23:C1:42:05:4A:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/4gVcAoq4tapUsWMav0wjwUIFSro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4gVcAoq4tapUsWMav0wjwUIFSro.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/4gVcAoq4tapUsWMav0wjwUIFSro.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:20:ad:45:3f:50:76:41:0a:37:18:03:0a:3e:da:5d:86:23:
0f:e4:b6:24:5e:b2:25:d7:a8:37:06:d1:3f:dd:94:b3:a3:1b:
4b:1d:9b:6d:2c:fb:3c:34:0b:48:72:9b:12:22:43:b5:8c:7a:
b9:7b:e5:c8:7b:7c:5f:11:99:8a:1d:6e:f3:d5:55:13:27:07:
ba:47:0f:e6:53:17:6a:05:1c:ec:e4:8f:98:87:48:bd:b6:b2:
c2:02:b0:ae:03:2d:a3:0a:4d:16:80:83:db:f5:13:6f:30:71:
be:26:67:99:a0:24:0e:ad:07:11:d1:5a:8d:cb:48:86:82:de:
82:97:28:80:3d:ca:10:7d:1f:9d:81:81:6e:21:f1:d4:be:5e:
7f:00:9e:9a:2b:44:2b:24:60:36:70:15:e3:f7:92:dc:e1:9e:
6b:60:c1:99:f3:b7:61:c8:70:a4:19:b6:75:ec:86:e3:13:fe:
1b:88:6f:d5:83:b9:f0:b0:99:72:46:43:49:9d:bd:5e:19:15:
0e:7d:43:cf:cc:26:1d:7f:c8:d3:0e:13:5e:9b:64:65:b8:5e:
0e:8d:be:c0:ad:37:a4:f1:d3:54:0c:fb:02:2d:c5:3c:34:56:
68:8e:f7:8c:d8:89:53:84:84:4e:97:7c:3c:35:d6:5f:86:e7:
9a:e3:5c:99
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICANUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTIw
NTVDMDI4QUI4QjVBQTU0QjE2MzFBQkY0QzIzQzE0MjA1NEFCQTAeFw0yNTAxMzEx
NTI1MDVaFw0yNTEyMjAwMDMwMzJaMDMxMTAvBgNVBAMTKEYwQTk4NkVERjI4OUY0
OTZCNkI2QzdGMzRBNEU3QTgxMkQ0ODExNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDphjYZIp9xrXpju22L5xQqm400URwOdXhJLuYf+lC7whwhQUIC
cITv3HMWKcX3ubB9hWbIOVg00f742Rnn52afIqflxGDJcnOpyBw+dA/gvmkJbbZz
dUaxCtoyhD52xJ5PwqRFAl0pz+m/qfckXgc/XB+tfRq57LTJAor6u8RTcJhaw3Yf
VKjUZakoua+meTmyePIrNV9pByW2cLG9XRJ5XwDJhLsfk9GnrL/reGU6xmLwruXs
49ST1Y7yDHArpkgAZd3rsdI97xTVhwEkp/2SY7gT9vOLljv7QSnYs9kmrnQxO1Zt
6tzsEl2EZxS+JYXgGUmtVcFz6uKUwZ1DDNAjAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU8KmG7fKJ9Ja2tsfzSk56gS1IEVkwHwYDVR0jBBgwFoAU4gVcAoq4tapUsWMa
v0wjwUIFSrowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0
MC80Z1ZjQW9xNHRhcFVzV01hdjB3andVSUZTcm8uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzRnVmNBb3E0dGFwVXNXTWF2MHdqd1VJRlNyby5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNDAvNGdWY0FvcTR0YXBV
c1dNYXYwd2p3VUlGU3JvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAHcgrUU/UHZBCjcYAwo+2l2GIw/ktiResiXXqDcG0T/dlLOjG0sdm20s+zw0
C0hymxIiQ7WMerl75ch7fF8RmYodbvPVVRMnB7pHD+ZTF2oFHOzkj5iHSL22ssIC
sK4DLaMKTRaAg9v1E28wcb4mZ5mgJA6tBxHRWo3LSIaC3oKXKIA9yhB9H52BgW4h
8dS+Xn8AnporRCskYDZwFeP3ktzhnmtgwZnzt2HIcKQZtnXshuMT/huIb9WDufCw
mXJGQ0mdvV4ZFQ59Q8/MJh1/yNMOE16bZGW4Xg6NvsCtN6Tx01QM+wItxTw0VmiO
94zYiVOEhE6XfDw11l+G55rjXJk=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:47:40 2025 by rpki-client