Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3348/4-kR-6TrqZzwwUrXPulh9srrlDE.mft
File: 4-kR-6TrqZzwwUrXPulh9srrlDE.mft (raw, json)
Hash identifier: mbcdxBieNhEDTAxWW5hN9rBsZD+QtpypUWNRiDTKiUQ=
Subject key identifier: 7D:ED:8F:0B:C6:93:05:A8:44:39:9E:6C:9A:29:0B:89:1A:55:4C:88
Authority key identifier: E3:E9:11:FB:A4:EB:A9:9C:F0:C1:4A:D7:3E:E9:61:F6:CA:EB:94:31
Certificate issuer: /CN=E3E911FBA4EBA99CF0C14AD73EE961F6CAEB9431
Certificate serial: 7B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4-kR-6TrqZzwwUrXPulh9srrlDE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/4-kR-6TrqZzwwUrXPulh9srrlDE.mft
Manifest number: 7B
Signing time: Fri 31 Jan 2025 15:29:39 +0000
Manifest this update: Fri 31 Jan 2025 15:29:39 +0000
Manifest next update: Fri 31 Jan 2025 21:29:39 +0000
Files and hashes: 1: 4-kR-6TrqZzwwUrXPulh9srrlDE.crl (hash: sJnmmVwKau9Fh1f8b0dGiiym5iXqEZ7yWYWEXSOxnsA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E911FBA4EBA99CF0C14AD73EE961F6CAEB9431
Validity
Not Before: Jan 31 15:29:39 2025 GMT
Not After : Jan 7 03:18:54 2026 GMT
Subject: CN=7DED8F0BC69305A844399E6C9A290B891A554C88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5a:b0:37:45:6d:c7:fa:7e:b8:cd:23:56:a0:
85:f1:7b:34:d9:5e:0f:04:3a:dc:ab:a0:39:a8:d3:
d9:c5:e9:ab:10:1f:84:19:4f:5e:2f:ed:6d:78:2b:
e3:ea:f3:69:66:36:84:1d:11:1b:d5:6b:1a:97:ef:
31:c8:2a:32:92:e5:6f:ce:06:68:77:a7:17:3d:f8:
66:e4:ab:b3:fc:4c:eb:79:43:5b:cb:b1:67:23:c2:
f5:0f:0a:47:31:37:7a:d1:fc:7e:f4:90:e9:1d:5a:
2d:4f:19:26:c0:f4:57:00:72:bc:e8:76:cb:93:fc:
a0:83:2f:24:3c:69:6d:70:b4:87:ba:69:38:3d:6d:
d9:90:c1:ec:12:33:86:7e:84:82:2c:c8:b5:c0:a4:
b5:4d:c4:67:72:93:b3:5d:c8:f4:21:9a:3b:21:9c:
11:49:67:f3:04:b0:53:00:0f:57:f2:f3:e9:99:28:
ea:b0:0a:b6:bf:38:0a:ce:82:37:fa:5a:78:a7:0e:
71:0b:99:5c:9f:d8:c8:5a:23:c8:e8:a7:96:16:7a:
6e:0a:77:2d:5b:55:2e:e8:f0:01:46:48:c3:f5:bc:
3a:51:fb:1c:13:1b:79:9a:06:63:c6:17:14:6e:32:
5e:1e:aa:05:02:c3:bc:48:30:d1:4a:7f:06:ef:15:
31:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:ED:8F:0B:C6:93:05:A8:44:39:9E:6C:9A:29:0B:89:1A:55:4C:88
X509v3 Authority Key Identifier:
keyid:E3:E9:11:FB:A4:EB:A9:9C:F0:C1:4A:D7:3E:E9:61:F6:CA:EB:94:31
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/4-kR-6TrqZzwwUrXPulh9srrlDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4-kR-6TrqZzwwUrXPulh9srrlDE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/4-kR-6TrqZzwwUrXPulh9srrlDE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:68:9d:88:f1:bf:42:7d:f4:31:b1:3f:a6:df:9c:ed:99:47:
da:55:0b:32:c7:fa:55:ce:46:5a:92:00:42:14:47:ec:8a:d8:
03:2d:b1:a7:bb:68:aa:b0:8f:61:ac:80:0a:8f:be:56:c9:2f:
f6:6f:c0:b6:49:07:07:a9:39:0a:87:7f:bc:ca:b8:87:f6:d0:
24:a4:eb:31:2c:63:c1:cf:f8:24:d4:f5:18:ce:50:d2:0d:7c:
50:a5:37:d3:3d:55:bd:37:ea:ee:ae:b7:94:ae:18:34:66:47:
93:1d:7f:f6:73:5c:fb:0a:d5:3d:2f:6e:65:8b:c2:be:b6:a6:
cc:9f:bb:ca:9b:15:44:3f:76:f8:e4:93:d0:f0:7f:d6:29:d6:
f8:ce:ad:c9:6a:6d:53:86:e9:64:7c:63:a7:fa:7c:23:b4:85:
25:0a:90:11:75:96:8f:bb:d3:f3:59:74:3b:91:da:54:67:8d:
40:0d:d1:1f:c3:b7:ed:1f:91:c9:a7:7f:8e:28:62:06:e3:94:
5b:85:36:71:d2:e4:1d:33:fe:78:f0:47:37:53:fa:59:49:26:
ca:35:68:49:1b:7e:d2:67:f9:3c:1c:86:2f:f4:85:4e:d3:3b:
7e:bb:3b:5a:a9:23:1f:3e:54:92:6c:ac:a7:03:9d:3f:f0:d6:
95:79:3f:31
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIBezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFM0U5
MTFGQkE0RUJBOTlDRjBDMTRBRDczRUU5NjFGNkNBRUI5NDMxMB4XDTI1MDEzMTE1
MjkzOVoXDTI2MDEwNzAzMTg1NFowMzExMC8GA1UEAxMoN0RFRDhGMEJDNjkzMDVB
ODQ0Mzk5RTZDOUEyOTBCODkxQTU1NEM4ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK9asDdFbcf6frjNI1aghfF7NNleDwQ63KugOajT2cXpqxAfhBlP
Xi/tbXgr4+rzaWY2hB0RG9VrGpfvMcgqMpLlb84GaHenFz34ZuSrs/xM63lDW8ux
ZyPC9Q8KRzE3etH8fvSQ6R1aLU8ZJsD0VwByvOh2y5P8oIMvJDxpbXC0h7ppOD1t
2ZDB7BIzhn6EgizItcCktU3EZ3KTs13I9CGaOyGcEUln8wSwUwAPV/Lz6Zko6rAK
tr84Cs6CN/paeKcOcQuZXJ/YyFojyOinlhZ6bgp3LVtVLujwAUZIw/W8OlH7HBMb
eZoGY8YXFG4yXh6qBQLDvEgw0Up/Bu8VMRMCAwEAAaOCAgwwggIIMB0GA1UdDgQW
BBR97Y8LxpMFqEQ5nmyaKQuJGlVMiDAfBgNVHSMEGDAWgBTj6RH7pOupnPDBStc+
6WH2yuuUMTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzQ4
LzQta1ItNlRycVp6d3dVclhQdWxoOXNycmxERS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNC1rUi02VHJxWnp3d1VyWFB1bGg5c3JybERFLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0OC80LWtSLTZUcnFaend3
VXJYUHVsaDlzcnJsREUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIWidiPG/Qn30MbE/pt+c7ZlH2lULMsf6Vc5GWpIAQhRH7IrYAy2xp7toqrCP
YayACo++Vskv9m/AtkkHB6k5Cod/vMq4h/bQJKTrMSxjwc/4JNT1GM5Q0g18UKU3
0z1VvTfq7q63lK4YNGZHkx1/9nNc+wrVPS9uZYvCvramzJ+7ypsVRD92+OST0PB/
1inW+M6tyWptU4bpZHxjp/p8I7SFJQqQEXWWj7vT81l0O5HaVGeNQA3RH8O37R+R
yad/jihiBuOUW4U2cdLkHTP+ePBHN1P6WUkmyjVoSRt+0mf5PByGL/SFTtM7frs7
WqkjHz5UkmyspwOdP/DWlXk/MQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:13:08 2025 by rpki-client