Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/497/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.mft
File: Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.mft (raw, json)
Hash identifier: 7Lmm+zy6Nga/+0D6hHw0ZB0TE0UhTLjC64/bEUe7rXc=
Subject key identifier: 6F:FA:CD:7C:0D:1C:23:69:3C:22:25:6D:B8:AF:B2:DE:DC:36:EB:75
Authority key identifier: 46:F8:34:3D:CD:AD:3A:AC:40:85:60:49:2C:21:B5:9D:76:2B:C4:56
Certificate issuer: /CN=46F8343DCDAD3AAC408560492C21B59D762BC456
Certificate serial: 1C2D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.mft
Manifest number: 1C22
Signing time: Fri 31 Jan 2025 15:25:59 +0000
Manifest this update: Fri 31 Jan 2025 15:25:59 +0000
Manifest next update: Fri 31 Jan 2025 21:25:59 +0000
Files and hashes: 1: Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.crl (hash: yjT2YET7XaYz6bWEpBtzyErQzgUMn7Vc7NucC2Y86Oc=)
2: iek1MXEBlWdmapPhIY_db4hE_nw.roa (hash: T7/0qiWSi3qRHPuAOTmMfdsbThcG2N5WBZt8W2VUrcw=)
3: zfSe_iql4Q8Zvjm6B18MpmZPol4.roa (hash: bDo0RYNVzgOCrUT9k/28io0lTz3YF0dVaV4I+1scPtU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7213 (0x1c2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46F8343DCDAD3AAC408560492C21B59D762BC456
Validity
Not Before: Jan 31 15:25:59 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6FFACD7C0D1C23693C22256DB8AFB2DEDC36EB75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:be:c1:71:53:38:1a:90:ab:b1:98:a8:98:08:
db:a8:5e:4e:ce:f6:b4:9e:e7:e3:d4:c4:63:5a:51:
33:31:3b:9d:51:08:4f:7a:42:e1:b7:52:87:ed:b8:
dd:6a:72:9b:fd:7c:4b:ff:8c:36:2f:ed:c8:11:31:
d4:ec:18:05:eb:ed:03:6a:96:be:af:43:f4:b8:bf:
4e:d3:2b:1d:11:9b:66:2b:f0:2a:7a:7b:c9:a6:74:
d8:10:30:5a:6a:83:92:0f:9e:3b:1d:04:bf:5e:23:
51:71:2d:36:ec:a8:bf:07:bb:21:92:5e:33:e8:e6:
7e:60:e6:33:15:74:73:10:6c:98:f4:51:4f:81:74:
8d:f7:41:97:39:5c:89:fc:a8:b9:1c:41:f2:7b:99:
13:e9:b8:44:54:e9:e8:99:58:3d:8a:4f:c2:c4:e6:
0e:c9:b4:a6:17:6f:47:18:5f:ed:ba:ce:35:d4:f2:
90:18:b2:12:eb:b9:aa:57:3b:8f:48:14:c8:1e:c8:
b8:7f:0c:7f:17:bd:ec:58:4b:03:6b:52:18:04:52:
a1:cd:41:cb:4b:9b:3b:fa:26:3c:45:d1:45:40:83:
23:50:b7:01:fa:d5:86:79:c7:da:a7:12:a9:59:c8:
d2:09:fe:75:34:4f:41:5d:3e:31:0f:48:d6:39:75:
0e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FA:CD:7C:0D:1C:23:69:3C:22:25:6D:B8:AF:B2:DE:DC:36:EB:75
X509v3 Authority Key Identifier:
keyid:46:F8:34:3D:CD:AD:3A:AC:40:85:60:49:2C:21:B5:9D:76:2B:C4:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:21:5c:67:a9:16:af:e2:e7:6e:5c:56:2d:b4:05:97:66:86:
ed:de:aa:10:b1:ab:26:d9:9a:4e:f1:d0:d9:fa:fd:2f:69:8c:
60:13:e0:01:14:81:f7:b5:63:7e:1f:6b:6a:e1:5a:b8:cd:69:
8e:b2:75:7d:67:ff:e8:88:a5:9a:51:ec:c5:be:7c:de:4e:45:
21:85:e7:e6:68:e6:c5:4b:7a:b6:63:e5:ad:0a:b6:99:c6:e1:
95:93:a8:46:3c:75:0c:24:29:16:6c:3d:83:67:ca:86:95:a6:
f9:e9:9c:13:4e:7d:ea:21:f1:bd:ec:07:e6:c3:e1:03:60:f6:
28:5f:34:fa:c3:f4:46:8f:16:fe:70:13:8c:81:de:36:b7:c7:
dc:c1:04:58:95:51:6e:a8:6f:88:fd:ed:fa:15:26:f4:22:1d:
14:9e:4c:5c:92:53:4c:8d:91:46:51:93:d4:5b:59:ac:2a:77:
b7:61:99:29:c2:75:76:ed:f9:1a:95:ce:41:21:36:4b:a4:d0:
06:5e:4f:e8:1b:07:72:7c:70:7f:af:e7:24:7b:c2:2f:0e:6c:
f8:da:4d:9b:77:18:9a:5f:bd:47:04:d9:21:65:99:f3:d1:10:
d2:60:0a:96:7b:02:61:d1:33:0b:bb:af:b4:73:77:90:4f:ca:
8d:68:f8:0b
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICHC0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDZG
ODM0M0RDREFEM0FBQzQwODU2MDQ5MkMyMUI1OUQ3NjJCQzQ1NjAeFw0yNTAxMzEx
NTI1NTlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDZGRkFDRDdDMEQxQzIz
NjkzQzIyMjU2REI4QUZCMkRFREMzNkVCNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPvsFxUzgakKuxmKiYCNuoXk7O9rSe5+PUxGNaUTMxO51RCE96
QuG3UoftuN1qcpv9fEv/jDYv7cgRMdTsGAXr7QNqlr6vQ/S4v07TKx0Rm2Yr8Cp6
e8mmdNgQMFpqg5IPnjsdBL9eI1FxLTbsqL8HuyGSXjPo5n5g5jMVdHMQbJj0UU+B
dI33QZc5XIn8qLkcQfJ7mRPpuERU6eiZWD2KT8LE5g7JtKYXb0cYX+26zjXU8pAY
shLruapXO49IFMgeyLh/DH8XvexYSwNrUhgEUqHNQctLmzv6JjxF0UVAgyNQtwH6
1YZ5x9qnEqlZyNIJ/nU0T0FdPjEPSNY5dQ41AgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUb/rNfA0cI2k8IiVtuK+y3tw263UwHwYDVR0jBBgwFoAURvg0Pc2tOqxAhWBJ
LCG1nXYrxFYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDk3
L1J2ZzBQYzJ0T3F4QWhXQkpMQ0cxblhZcnhGWS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvUnZnMFBjMnRPcXhBaFdCSkxDRzFuWFlyeEZZLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDk3L1J2ZzBQYzJ0T3F4QWhX
QkpMQ0cxblhZcnhGWS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBjIVxnqRav4uduXFYttAWXZobt3qoQsasm2ZpO8dDZ+v0vaYxgE+ABFIH3tWN+
H2tq4Vq4zWmOsnV9Z//oiKWaUezFvnzeTkUhhefmaObFS3q2Y+WtCraZxuGVk6hG
PHUMJCkWbD2DZ8qGlab56ZwTTn3qIfG97Afmw+EDYPYoXzT6w/RGjxb+cBOMgd42
t8fcwQRYlVFuqG+I/e36FSb0Ih0UnkxcklNMjZFGUZPUW1msKne3YZkpwnV27fka
lc5BITZLpNAGXk/oGwdyfHB/r+cke8IvDmz42k2bdxiaX71HBNkhZZnz0RDSYAqW
ewJh0TMLu6+0c3eQT8qNaPgL
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:55:23 2025 by rpki-client