Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/510/aKDPmms080wyohTyM89mbhBEwAI.mft
File: aKDPmms080wyohTyM89mbhBEwAI.mft (raw, json)
Hash identifier: 7LjG89fys0zQYVRKGTGdswfjm53zcnu0BiGByt++kmc=
Subject key identifier: 0C:14:A9:B1:57:FC:93:E5:61:6B:7E:23:3A:B1:86:F1:91:D6:6B:9C
Authority key identifier: 68:A0:CF:9A:6B:34:F3:4C:32:A2:14:F2:33:CF:66:6E:10:44:C0:02
Certificate issuer: /CN=68A0CF9A6B34F34C32A214F233CF666E1044C002
Certificate serial: 12EC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aKDPmms080wyohTyM89mbhBEwAI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/aKDPmms080wyohTyM89mbhBEwAI.mft
Manifest number: 12EC
Signing time: Fri 31 Jan 2025 15:26:53 +0000
Manifest this update: Fri 31 Jan 2025 15:26:53 +0000
Manifest next update: Fri 31 Jan 2025 21:26:53 +0000
Files and hashes: 1: aKDPmms080wyohTyM89mbhBEwAI.crl (hash: FVS/UO9BT2CVQ688HJZe164Gn98H29B83WayREnlb58=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4844 (0x12ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68A0CF9A6B34F34C32A214F233CF666E1044C002
Validity
Not Before: Jan 31 15:26:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0C14A9B157FC93E5616B7E233AB186F191D66B9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:be:03:98:94:a5:bd:2b:9e:32:47:e9:84:41:
2d:25:14:18:42:3f:b9:3e:c8:8a:d5:03:3e:12:26:
ef:78:d6:f5:dc:ee:12:42:a0:bd:3b:67:3b:ff:9c:
de:9b:59:8e:dc:c8:d8:97:c5:73:93:39:3b:5b:8a:
a1:fe:13:47:76:82:b8:01:d8:59:39:30:bd:a8:74:
9f:a1:08:18:1a:fc:95:2d:ce:3a:5c:b1:3f:14:34:
e1:03:00:55:e1:26:a4:e3:d1:23:c9:63:21:2f:62:
cf:c1:e7:51:56:18:76:a8:2a:b4:86:68:d7:0b:99:
64:71:63:3f:33:42:56:16:ad:70:4c:9a:c5:18:8c:
af:9e:14:28:fb:d0:8d:5e:c9:42:30:7c:2f:d4:44:
31:b0:e8:65:2e:d0:44:ff:7c:7d:9b:16:93:16:16:
29:20:59:4b:f7:60:66:da:95:63:4b:97:1e:63:b8:
5c:3f:f2:8e:2e:26:73:6d:b1:2f:c5:12:d3:7c:c4:
e4:30:0f:6c:61:dd:71:bd:9f:e1:9e:c2:d9:08:f6:
d1:a2:67:dc:a7:89:b6:7b:f1:2e:45:87:d9:74:1d:
8b:96:0b:57:91:f7:46:01:e7:7a:ce:48:7a:50:5d:
2e:72:f1:7e:e3:ca:e7:ec:cb:92:6a:1d:56:0d:a3:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:14:A9:B1:57:FC:93:E5:61:6B:7E:23:3A:B1:86:F1:91:D6:6B:9C
X509v3 Authority Key Identifier:
keyid:68:A0:CF:9A:6B:34:F3:4C:32:A2:14:F2:33:CF:66:6E:10:44:C0:02
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/aKDPmms080wyohTyM89mbhBEwAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aKDPmms080wyohTyM89mbhBEwAI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/aKDPmms080wyohTyM89mbhBEwAI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c9:2b:ea:c8:36:3c:12:1e:93:03:e4:b6:67:c5:70:c5:3d:
cd:a0:68:ed:8d:43:b0:22:a4:42:21:49:fc:05:fa:5b:c9:c4:
a8:62:24:dc:e4:ab:10:f6:8b:f8:b6:cb:d1:30:78:a3:dc:c5:
0e:31:2a:aa:8f:b5:d1:b9:bc:c4:4e:71:d6:cc:b2:99:5b:a5:
1d:97:d8:0d:2d:1b:2d:cc:3e:33:d9:58:4f:02:3c:c5:4f:16:
c7:d4:9e:3f:f4:dc:65:6b:ac:a8:5f:b3:83:b1:48:ea:69:bf:
43:d3:2a:ef:83:e8:4a:01:4d:6b:b9:87:01:e1:7d:ab:64:55:
d1:e9:fd:94:45:ef:4c:57:d4:7d:a9:b0:8d:14:4e:6b:4e:0e:
8a:7c:e0:81:f6:f6:84:8a:ba:a9:a7:49:b5:ba:bd:9c:ce:42:
b1:fd:2a:2a:2b:62:96:45:07:8f:bf:a0:e3:2b:6a:db:26:3c:
33:5f:ac:e8:f8:1d:f1:a1:c1:78:7e:8d:08:fc:66:f6:54:c6:
75:38:f6:68:d3:20:b4:6c:a1:60:b1:60:84:40:0c:fd:6f:b4:
bb:3d:31:3a:85:fe:66:3d:57:63:cc:e7:7d:a5:cf:7e:82:4e:
d6:f1:21:88:7b:18:d7:3c:05:e6:97:27:02:19:0f:54:a7:3d:
9d:e5:7d:7b
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICEuwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjhB
MENGOUE2QjM0RjM0QzMyQTIxNEYyMzNDRjY2NkUxMDQ0QzAwMjAeFw0yNTAxMzEx
NTI2NTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDBDMTRBOUIxNTdGQzkz
RTU2MTZCN0UyMzNBQjE4NkYxOTFENjZCOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDavgOYlKW9K54yR+mEQS0lFBhCP7k+yIrVAz4SJu941vXc7hJC
oL07Zzv/nN6bWY7cyNiXxXOTOTtbiqH+E0d2grgB2Fk5ML2odJ+hCBga/JUtzjpc
sT8UNOEDAFXhJqTj0SPJYyEvYs/B51FWGHaoKrSGaNcLmWRxYz8zQlYWrXBMmsUY
jK+eFCj70I1eyUIwfC/URDGw6GUu0ET/fH2bFpMWFikgWUv3YGbalWNLlx5juFw/
8o4uJnNtsS/FEtN8xOQwD2xh3XG9n+GewtkI9tGiZ9ynibZ78S5Fh9l0HYuWC1eR
90YB53rOSHpQXS5y8X7jyufsy5JqHVYNo3u7AgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUDBSpsVf8k+Vha34jOrGG8ZHWa5wwHwYDVR0jBBgwFoAUaKDPmms080wyohTy
M89mbhBEwAIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEw
L2FLRFBtbXMwODB3eW9oVHlNODltYmhCRXdBSS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvYUtEUG1tczA4MHd5b2hUeU04OW1iaEJFd0FJLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEwL2FLRFBtbXMwODB3eW9o
VHlNODltYmhCRXdBSS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCbySvqyDY8Eh6TA+S2Z8VwxT3NoGjtjUOwIqRCIUn8BfpbycSoYiTc5KsQ9ov4
tsvRMHij3MUOMSqqj7XRubzETnHWzLKZW6Udl9gNLRstzD4z2VhPAjzFTxbH1J4/
9Nxla6yoX7ODsUjqab9D0yrvg+hKAU1ruYcB4X2rZFXR6f2URe9MV9R9qbCNFE5r
Tg6KfOCB9vaEirqpp0m1ur2czkKx/SoqK2KWRQePv6DjK2rbJjwzX6zo+B3xocF4
fo0I/Gb2VMZ1OPZo0yC0bKFgsWCEQAz9b7S7PTE6hf5mPVdjzOd9pc9+gk7W8SGI
exjXPAXmlycCGQ9Upz2d5X17
-----END CERTIFICATE-----
Generated at Wed Apr 30 13:08:19 2025 by rpki-client