Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/587/2hcs9oXXoU8egRnVmgEv4GHAblE.mft
File: 2hcs9oXXoU8egRnVmgEv4GHAblE.mft (raw, json)
Hash identifier: HZQOtBuo1dkFRsbO7z+lHFf8bW6m3HxeMtuXMYQiYvE=
Subject key identifier: A1:44:12:44:32:89:FF:6A:88:40:25:7C:69:CC:8F:1C:BD:C6:1D:FA
Authority key identifier: DA:17:2C:F6:85:D7:A1:4F:1E:81:19:D5:9A:01:2F:E0:61:C0:6E:51
Certificate issuer: /CN=DA172CF685D7A14F1E8119D59A012FE061C06E51
Certificate serial: 1CC2
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2hcs9oXXoU8egRnVmgEv4GHAblE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/2hcs9oXXoU8egRnVmgEv4GHAblE.mft
Manifest number: 1CC2
Signing time: Fri 31 Jan 2025 15:28:14 +0000
Manifest this update: Fri 31 Jan 2025 15:28:14 +0000
Manifest next update: Fri 31 Jan 2025 21:28:14 +0000
Files and hashes: 1: 2hcs9oXXoU8egRnVmgEv4GHAblE.crl (hash: GvBPO4OcEVKRPiFqXD7SIzc4cNJ8OTZKr8JMPIMKyk4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7362 (0x1cc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA172CF685D7A14F1E8119D59A012FE061C06E51
Validity
Not Before: Jan 31 15:28:14 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A14412443289FF6A8840257C69CC8F1CBDC61DFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:fc:db:c0:7d:9c:8e:a7:df:5d:1b:49:fd:
08:8d:a0:1b:06:86:cb:1c:b9:e7:00:72:bd:1a:73:
94:98:01:66:a5:ab:68:96:69:cb:ab:fc:be:c2:93:
59:a9:e5:2b:b0:19:f4:33:0c:a6:db:77:ba:a5:56:
0d:da:d6:f5:04:ea:ff:48:10:69:99:e9:78:43:29:
56:01:bd:0d:90:26:43:1e:6d:b5:0a:90:73:12:4b:
35:4e:43:75:8e:83:7f:c5:db:0f:72:09:5d:90:9b:
83:c9:f6:0d:8b:1e:41:68:db:9c:8e:10:0e:1f:3a:
1a:d9:62:a2:40:29:2e:5b:54:08:53:80:d2:6b:1f:
c3:96:cb:b9:8b:5d:3b:8a:5f:c9:55:42:02:cf:7a:
5a:d9:04:f6:cd:a9:22:10:0e:30:51:28:06:25:02:
bb:65:38:04:0a:b5:00:b5:60:d5:d2:62:0c:92:72:
b5:9f:32:8a:ea:54:cc:d2:b0:e7:f5:c8:51:cc:db:
15:6f:08:be:19:aa:4b:5b:0e:38:18:d2:e6:4e:04:
59:23:a4:01:0c:98:bd:94:5c:f0:59:aa:d7:d7:0f:
72:80:01:8c:09:0a:88:7c:72:b6:b7:a4:44:9a:70:
cc:8e:5a:bf:67:32:49:1c:4c:58:9a:1d:2c:69:20:
c6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:44:12:44:32:89:FF:6A:88:40:25:7C:69:CC:8F:1C:BD:C6:1D:FA
X509v3 Authority Key Identifier:
keyid:DA:17:2C:F6:85:D7:A1:4F:1E:81:19:D5:9A:01:2F:E0:61:C0:6E:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/2hcs9oXXoU8egRnVmgEv4GHAblE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2hcs9oXXoU8egRnVmgEv4GHAblE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/2hcs9oXXoU8egRnVmgEv4GHAblE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:f4:d4:c9:ba:bb:cb:0c:b5:e9:12:81:76:4f:61:77:f5:92:
44:2c:80:d4:49:46:d7:b6:55:c0:67:1d:ba:94:52:b6:95:af:
60:98:11:9d:a6:09:9a:ce:b3:b9:84:78:4f:8b:a2:19:7d:31:
ff:b2:e7:88:fc:92:d1:f7:ba:68:d6:2b:c0:55:e5:76:1f:d9:
7a:3d:e5:ef:10:a4:eb:55:f0:98:07:69:2b:a3:16:64:cb:2f:
df:45:4e:3f:61:48:9f:c4:6f:0b:c1:ab:93:23:52:5d:c2:23:
86:9e:37:52:d7:25:c6:3f:d4:0b:7f:79:f3:c6:42:80:fc:24:
fc:1b:5b:cd:f8:6d:ba:f5:2b:e7:bd:2c:61:37:2f:c7:7a:36:
6d:15:09:2a:4d:43:5b:16:96:34:6c:af:96:1f:10:31:a3:91:
7d:ab:8a:30:96:88:db:dc:b9:74:49:43:1b:a9:a9:36:e4:31:
d0:ba:ce:f8:4f:7d:76:3a:3f:84:ef:6c:c0:63:7e:bc:0d:ad:
8b:c8:b5:e5:f8:fb:6f:cb:71:00:fc:b7:bb:78:ca:53:76:d9:
cb:f9:bb:9c:ae:5c:65:a7:bc:a8:82:e4:4c:17:2c:11:30:05:
9b:4d:89:1b:80:43:21:75:09:54:e7:78:b4:48:9a:16:e6:01:
7c:c6:18:7c
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICHMIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREEx
NzJDRjY4NUQ3QTE0RjFFODExOUQ1OUEwMTJGRTA2MUMwNkU1MTAeFw0yNTAxMzEx
NTI4MTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEExNDQxMjQ0MzI4OUZG
NkE4ODQwMjU3QzY5Q0M4RjFDQkRDNjFERkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNRfzbwH2cjqffXRtJ/QiNoBsGhsscuecAcr0ac5SYAWalq2iW
acur/L7Ck1mp5SuwGfQzDKbbd7qlVg3a1vUE6v9IEGmZ6XhDKVYBvQ2QJkMebbUK
kHMSSzVOQ3WOg3/F2w9yCV2Qm4PJ9g2LHkFo25yOEA4fOhrZYqJAKS5bVAhTgNJr
H8OWy7mLXTuKX8lVQgLPelrZBPbNqSIQDjBRKAYlArtlOAQKtQC1YNXSYgyScrWf
MorqVMzSsOf1yFHM2xVvCL4ZqktbDjgY0uZOBFkjpAEMmL2UXPBZqtfXD3KAAYwJ
Coh8cra3pESacMyOWr9nMkkcTFiaHSxpIMZ9AgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUoUQSRDKJ/2qIQCV8acyPHL3GHfowHwYDVR0jBBgwFoAU2hcs9oXXoU8egRnV
mgEv4GHAblEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTg3
LzJoY3M5b1hYb1U4ZWdSblZtZ0V2NEdIQWJsRS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvMmhjczlvWFhvVThlZ1JuVm1nRXY0R0hBYmxFLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTg3LzJoY3M5b1hYb1U4ZWdS
blZtZ0V2NEdIQWJsRS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCZ9NTJurvLDLXpEoF2T2F39ZJELIDUSUbXtlXAZx26lFK2la9gmBGdpgmazrO5
hHhPi6IZfTH/sueI/JLR97po1ivAVeV2H9l6PeXvEKTrVfCYB2kroxZkyy/fRU4/
YUifxG8LwauTI1JdwiOGnjdS1yXGP9QLf3nzxkKA/CT8G1vN+G269SvnvSxhNy/H
ejZtFQkqTUNbFpY0bK+WHxAxo5F9q4owlojb3Ll0SUMbqak25DHQus74T312Oj+E
72zAY368Da2LyLXl+Ptvy3EA/Le7eMpTdtnL+bucrlxlp7yoguRMFywRMAWbTYkb
gEMhdQlU53i0SJoW5gF8xhh8
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:59:56 2025 by rpki-client