Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/598/y7rJhnWguq8fpbwyxkpu3MS8nsE.mft
File: y7rJhnWguq8fpbwyxkpu3MS8nsE.mft (raw, json)
Hash identifier: erVcac8g4tgdUr28qZWHuHi9IYiL8wmMXhd0/OacASU=
Subject key identifier: 1F:56:84:2E:F1:60:AD:58:E2:A5:FA:D6:9C:77:81:62:46:5F:D1:49
Authority key identifier: CB:BA:C9:86:75:A0:BA:AF:1F:A5:BC:32:C6:4A:6E:DC:C4:BC:9E:C1
Certificate issuer: /CN=CBBAC98675A0BAAF1FA5BC32C64A6EDCC4BC9EC1
Certificate serial: 1BFE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/y7rJhnWguq8fpbwyxkpu3MS8nsE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/598/y7rJhnWguq8fpbwyxkpu3MS8nsE.mft
Manifest number: 1BFE
Signing time: Fri 31 Jan 2025 15:25:36 +0000
Manifest this update: Fri 31 Jan 2025 15:25:36 +0000
Manifest next update: Fri 31 Jan 2025 21:25:36 +0000
Files and hashes: 1: y7rJhnWguq8fpbwyxkpu3MS8nsE.crl (hash: 6S0+OoEoKNEKjgzs29Og/MItj5hfVa9LBkTNTz6opvI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7166 (0x1bfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBBAC98675A0BAAF1FA5BC32C64A6EDCC4BC9EC1
Validity
Not Before: Jan 31 15:25:36 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1F56842EF160AD58E2A5FAD69C778162465FD149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4c:81:c0:d8:05:09:40:2f:6e:c4:09:d6:ca:
ee:d4:d7:3e:af:39:66:9d:4e:56:6b:1e:46:9b:8b:
04:b5:f2:b2:22:dd:30:a0:08:0a:20:f9:a5:09:02:
13:47:8f:0e:7f:da:a4:75:5e:66:18:73:9f:81:bb:
63:27:91:8e:d6:67:64:47:a6:38:31:66:0f:4b:58:
8c:1c:3b:96:11:09:77:1d:98:50:d1:38:f9:39:da:
1e:a0:53:cb:44:29:10:10:b4:d4:56:05:fe:e7:c5:
1d:bf:9f:ac:52:0a:ef:50:74:c7:ab:e8:53:35:29:
00:dd:74:e8:15:bd:d8:70:c5:36:e9:f4:8c:85:78:
40:e2:e0:da:d3:ca:8a:6c:cf:7d:34:a1:3d:1e:7c:
51:4b:ef:ce:00:ee:d3:3c:e5:6d:9c:d8:59:37:a8:
61:c1:68:9d:d9:ba:83:39:e0:53:bd:e7:ac:95:38:
43:03:61:8d:a2:41:9e:3b:86:57:41:1b:4f:65:62:
bc:04:3b:28:54:73:d2:1e:71:63:9a:ba:7f:b3:16:
53:7e:56:7d:9d:e9:ca:e5:18:7c:0d:97:69:d5:aa:
73:91:5e:29:92:1e:27:0b:e0:00:4e:df:b0:a7:72:
f5:a9:4e:a9:1b:77:db:f2:cd:5a:5f:5c:67:67:a6:
ce:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:56:84:2E:F1:60:AD:58:E2:A5:FA:D6:9C:77:81:62:46:5F:D1:49
X509v3 Authority Key Identifier:
keyid:CB:BA:C9:86:75:A0:BA:AF:1F:A5:BC:32:C6:4A:6E:DC:C4:BC:9E:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/598/y7rJhnWguq8fpbwyxkpu3MS8nsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/y7rJhnWguq8fpbwyxkpu3MS8nsE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/598/y7rJhnWguq8fpbwyxkpu3MS8nsE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:18:02:3f:7a:8b:15:65:9b:6c:25:7a:4c:14:1e:7d:6a:27:
35:56:fd:03:b6:40:d8:cc:62:52:f9:e3:04:72:09:94:8f:5d:
44:f5:da:f3:7f:89:58:f7:5b:e6:d5:46:c1:80:bb:3d:88:9b:
11:39:ed:77:40:85:a0:c9:e2:f5:5b:60:73:41:31:7c:4e:d2:
ce:c3:0b:0f:6c:da:3b:47:29:ef:ce:95:70:20:d2:55:f8:b0:
77:0d:e0:be:ad:64:de:dc:98:60:ff:2d:f4:74:ba:ca:d3:28:
5b:4b:99:dc:cf:2f:dd:7f:ac:f6:3c:7c:f7:27:80:ef:e8:77:
08:9e:7e:a2:d7:67:63:3e:f6:ab:ba:14:48:05:5b:01:75:52:
eb:d1:8e:57:43:92:0d:c1:33:40:e6:7b:7c:f4:9e:7d:fc:13:
ed:3a:9c:30:ca:91:8f:8d:86:96:7f:7e:81:4a:e4:06:08:de:
5d:31:59:84:d6:9d:1e:ff:24:93:72:ce:78:40:fb:25:68:04:
73:a8:9c:3c:dc:5c:b4:b2:7c:1b:52:63:82:ef:9d:d3:98:57:
1a:c8:c5:1d:29:f3:82:f4:61:23:1b:e2:75:e3:73:3a:b6:71:
57:ba:24:ac:2f:9b:7e:bc:58:9c:81:ab:90:60:57:3e:26:fb:
a8:97:e4:d6
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICG/4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0JC
QUM5ODY3NUEwQkFBRjFGQTVCQzMyQzY0QTZFRENDNEJDOUVDMTAeFw0yNTAxMzEx
NTI1MzZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDFGNTY4NDJFRjE2MEFE
NThFMkE1RkFENjlDNzc4MTYyNDY1RkQxNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHTIHA2AUJQC9uxAnWyu7U1z6vOWadTlZrHkabiwS18rIi3TCg
CAog+aUJAhNHjw5/2qR1XmYYc5+Bu2MnkY7WZ2RHpjgxZg9LWIwcO5YRCXcdmFDR
OPk52h6gU8tEKRAQtNRWBf7nxR2/n6xSCu9QdMer6FM1KQDddOgVvdhwxTbp9IyF
eEDi4NrTyopsz300oT0efFFL784A7tM85W2c2Fk3qGHBaJ3ZuoM54FO956yVOEMD
YY2iQZ47hldBG09lYrwEOyhUc9IecWOaun+zFlN+Vn2d6crlGHwNl2nVqnORXimS
HicL4ABO37CncvWpTqkbd9vyzVpfXGdnps6LAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUH1aELvFgrVjipfrWnHeBYkZf0UkwHwYDVR0jBBgwFoAUy7rJhnWguq8fpbwy
xkpu3MS8nsEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTk4
L3k3ckpobldndXE4ZnBid3l4a3B1M01TOG5zRS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveTdySmhuV2d1cThmcGJ3eXhrcHUzTVM4bnNFLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTk4L3k3ckpobldndXE4ZnBi
d3l4a3B1M01TOG5zRS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAZGAI/eosVZZtsJXpMFB59aic1Vv0DtkDYzGJS+eMEcgmUj11E9drzf4lY91vm
1UbBgLs9iJsROe13QIWgyeL1W2BzQTF8TtLOwwsPbNo7RynvzpVwINJV+LB3DeC+
rWTe3Jhg/y30dLrK0yhbS5nczy/df6z2PHz3J4Dv6HcInn6i12djPvaruhRIBVsB
dVLr0Y5XQ5INwTNA5nt89J59/BPtOpwwypGPjYaWf36BSuQGCN5dMVmE1p0e/yST
cs54QPslaARzqJw83Fy0snwbUmOC753TmFcayMUdKfOC9GEjG+J143M6tnFXuiSs
L5t+vFicgauQYFc+Jvuol+TW
-----END CERTIFICATE-----
Generated at Sun Apr 27 21:24:44 2025 by rpki-client