Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/767/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.mft
File: zIz3JvIyMpkQh0TWkwvvGNZ3RF0.mft (raw, json)
Hash identifier: UyLtP/f0RINBaLUjtOI3JfZ/ncnWrFCWkAkUFYvw5BQ=
Subject key identifier: 32:60:A4:7F:05:31:7A:0E:5D:CA:C6:FD:9B:82:46:AE:0C:C9:8E:B6
Authority key identifier: CC:8C:F7:26:F2:32:32:99:10:87:44:D6:93:0B:EF:18:D6:77:44:5D
Certificate issuer: /CN=CC8CF726F2323299108744D6930BEF18D677445D
Certificate serial: 1648
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.mft
Manifest number: 163F
Signing time: Fri 31 Jan 2025 15:26:44 +0000
Manifest this update: Fri 31 Jan 2025 15:26:44 +0000
Manifest next update: Fri 31 Jan 2025 21:26:44 +0000
Files and hashes: 1: 1H_dEmlcHR9WrgXuUkgyw7TC6PI.roa (hash: PYMpJ9QJ790iCzSPPg6odQyh509VNCs3J8a0L4Xr8Vs=)
2: KzxPrZsNmlG9fHcuHEAELhTildI.roa (hash: lKTisdtJ9wopA8c02OL0FrfptSw09OytCXCrsSw4ZJ4=)
3: zIz3JvIyMpkQh0TWkwvvGNZ3RF0.crl (hash: 4hMKWg8bfO+AQVrtDllSBWJOt/CpZwc8grG7pJCSO0w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5704 (0x1648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC8CF726F2323299108744D6930BEF18D677445D
Validity
Not Before: Jan 31 15:26:44 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3260A47F05317A0E5DCAC6FD9B8246AE0CC98EB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d0:16:1d:f1:24:d5:4f:31:8e:f6:7f:b2:0a:
0f:6a:55:ce:e2:ef:43:77:69:91:f8:8b:ba:64:ee:
6d:13:b0:e7:93:c7:74:0d:f4:f1:71:1a:3d:e5:a5:
ed:c7:68:4f:ae:56:da:ea:2d:7e:d0:4d:9f:df:9d:
66:c6:1e:3c:ac:6f:db:d7:37:c1:f0:fa:bc:a4:c8:
06:81:2c:b6:57:52:91:23:64:28:9c:16:2a:bc:24:
76:c5:f4:0e:2c:6c:a3:86:16:d4:92:d0:a3:97:aa:
94:c8:0b:63:bd:3d:16:90:4d:95:47:3a:d2:c2:1e:
b7:08:6e:fc:cc:6a:3f:d0:1b:29:06:6d:ea:c3:86:
11:ae:18:33:d8:2c:e8:85:80:c1:9c:06:84:86:f7:
a4:0a:6c:33:34:8a:31:f2:00:9c:36:83:1a:93:0d:
fb:96:60:d0:6a:de:ce:17:77:91:ac:84:67:67:98:
7b:e3:dd:41:37:fb:f8:13:b0:5a:4e:aa:3c:e1:a5:
85:66:5b:71:c6:c9:7f:05:ee:54:da:97:e2:58:e8:
50:eb:c4:8c:be:28:dd:c3:5a:a3:91:5d:24:99:45:
41:ef:0a:92:84:30:bc:7c:7b:67:0e:e6:06:ba:16:
53:2e:31:76:cb:54:43:69:8e:2d:e4:b1:31:02:16:
b6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:60:A4:7F:05:31:7A:0E:5D:CA:C6:FD:9B:82:46:AE:0C:C9:8E:B6
X509v3 Authority Key Identifier:
keyid:CC:8C:F7:26:F2:32:32:99:10:87:44:D6:93:0B:EF:18:D6:77:44:5D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a8:bc:eb:d6:db:6d:35:23:70:ed:d0:fd:96:2e:c0:7f:11:
d6:8a:8f:53:8b:b6:59:ad:74:e0:8d:cf:af:23:5f:d5:56:b4:
ff:5b:f8:ec:c4:86:2a:d1:fd:76:b5:33:fc:41:3f:cb:1e:00:
40:04:a8:2d:b7:eb:42:7b:26:6e:c8:a9:65:a1:5f:65:b8:d4:
63:2b:7f:4a:ac:79:f2:38:3d:74:2c:f7:1b:8e:fd:15:cd:be:
db:24:f0:50:d6:92:40:12:a1:d9:7e:0b:e7:86:80:77:97:1a:
47:d7:c5:2a:7d:30:ee:93:17:2f:dc:90:3e:7c:2b:cc:0c:29:
24:76:51:4a:11:cf:21:fe:49:e1:53:22:c5:98:61:0e:7a:9f:
a5:38:86:11:be:aa:b0:e4:10:29:26:e7:bd:7f:a1:db:d0:ab:
be:dc:5f:2d:ee:8c:f5:45:53:96:47:3a:a2:76:93:89:44:fc:
af:ed:71:f0:d9:85:d6:90:c3:fe:ab:b8:fd:22:de:56:23:76:
49:31:a8:d7:17:8f:de:da:94:79:69:a3:9a:ee:63:e8:1d:71:
a3:f2:51:c7:55:67:88:3c:73:4e:7b:ac:1d:8e:d2:88:97:04:
2b:e8:0f:90:0c:6a:26:55:23:46:19:d2:13:ae:96:1f:9e:a1:
94:3c:09:b8
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICFkgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0M4
Q0Y3MjZGMjMyMzI5OTEwODc0NEQ2OTMwQkVGMThENjc3NDQ1RDAeFw0yNTAxMzEx
NTI2NDRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDMyNjBBNDdGMDUzMTdB
MEU1RENBQzZGRDlCODI0NkFFMENDOThFQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDW0BYd8STVTzGO9n+yCg9qVc7i70N3aZH4i7pk7m0TsOeTx3QN
9PFxGj3lpe3HaE+uVtrqLX7QTZ/fnWbGHjysb9vXN8Hw+rykyAaBLLZXUpEjZCic
Fiq8JHbF9A4sbKOGFtSS0KOXqpTIC2O9PRaQTZVHOtLCHrcIbvzMaj/QGykGberD
hhGuGDPYLOiFgMGcBoSG96QKbDM0ijHyAJw2gxqTDfuWYNBq3s4Xd5GshGdnmHvj
3UE3+/gTsFpOqjzhpYVmW3HGyX8F7lTal+JY6FDrxIy+KN3DWqORXSSZRUHvCpKE
MLx8e2cO5ga6FlMuMXbLVENpji3ksTECFrbZAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUMmCkfwUxeg5dysb9m4JGrgzJjrYwHwYDVR0jBBgwFoAUzIz3JvIyMpkQh0TW
kwvvGNZ3RF0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzY3
L3pJejNKdkl5TXBrUWgwVFdrd3Z2R05aM1JGMC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvekl6M0p2SXlNcGtRaDBUV2t3dnZHTlozUkYwLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzY3L3pJejNKdkl5TXBrUWgw
VFdrd3Z2R05aM1JGMC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCKqLzr1tttNSNw7dD9li7AfxHWio9Ti7ZZrXTgjc+vI1/VVrT/W/jsxIYq0f12
tTP8QT/LHgBABKgtt+tCeyZuyKlloV9luNRjK39KrHnyOD10LPcbjv0Vzb7bJPBQ
1pJAEqHZfgvnhoB3lxpH18UqfTDukxcv3JA+fCvMDCkkdlFKEc8h/knhUyLFmGEO
ep+lOIYRvqqw5BApJue9f6Hb0Ku+3F8t7oz1RVOWRzqidpOJRPyv7XHw2YXWkMP+
q7j9It5WI3ZJMajXF4/e2pR5aaOa7mPoHXGj8lHHVWeIPHNOe6wdjtKIlwQr6A+Q
DGomVSNGGdITrpYfnqGUPAm4
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:24:33 2025 by rpki-client