Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft
File: dTJNO48dXrpXcOZh7havJKdQVU8.mft (raw, json)
Hash identifier: Q89kgFwcs8UARZkG1an1x43//GBHJ68bJdhdrf2wFHM=
Subject key identifier: 94:2C:98:69:0A:F1:BD:35:2C:2B:5C:93:51:62:D8:16:D0:C7:4B:3C
Authority key identifier: 75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
Certificate issuer: /CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Certificate serial: 142F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft
Manifest number: 1411
Signing time: Sat 29 Mar 2025 09:28:29 +0000
Manifest this update: Sat 29 Mar 2025 09:28:29 +0000
Manifest next update: Sat 29 Mar 2025 15:28:29 +0000
Files and hashes: 1: dTJNO48dXrpXcOZh7havJKdQVU8.crl (hash: ruTEaa0y9MOrSOC8kuE/YDHtLouzBOAz6/hEGLsyw8Y=)
2: s6qZ59C9C3Rx1_dYYkL8Pba15QE.roa (hash: Z5eUU4BhcKqS/6XZ5bO9vhYAIrozt8on0FwXTp8twqs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5167 (0x142f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Validity
Not Before: Mar 29 09:28:29 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=942C98690AF1BD352C2B5C935162D816D0C74B3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7e:6d:b7:ac:cf:e1:f3:f2:d7:14:b6:37:28:
a4:6b:6b:57:e4:32:72:8a:20:2b:43:46:42:a8:cc:
7a:04:9f:3e:d9:bd:ca:36:e9:22:2e:b4:a8:ac:63:
89:e6:1e:5c:47:c6:99:ae:d5:7b:c4:66:62:3a:02:
4a:a2:f4:a4:4e:8a:71:04:a0:de:50:08:81:97:08:
12:25:fc:d1:a0:ac:55:e6:13:01:bb:e4:5f:a8:ab:
3d:df:0b:96:9e:81:98:dd:ba:a1:58:8d:da:3e:74:
f1:7a:a8:eb:6e:8e:a6:df:21:1a:79:1c:80:e5:f5:
12:d1:d8:4a:02:fd:ba:3c:38:d1:1a:10:c1:96:f9:
95:07:be:70:a8:e8:96:d4:94:f2:17:19:44:18:a6:
fb:08:c9:b3:c2:f4:0b:48:85:23:fb:2b:aa:83:ba:
5d:b5:69:9c:16:21:00:7e:f5:40:bc:ec:f2:72:59:
a6:fb:ef:63:34:49:cf:32:0e:81:eb:8a:be:df:c0:
cc:3e:7d:ba:a8:99:86:c0:ec:80:25:b1:73:32:3d:
c4:15:79:23:c5:06:b0:7e:12:03:26:07:82:70:49:
c0:e9:90:30:57:84:96:4a:47:ac:09:dc:39:74:20:
17:bc:d4:93:2d:ee:3e:ef:b0:b0:92:ed:d5:33:0d:
ab:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2C:98:69:0A:F1:BD:35:2C:2B:5C:93:51:62:D8:16:D0:C7:4B:3C
X509v3 Authority Key Identifier:
keyid:75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:31:56:33:05:09:aa:29:54:e8:ca:60:12:94:c6:15:d0:d9:
62:f7:6c:f0:fa:0d:75:32:fe:df:3c:13:0e:7c:68:e8:9c:e5:
62:20:05:2d:0f:0e:f3:43:fe:30:70:db:21:db:f8:0f:d9:d0:
2b:80:96:05:ed:73:11:eb:ed:c1:ba:cd:68:0e:e9:01:c6:06:
0c:74:5e:86:3d:d4:ac:34:9e:54:ef:c1:1b:21:fc:a0:34:6a:
a5:80:67:32:09:c3:15:a0:39:12:aa:b1:47:2e:44:8b:f9:1d:
27:0c:55:84:0e:5a:cf:52:b6:0d:4b:e5:db:a2:e7:52:f4:e6:
99:2d:76:86:73:36:cd:e0:f7:3b:fb:0d:90:92:06:61:4a:2d:
e3:13:8b:11:42:62:30:76:5f:6a:52:2e:a6:53:a0:5a:1a:52:
ef:5f:68:ab:b6:2b:62:5a:ca:37:ef:39:d2:5c:c8:f5:2b:5a:
77:bd:fc:d9:45:31:86:9e:7a:24:06:e0:da:b8:80:c8:14:05:
d5:fa:5c:00:aa:a8:5c:14:b2:e0:8a:ae:73:47:8d:e4:56:45:
55:fc:83:2b:5f:1b:01:f8:cb:81:54:96:f1:f2:aa:69:3b:08:
97:50:34:09:ad:7e:55:13:fd:ac:0f:bf:f3:d8:88:b2:40:45:
f0:2a:cd:4b
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICFC8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzUz
MjREM0I4RjFENUVCQTU3NzBFNjYxRUUxNkFGMjRBNzUwNTU0RjAeFw0yNTAzMjkw
OTI4MjlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDk0MkM5ODY5MEFGMUJE
MzUyQzJCNUM5MzUxNjJEODE2RDBDNzRCM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCYfm23rM/h8/LXFLY3KKRra1fkMnKKICtDRkKozHoEnz7Zvco2
6SIutKisY4nmHlxHxpmu1XvEZmI6Akqi9KROinEEoN5QCIGXCBIl/NGgrFXmEwG7
5F+oqz3fC5aegZjduqFYjdo+dPF6qOtujqbfIRp5HIDl9RLR2EoC/bo8ONEaEMGW
+ZUHvnCo6JbUlPIXGUQYpvsIybPC9AtIhSP7K6qDul21aZwWIQB+9UC87PJyWab7
72M0Sc8yDoHrir7fwMw+fbqomYbA7IAlsXMyPcQVeSPFBrB+EgMmB4JwScDpkDBX
hJZKR6wJ3Dl0IBe81JMt7j7vsLCS7dUzDau1AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUlCyYaQrxvTUsK1yTUWLYFtDHSzwwHwYDVR0jBBgwFoAUdTJNO48dXrpXcOZh
7havJKdQVU8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTgy
Ni9kVEpOTzQ4ZFhycFhjT1poN2hhdkpLZFFWVTguY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2RUSk5PNDhkWHJwWGNPWmg3aGF2SktkUVZVOC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE4MjYvZFRKTk80OGRYcnBY
Y09aaDdoYXZKS2RRVlU4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBALMxVjMFCaopVOjKYBKUxhXQ2WL3bPD6DXUy/t88Ew58aOic5WIgBS0PDvND
/jBw2yHb+A/Z0CuAlgXtcxHr7cG6zWgO6QHGBgx0XoY91Kw0nlTvwRsh/KA0aqWA
ZzIJwxWgORKqsUcuRIv5HScMVYQOWs9Stg1L5dui51L05pktdoZzNs3g9zv7DZCS
BmFKLeMTixFCYjB2X2pSLqZToFoaUu9faKu2K2JayjfvOdJcyPUrWne9/NlFMYae
eiQG4Nq4gMgUBdX6XACqqFwUsuCKrnNHjeRWRVX8gytfGwH4y4FUlvHyqmk7CJdQ
NAmtflUT/awPv/PYiLJARfAqzUs=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:41 2025 by rpki-client