Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft
File: IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft (raw, json)
Hash identifier: pCftNaGdF13IyI9uzhyj/wj6woaRcn+MiQhfdnhKgK4=
Subject key identifier: 8F:67:08:B2:47:68:C9:A1:4D:5B:C9:B9:3B:5E:04:D0:CB:88:51:39
Authority key identifier: 23:32:0A:4B:AF:0A:F9:31:35:30:EC:99:D3:68:64:33:70:3E:07:1F
Certificate issuer: /CN=23320A4BAF0AF9313530EC99D3686433703E071F
Certificate serial: 2062
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzIKS68K-TE1MOyZ02hkM3A-Bx8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft
Manifest number: 2050
Signing time: Fri 04 Apr 2025 19:05:20 +0000
Manifest this update: Fri 04 Apr 2025 19:05:20 +0000
Manifest next update: Sat 05 Apr 2025 01:05:20 +0000
Files and hashes: 1: IzIKS68K-TE1MOyZ02hkM3A-Bx8.crl (hash: UgB46Gz0vP4Tef0aXaB3rIf1UnoyAncucSFLnLSNhCE=)
2: noTTkGKBBA0IiF1s9t5qUE627a8.roa (hash: 7atMi/MrgnmN/IZ16hRnHqf3SP1bFaVyEPj4clXkIuM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8290 (0x2062)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23320A4BAF0AF9313530EC99D3686433703E071F
Validity
Not Before: Apr 4 19:05:20 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8F6708B24768C9A14D5BC9B93B5E04D0CB885139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:aa:75:54:3b:4a:b7:b6:b1:9b:96:0e:b2:
44:eb:c9:95:cf:2a:16:e8:ac:69:9c:59:10:60:de:
9e:f5:06:1f:2f:65:02:b9:44:52:cb:c0:c6:27:9d:
f2:fe:6e:24:5f:b6:c3:1f:23:63:b4:b7:e0:16:28:
4c:fb:88:23:b0:d6:b5:62:95:91:7e:a1:f3:c6:30:
62:5d:ce:0a:45:0e:3c:af:83:73:9f:b1:1e:3a:79:
40:98:40:37:4a:bc:89:d7:3e:f8:90:28:e9:51:86:
b3:a6:36:13:55:5f:cc:08:42:d3:3d:a0:4b:55:6d:
75:a4:1b:bf:32:31:c1:ff:8b:84:90:45:ce:ba:0e:
0d:b4:cf:51:31:40:a7:f9:46:0b:06:67:86:f1:7f:
bd:94:2a:ce:ce:e0:e4:0a:01:eb:79:12:e3:74:0f:
2c:9a:d6:fe:0c:07:bf:2b:b7:bf:92:37:47:cd:db:
14:13:7a:cb:5b:3f:46:ba:2d:91:3a:e7:1f:dd:47:
0b:d5:90:f4:cb:00:47:88:22:c9:d6:72:2c:69:a4:
90:13:97:78:59:20:80:1e:c0:b7:b2:e0:34:01:e3:
ce:e3:92:f7:aa:f0:83:a7:55:f5:b8:30:7c:fb:7a:
7f:1a:47:b2:98:42:cc:c5:8f:80:8e:1a:77:44:f2:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:67:08:B2:47:68:C9:A1:4D:5B:C9:B9:3B:5E:04:D0:CB:88:51:39
X509v3 Authority Key Identifier:
keyid:23:32:0A:4B:AF:0A:F9:31:35:30:EC:99:D3:68:64:33:70:3E:07:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzIKS68K-TE1MOyZ02hkM3A-Bx8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:58:ee:42:84:0f:65:d3:e5:88:45:c5:71:db:84:c4:ac:45:
8d:43:b8:8e:a9:26:e9:04:a2:1a:9f:a0:24:77:e4:56:da:99:
27:5d:a5:1a:31:d6:65:69:2b:03:bd:c2:4d:65:55:88:55:f3:
c6:f1:89:0c:d9:40:e5:be:67:0f:71:9f:41:a8:fa:df:af:04:
ee:dd:52:d2:bc:06:96:07:e2:df:ad:4a:48:4e:ea:7b:3b:8b:
e2:07:be:04:8a:9a:75:62:f4:5c:01:6e:66:3d:9d:84:cb:25:
5c:4a:7a:8e:60:c3:57:b9:bf:9d:d1:e8:f4:d1:91:73:72:ff:
de:72:40:bf:4c:a3:40:c7:9e:f7:37:a5:2b:f9:f4:4d:d9:aa:
91:aa:dd:bc:f9:66:72:61:9b:ed:50:cb:b9:89:9d:79:49:c4:
ce:b5:d9:cb:9b:5f:ba:d5:07:dc:fd:0b:92:ef:f4:8e:45:28:
b8:d1:9c:56:45:f1:a0:d4:01:09:f8:7a:45:62:5a:0e:ea:b7:
7b:e0:4f:d8:e8:dd:9e:49:d0:e4:4b:09:17:8a:74:a5:ed:68:
b8:2d:df:89:d8:29:eb:96:da:7f:5c:8f:6c:7d:dc:40:c0:11:
2a:8f:af:ef:e7:b1:1c:35:43:d6:e3:ac:54:1e:78:8b:a5:eb:
25:3a:2f:df
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICIGIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjMz
MjBBNEJBRjBBRjkzMTM1MzBFQzk5RDM2ODY0MzM3MDNFMDcxRjAeFw0yNTA0MDQx
OTA1MjBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhGNjcwOEIyNDc2OEM5
QTE0RDVCQzlCOTNCNUUwNEQwQ0I4ODUxMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7gap1VDtKt7axm5YOskTryZXPKhborGmcWRBg3p71Bh8vZQK5
RFLLwMYnnfL+biRftsMfI2O0t+AWKEz7iCOw1rVilZF+ofPGMGJdzgpFDjyvg3Of
sR46eUCYQDdKvInXPviQKOlRhrOmNhNVX8wIQtM9oEtVbXWkG78yMcH/i4SQRc66
Dg20z1ExQKf5RgsGZ4bxf72UKs7O4OQKAet5EuN0Dyya1v4MB78rt7+SN0fN2xQT
estbP0a6LZE65x/dRwvVkPTLAEeIIsnWcixppJATl3hZIIAewLey4DQB487jkveq
8IOnVfW4MHz7en8aR7KYQszFj4COGndE8nkDAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUj2cIskdoyaFNW8m5O14E0MuIUTkwHwYDVR0jBBgwFoAUIzIKS68K+TE1MOyZ
02hkM3A+Bx8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQ3
L0l6SUtTNjhLLVRFMU1PeVowMmhrTTNBLUJ4OC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvSXpJS1M2OEstVEUxTU95WjAyaGtNM0EtQng4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQ3L0l6SUtTNjhLLVRFMU1P
eVowMmhrTTNBLUJ4OC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA1WO5ChA9l0+WIRcVx24TErEWNQ7iOqSbpBKIan6Akd+RW2pknXaUaMdZlaSsD
vcJNZVWIVfPG8YkM2UDlvmcPcZ9BqPrfrwTu3VLSvAaWB+LfrUpITup7O4viB74E
ipp1YvRcAW5mPZ2EyyVcSnqOYMNXub+d0ej00ZFzcv/eckC/TKNAx573N6Ur+fRN
2aqRqt28+WZyYZvtUMu5iZ15ScTOtdnLm1+61Qfc/QuS7/SORSi40ZxWRfGg1AEJ
+HpFYloO6rd74E/Y6N2eSdDkSwkXinSl7Wi4Ld+J2Cnrltp/XI9sfdxAwBEqj6/v
57EcNUPW46xUHniLpeslOi/f
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:42 2025 by rpki-client