Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2603/j8bT0KCdtS6j3sDSb1SdXxGqOWM.mft
File: j8bT0KCdtS6j3sDSb1SdXxGqOWM.mft (raw, json)
Hash identifier: vIc0LcsY873KqW+txSZhNLLRefzEhHCrU4R5yl0yY18=
Subject key identifier: 4F:E2:C1:B7:B3:09:50:13:64:74:2C:B0:B0:2E:59:23:C3:13:D0:69
Authority key identifier: 8F:C6:D3:D0:A0:9D:B5:2E:A3:DE:C0:D2:6F:54:9D:5F:11:AA:39:63
Certificate issuer: /CN=8FC6D3D0A09DB52EA3DEC0D26F549D5F11AA3963
Certificate serial: 1CB8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j8bT0KCdtS6j3sDSb1SdXxGqOWM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/j8bT0KCdtS6j3sDSb1SdXxGqOWM.mft
Manifest number: 1CB8
Signing time: Fri 21 Mar 2025 00:28:49 +0000
Manifest this update: Fri 21 Mar 2025 00:28:49 +0000
Manifest next update: Fri 21 Mar 2025 06:28:49 +0000
Files and hashes: 1: j8bT0KCdtS6j3sDSb1SdXxGqOWM.crl (hash: ZNAF9hBtRSo+/1QXPxpwaVhdjiA41xebD6/y7ZZyfNI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7352 (0x1cb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC6D3D0A09DB52EA3DEC0D26F549D5F11AA3963
Validity
Not Before: Mar 21 00:28:49 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4FE2C1B7B309501364742CB0B02E5923C313D069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:5a:23:eb:8f:71:c8:f2:cc:e5:03:c1:0d:
00:4a:8f:92:e8:f0:30:fb:8b:7d:85:85:3e:8c:d7:
e5:ca:b1:b6:b4:a1:3f:03:5b:9a:08:6a:87:21:cb:
fd:97:fd:09:f2:99:89:96:5b:b5:83:62:36:87:7d:
53:c0:fa:66:50:ee:d8:b2:0c:ab:19:7d:41:c2:cc:
66:3c:8d:84:8e:44:a3:22:e1:64:11:22:85:72:26:
d0:74:17:3f:e5:1a:4e:c7:cc:91:a1:6d:c6:43:65:
e0:e2:f9:f9:5a:0c:16:57:fa:d8:f9:7a:88:cc:c6:
48:06:62:80:7a:f1:6b:ad:c2:81:51:87:f4:1a:69:
d8:5d:80:3f:ce:4e:d9:20:2d:ba:ed:a1:33:51:72:
eb:c7:7d:2a:b8:d1:45:9e:6a:6d:9f:63:67:53:08:
39:1c:39:77:4d:d2:36:77:41:69:ec:ee:53:78:5b:
07:21:17:78:51:25:5d:ed:0c:0b:15:2e:fe:4f:f0:
4a:73:1d:82:96:8d:54:f3:4a:9d:84:c2:de:eb:aa:
0d:3c:59:23:d5:0f:6f:67:d8:11:8e:39:1e:19:34:
09:07:30:d1:50:53:52:26:29:e7:e9:8d:73:40:9c:
3b:4f:e2:e7:43:12:49:18:e3:9b:40:f1:3a:db:85:
51:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E2:C1:B7:B3:09:50:13:64:74:2C:B0:B0:2E:59:23:C3:13:D0:69
X509v3 Authority Key Identifier:
keyid:8F:C6:D3:D0:A0:9D:B5:2E:A3:DE:C0:D2:6F:54:9D:5F:11:AA:39:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/j8bT0KCdtS6j3sDSb1SdXxGqOWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j8bT0KCdtS6j3sDSb1SdXxGqOWM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/j8bT0KCdtS6j3sDSb1SdXxGqOWM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:e4:da:19:eb:ca:40:56:88:d4:94:fe:c4:0c:1f:7b:db:47:
28:e2:58:93:ea:60:6d:68:06:28:1f:10:cc:11:5c:f5:12:4e:
40:05:89:22:aa:27:12:15:b3:1b:5d:e5:53:21:01:38:29:82:
94:78:03:de:fd:d8:5f:30:0d:ba:ae:df:94:dc:05:95:8f:95:
90:0c:d3:ff:4b:4c:e3:02:48:40:60:b8:94:53:d1:8d:74:95:
7d:27:6b:e5:21:87:b8:4f:16:cc:e6:9e:c7:bc:30:a8:cc:46:
2e:4a:59:4a:5d:ea:94:d7:63:d8:d2:87:bf:58:57:0b:18:b0:
8e:9b:17:28:39:8c:b9:00:b1:d3:02:e7:12:78:9a:be:a3:18:
2e:79:f4:dd:9a:48:f0:0f:4b:af:e7:7f:07:ad:ac:d6:a2:59:
2f:5f:56:c9:89:14:49:3a:2d:c2:c0:9a:b1:c7:8b:06:09:a0:
1e:a2:cf:c4:c7:b1:d7:1c:f0:c9:94:d2:a7:1a:57:f8:81:e4:
3c:58:6f:da:f9:aa:18:09:14:83:45:cc:70:09:55:79:8c:43:
02:d7:d6:69:8c:0c:fb:62:9c:18:bc:90:7e:67:8d:7f:dc:c7:
69:9a:b0:ab:c2:84:89:52:e9:7f:e0:99:06:37:73:54:62:56:
c1:2f:93:46
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICHLgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEZD
NkQzRDBBMDlEQjUyRUEzREVDMEQyNkY1NDlENUYxMUFBMzk2MzAeFw0yNTAzMjEw
MDI4NDlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDRGRTJDMUI3QjMwOTUw
MTM2NDc0MkNCMEIwMkU1OTIzQzMxM0QwNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC10Foj649xyPLM5QPBDQBKj5Lo8DD7i32FhT6M1+XKsba0oT8D
W5oIaochy/2X/QnymYmWW7WDYjaHfVPA+mZQ7tiyDKsZfUHCzGY8jYSORKMi4WQR
IoVyJtB0Fz/lGk7HzJGhbcZDZeDi+flaDBZX+tj5eojMxkgGYoB68WutwoFRh/Qa
adhdgD/OTtkgLbrtoTNRcuvHfSq40UWeam2fY2dTCDkcOXdN0jZ3QWns7lN4Wwch
F3hRJV3tDAsVLv5P8EpzHYKWjVTzSp2Ewt7rqg08WSPVD29n2BGOOR4ZNAkHMNFQ
U1ImKefpjXNAnDtP4udDEkkY45tA8TrbhVHVAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUT+LBt7MJUBNkdCywsC5ZI8MT0GkwHwYDVR0jBBgwFoAUj8bT0KCdtS6j3sDS
b1SdXxGqOWMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYw
My9qOGJUMEtDZHRTNmozc0RTYjFTZFh4R3FPV00uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2o4YlQwS0NkdFM2ajNzRFNiMVNkWHhHcU9XTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MDMvajhiVDBLQ2R0UzZq
M3NEU2IxU2RYeEdxT1dNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAInk2hnrykBWiNSU/sQMH3vbRyjiWJPqYG1oBigfEMwRXPUSTkAFiSKqJxIV
sxtd5VMhATgpgpR4A9792F8wDbqu35TcBZWPlZAM0/9LTOMCSEBguJRT0Y10lX0n
a+Uhh7hPFszmnse8MKjMRi5KWUpd6pTXY9jSh79YVwsYsI6bFyg5jLkAsdMC5xJ4
mr6jGC559N2aSPAPS6/nfwetrNaiWS9fVsmJFEk6LcLAmrHHiwYJoB6iz8THsdcc
8MmU0qcaV/iB5DxYb9r5qhgJFINFzHAJVXmMQwLX1mmMDPtinBi8kH5njX/cx2ma
sKvChIlS6X/gmQY3c1RiVsEvk0Y=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:28 2025 by rpki-client