Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2819/hTRSS_5XzTyFZI-ryLwRC4vixb4.mft
File: hTRSS_5XzTyFZI-ryLwRC4vixb4.mft (raw, json)
Hash identifier: e5UdYrH4z8EstA7ux+iPybVw3Lg5kH8XEvBEjk/kty8=
Subject key identifier: BA:2C:1F:6C:2C:B7:DB:92:11:15:6E:20:50:46:2B:59:6D:96:98:ED
Authority key identifier: 85:34:52:4B:FE:57:CD:3C:85:64:8F:AB:C8:BC:11:0B:8B:E2:C5:BE
Certificate issuer: /CN=8534524BFE57CD3C85648FABC8BC110B8BE2C5BE
Certificate serial: 0D8D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hTRSS_5XzTyFZI-ryLwRC4vixb4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/hTRSS_5XzTyFZI-ryLwRC4vixb4.mft
Manifest number: 0D8D
Signing time: Fri 21 Mar 2025 00:27:22 +0000
Manifest this update: Fri 21 Mar 2025 00:27:22 +0000
Manifest next update: Fri 21 Mar 2025 06:27:22 +0000
Files and hashes: 1: hTRSS_5XzTyFZI-ryLwRC4vixb4.crl (hash: HMuhLO68yenQgKct/U26XkFRhcdCvDA5IW5SpaUifYo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3469 (0xd8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8534524BFE57CD3C85648FABC8BC110B8BE2C5BE
Validity
Not Before: Mar 21 00:27:22 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BA2C1F6C2CB7DB9211156E2050462B596D9698ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:dd:d7:aa:d0:74:4b:22:b1:24:f7:f1:14:
c1:33:a3:eb:aa:a6:5a:88:83:ca:99:e6:6b:db:07:
5e:c5:55:8d:c5:01:59:2a:4f:9e:1f:01:1c:0f:59:
c3:c8:07:d7:cb:c0:1b:36:4c:69:58:ed:62:53:26:
d6:8a:00:fd:10:57:fe:d6:6c:83:46:01:81:22:fc:
6d:c7:d5:3f:d3:60:c9:74:ff:ce:6b:e8:9f:20:cd:
de:ae:a4:a7:20:2f:d5:7a:8e:14:6a:d1:4b:aa:2d:
c8:f3:81:71:cd:d5:c0:ba:d8:fd:47:5c:de:27:4b:
e3:40:69:3b:43:8d:d8:29:39:5c:58:28:6b:96:4b:
2c:60:70:eb:98:12:ff:ec:1d:8e:85:e5:f3:76:7b:
50:7e:5b:0a:98:d2:6e:c1:d8:91:6c:8e:2e:bd:61:
e6:7b:bd:88:00:63:46:d3:40:8f:f6:97:d4:02:0c:
92:4d:1a:f3:e9:1e:74:cd:1d:d5:ae:1c:eb:3a:f9:
95:7d:e7:09:f8:58:a5:92:b7:3f:b4:64:0a:a9:9a:
bc:8b:16:8d:b6:e1:af:4a:48:8f:ac:9f:eb:c8:a0:
96:99:ef:59:89:23:d7:e7:33:1d:c6:7b:63:86:10:
15:cd:48:7b:06:4e:07:70:4b:cf:67:b6:49:c4:85:
e5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2C:1F:6C:2C:B7:DB:92:11:15:6E:20:50:46:2B:59:6D:96:98:ED
X509v3 Authority Key Identifier:
keyid:85:34:52:4B:FE:57:CD:3C:85:64:8F:AB:C8:BC:11:0B:8B:E2:C5:BE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/hTRSS_5XzTyFZI-ryLwRC4vixb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hTRSS_5XzTyFZI-ryLwRC4vixb4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/hTRSS_5XzTyFZI-ryLwRC4vixb4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:97:4b:3d:26:02:31:c4:9c:19:e9:ad:f3:d3:7c:b4:25:d7:
78:f4:6e:84:c3:95:75:11:f6:2d:c1:f0:d9:08:d4:58:a3:c2:
98:9a:ce:4e:5a:7f:d6:da:37:a4:2f:52:6b:d9:31:2c:e0:0b:
c7:1b:b0:95:ee:d9:2f:ab:80:c5:19:7a:3f:38:2d:ca:71:10:
44:18:d8:12:1f:41:a8:5b:68:a7:e4:6f:d6:f3:21:6f:1d:2e:
6c:4d:51:91:cf:fe:26:ce:f4:0c:c5:31:27:46:4e:87:5d:2f:
7a:45:3d:d1:08:0f:4e:79:e9:b0:6b:ae:6d:28:5b:c6:a7:a2:
73:94:a8:1d:9d:de:9b:f3:71:f0:2f:9f:a6:63:2d:19:a6:82:
f1:31:d0:56:23:36:34:1d:7c:61:05:c1:ec:aa:37:dc:b9:2d:
eb:eb:24:86:6c:66:9a:4d:7f:77:bf:36:e8:21:f4:71:c9:ee:
ac:4a:d2:ae:a0:e5:e4:dd:1c:b2:61:eb:49:d6:c6:12:50:91:
70:09:53:e0:b3:01:61:fd:00:f5:28:ea:ae:dc:e9:10:10:7f:
70:c0:a4:4c:31:13:5a:c4:7b:17:bd:c0:37:ca:29:c3:7c:0b:
ce:1a:15:20:05:32:6a:c5:6a:08:a9:d3:4d:53:f3:a3:a8:92:
20:81:31:32
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICDY0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODUz
NDUyNEJGRTU3Q0QzQzg1NjQ4RkFCQzhCQzExMEI4QkUyQzVCRTAeFw0yNTAzMjEw
MDI3MjJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEJBMkMxRjZDMkNCN0RC
OTIxMTE1NkUyMDUwNDYyQjU5NkQ5Njk4RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0Hd3XqtB0SyKxJPfxFMEzo+uqplqIg8qZ5mvbB17FVY3FAVkq
T54fARwPWcPIB9fLwBs2TGlY7WJTJtaKAP0QV/7WbINGAYEi/G3H1T/TYMl0/85r
6J8gzd6upKcgL9V6jhRq0UuqLcjzgXHN1cC62P1HXN4nS+NAaTtDjdgpOVxYKGuW
SyxgcOuYEv/sHY6F5fN2e1B+WwqY0m7B2JFsji69YeZ7vYgAY0bTQI/2l9QCDJJN
GvPpHnTNHdWuHOs6+ZV95wn4WKWStz+0ZAqpmryLFo224a9KSI+sn+vIoJaZ71mJ
I9fnMx3Ge2OGEBXNSHsGTgdwS89ntknEheXXAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUuiwfbCy325IRFW4gUEYrWW2WmO0wHwYDVR0jBBgwFoAUhTRSS/5XzTyFZI+r
yLwRC4vixb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx
OS9oVFJTU181WHpUeUZaSS1yeUx3UkM0dml4YjQuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2hUUlNTXzVYelR5RlpJLXJ5THdSQzR2aXhiNC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTkvaFRSU1NfNVh6VHlG
WkktcnlMd1JDNHZpeGI0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJOXSz0mAjHEnBnprfPTfLQl13j0boTDlXUR9i3B8NkI1Fijwpiazk5af9ba
N6QvUmvZMSzgC8cbsJXu2S+rgMUZej84LcpxEEQY2BIfQahbaKfkb9bzIW8dLmxN
UZHP/ibO9AzFMSdGToddL3pFPdEID0556bBrrm0oW8anonOUqB2d3pvzcfAvn6Zj
LRmmgvEx0FYjNjQdfGEFweyqN9y5LevrJIZsZppNf3e/Nugh9HHJ7qxK0q6g5eTd
HLJh60nWxhJQkXAJU+CzAWH9APUo6q7c6RAQf3DApEwxE1rEexe9wDfKKcN8C84a
FSAFMmrFagip001T86OokiCBMTI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:18 2025 by rpki-client