Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3222/86Gf8--Ghw5ZUsx5AL_HnwuNh-A.mft
File: 86Gf8--Ghw5ZUsx5AL_HnwuNh-A.mft (raw, json)
Hash identifier: 6eRG2iOy4jSUZxZru2LZ+0D3jBiiUDzLI/XP/gehaN0=
Subject key identifier: DE:C0:59:A6:57:28:31:16:C7:94:46:C8:89:1C:A9:21:35:BA:A6:A8
Authority key identifier: F3:A1:9F:F3:EF:86:87:0E:59:52:CC:79:00:BF:C7:9F:0B:8D:87:E0
Certificate issuer: /CN=F3A19FF3EF86870E5952CC7900BFC79F0B8D87E0
Certificate serial: 0CDD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/86Gf8--Ghw5ZUsx5AL_HnwuNh-A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3222/86Gf8--Ghw5ZUsx5AL_HnwuNh-A.mft
Manifest number: 0CDD
Signing time: Fri 04 Apr 2025 19:07:33 +0000
Manifest this update: Fri 04 Apr 2025 19:07:33 +0000
Manifest next update: Sat 05 Apr 2025 01:07:33 +0000
Files and hashes: 1: 86Gf8--Ghw5ZUsx5AL_HnwuNh-A.crl (hash: 2R/0Iwwt1/Zl5wPU/NGq5ll46wyjIHs2Kid0PxnGy7A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3293 (0xcdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3A19FF3EF86870E5952CC7900BFC79F0B8D87E0
Validity
Not Before: Apr 4 19:07:33 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=DEC059A657283116C79446C8891CA92135BAA6A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4a:70:5e:93:c2:ce:df:38:b2:86:10:21:f2:
4b:5e:21:3b:6b:47:f1:a3:83:41:39:39:27:30:62:
6b:83:f0:cb:46:0d:3c:55:2a:37:87:4c:67:dc:76:
7f:18:2c:ac:1f:89:0b:38:07:45:f2:87:d5:11:83:
f7:ce:c2:f4:7a:a2:08:6d:ea:31:3b:07:5b:dd:97:
aa:df:b7:66:fd:e3:99:0d:a2:d6:fd:3c:2f:54:01:
8a:d1:13:06:04:ff:17:07:c3:db:56:bc:ef:3a:d5:
fc:a7:c5:34:2b:f9:a7:16:f6:2a:24:f0:c5:0b:79:
86:41:70:c0:29:49:84:be:b1:3b:ed:4a:1c:55:70:
62:94:9f:78:5c:3f:a6:e7:84:dd:25:1d:1d:5a:88:
88:7b:d6:d3:f6:ba:fa:2b:29:5a:d2:1d:3c:cc:9a:
ea:dc:46:75:ca:ea:74:47:b5:66:ee:66:42:be:1a:
b6:f4:7d:0e:57:f7:dc:c1:49:99:d6:46:a6:3e:d6:
37:4f:cd:fd:4d:a1:95:56:5d:91:e1:77:4f:18:dc:
6b:b1:44:b2:e2:a6:f9:0b:1c:86:57:5e:f8:fe:76:
cb:8f:83:d1:7f:06:b7:15:14:1e:eb:cb:78:96:74:
19:c6:8d:6c:1a:ba:a0:7d:42:4b:76:92:f4:a3:bf:
7f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C0:59:A6:57:28:31:16:C7:94:46:C8:89:1C:A9:21:35:BA:A6:A8
X509v3 Authority Key Identifier:
keyid:F3:A1:9F:F3:EF:86:87:0E:59:52:CC:79:00:BF:C7:9F:0B:8D:87:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3222/86Gf8--Ghw5ZUsx5AL_HnwuNh-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/86Gf8--Ghw5ZUsx5AL_HnwuNh-A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3222/86Gf8--Ghw5ZUsx5AL_HnwuNh-A.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:d7:15:8b:52:67:65:20:ad:ef:b4:ca:c4:98:7d:a6:33:f6:
b9:0d:5e:2b:05:19:7a:e6:28:51:4e:2d:43:f4:10:0a:06:ac:
90:26:83:2c:cf:04:f4:9b:63:93:70:72:6b:39:4d:55:d8:6d:
a2:8a:17:c5:0c:5f:16:95:5c:a6:f9:9e:51:43:21:d4:65:50:
7d:8d:ed:1e:91:d6:45:69:6a:7f:ed:8b:16:a6:ba:21:a7:a3:
f6:56:f4:c2:cf:a7:83:1b:a5:85:b1:84:4f:25:ba:04:dd:d6:
fc:2b:6b:e5:87:01:7f:9e:1c:cb:d1:6b:ed:1a:13:87:06:34:
ad:fb:fb:04:a0:37:a5:df:d9:12:5d:db:2b:3a:7b:c6:5a:c1:
81:c1:01:0d:b0:7f:56:63:23:4c:2c:8b:10:f7:07:2f:10:dd:
76:97:09:ec:03:5f:96:99:15:13:ae:fb:6a:b6:17:66:45:4f:
a6:8e:77:83:e8:c2:a0:af:63:4e:f4:69:ab:07:17:ee:e4:96:
ad:36:93:b4:54:00:a3:08:d1:a6:cc:4d:f6:85:93:5e:8d:d4:
86:83:ef:1f:55:87:46:e1:4c:89:4f:07:a2:f5:ed:97:29:7e:
8e:56:e8:9c:8f:8b:ba:ef:5c:4e:ec:51:de:2a:39:27:ba:24:
49:16:1c:f4
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICDN0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjNB
MTlGRjNFRjg2ODcwRTU5NTJDQzc5MDBCRkM3OUYwQjhEODdFMDAeFw0yNTA0MDQx
OTA3MzNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKERFQzA1OUE2NTcyODMx
MTZDNzk0NDZDODg5MUNBOTIxMzVCQUE2QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTSnBek8LO3ziyhhAh8kteITtrR/Gjg0E5OScwYmuD8MtGDTxV
KjeHTGfcdn8YLKwfiQs4B0Xyh9URg/fOwvR6oght6jE7B1vdl6rft2b945kNotb9
PC9UAYrREwYE/xcHw9tWvO861fynxTQr+acW9iok8MULeYZBcMApSYS+sTvtShxV
cGKUn3hcP6bnhN0lHR1aiIh71tP2uvorKVrSHTzMmurcRnXK6nRHtWbuZkK+Grb0
fQ5X99zBSZnWRqY+1jdPzf1NoZVWXZHhd08Y3GuxRLLipvkLHIZXXvj+dsuPg9F/
BrcVFB7ry3iWdBnGjWwauqB9Qkt2kvSjv389AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU3sBZplcoMRbHlEbIiRypITW6pqgwHwYDVR0jBBgwFoAU86Gf8++Ghw5ZUsx5
AL/HnwuNh+AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy
Mi84NkdmOC0tR2h3NVpVc3g1QUxfSG53dU5oLUEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzg2R2Y4LS1HaHc1WlVzeDVBTF9Ibnd1TmgtQS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjIvODZHZjgtLUdodzVa
VXN4NUFMX0hud3VOaC1BLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAM3XFYtSZ2Ugre+0ysSYfaYz9rkNXisFGXrmKFFOLUP0EAoGrJAmgyzPBPSb
Y5Nwcms5TVXYbaKKF8UMXxaVXKb5nlFDIdRlUH2N7R6R1kVpan/tixamuiGno/ZW
9MLPp4MbpYWxhE8lugTd1vwra+WHAX+eHMvRa+0aE4cGNK37+wSgN6Xf2RJd2ys6
e8ZawYHBAQ2wf1ZjI0wsixD3By8Q3XaXCewDX5aZFROu+2q2F2ZFT6aOd4PowqCv
Y070aasHF+7klq02k7RUAKMI0abMTfaFk16N1IaD7x9Vh0bhTIlPB6L17Zcpfo5W
6JyPi7rvXE7sUd4qOSe6JEkWHPQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:06 2025 by rpki-client