Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3249/vJA-IGAC4WXCtlKh9td7d9hy4io.mft
File: vJA-IGAC4WXCtlKh9td7d9hy4io.mft (raw, json)
Hash identifier: TqquCIBz6hvVvkM/IpH+WVt9UCNGUTdKMSSAHZk84vA=
Subject key identifier: B4:6C:C3:3E:2B:B3:08:6B:36:EA:A0:CD:93:40:F8:0E:57:98:D7:4A
Authority key identifier: BC:90:3E:20:60:02:E1:65:C2:B6:52:A1:F6:D7:7B:77:D8:72:E2:2A
Certificate issuer: /CN=BC903E206002E165C2B652A1F6D77B77D872E22A
Certificate serial: 08DE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vJA-IGAC4WXCtlKh9td7d9hy4io.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/vJA-IGAC4WXCtlKh9td7d9hy4io.mft
Manifest number: 08DE
Signing time: Fri 21 Mar 2025 00:28:38 +0000
Manifest this update: Fri 21 Mar 2025 00:28:38 +0000
Manifest next update: Fri 21 Mar 2025 06:28:38 +0000
Files and hashes: 1: vJA-IGAC4WXCtlKh9td7d9hy4io.crl (hash: db6xKPczYRy0bZsxzamhsAU0a0HV2gZYPviAM8ylVko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2270 (0x8de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC903E206002E165C2B652A1F6D77B77D872E22A
Validity
Not Before: Mar 21 00:28:38 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B46CC33E2BB3086B36EAA0CD9340F80E5798D74A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:ba:9f:68:94:97:00:a8:47:df:40:87:c4:
74:e6:9c:46:5d:a1:e8:c7:9d:f7:17:a2:f1:d3:3a:
be:53:a2:cb:d8:bc:77:80:a1:c0:b6:7d:7d:e4:ad:
f2:68:cb:07:cc:88:2d:cc:05:0a:66:3e:3a:32:bc:
7b:92:a2:c2:cc:f1:bc:1e:c0:7b:e2:5c:13:59:34:
93:da:2a:3c:57:36:20:09:fc:93:38:08:53:19:b0:
98:1d:21:1a:a6:86:95:25:9c:5a:60:c1:95:05:d5:
be:c3:ba:64:21:fc:b6:dd:a8:6d:4f:52:5f:aa:c9:
d1:0b:37:ae:b1:5e:12:36:5b:97:6c:f6:19:5a:1f:
01:d6:bc:ec:d7:e5:eb:fd:a8:f0:26:f7:64:3f:37:
f3:9b:d7:43:35:f1:2d:b3:13:2f:4f:38:69:03:fd:
5c:47:bb:39:a3:5a:e0:bc:df:45:ee:e8:35:43:99:
94:13:70:17:d2:81:91:8b:6d:fd:b5:75:f5:56:2d:
50:ad:13:1e:b0:90:a4:0d:77:57:bd:96:b8:d8:ba:
57:d3:c2:68:08:0a:87:5b:4f:9f:ba:d1:e4:90:77:
d9:f8:1b:e5:70:33:44:7d:13:39:f5:04:97:fd:48:
cd:f1:0b:eb:7a:4e:d0:e0:93:d3:a9:7f:1e:24:4a:
4b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6C:C3:3E:2B:B3:08:6B:36:EA:A0:CD:93:40:F8:0E:57:98:D7:4A
X509v3 Authority Key Identifier:
keyid:BC:90:3E:20:60:02:E1:65:C2:B6:52:A1:F6:D7:7B:77:D8:72:E2:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/vJA-IGAC4WXCtlKh9td7d9hy4io.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vJA-IGAC4WXCtlKh9td7d9hy4io.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/vJA-IGAC4WXCtlKh9td7d9hy4io.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f7:61:0f:3a:a8:c6:84:e4:a2:4c:9c:83:83:92:3b:0e:d5:
e7:fd:4c:70:6d:91:5e:7c:77:da:98:56:f8:2b:5b:f6:c7:59:
e3:01:a9:63:8e:c0:41:0b:2a:cb:d8:bc:db:06:0b:c7:38:b8:
07:f8:56:3f:5c:f2:97:43:b2:ed:ea:d0:e0:c2:b7:d3:7c:18:
e9:24:ab:28:cd:c1:85:4f:0b:6b:d8:f0:6a:a9:29:2f:05:be:
c4:95:ec:b6:ce:ab:ac:97:91:0f:cd:d7:92:6a:01:b4:1a:47:
78:19:3e:af:56:a6:21:5f:fb:8d:ee:81:00:db:ba:81:dc:cd:
ff:fe:60:95:e6:3e:74:22:9f:69:c9:12:ef:4d:9a:66:28:c1:
a0:47:ca:61:a8:dd:3b:c9:f8:c6:d1:64:bd:0d:b3:c8:ad:bd:
4c:0b:15:cf:38:e6:5b:d7:d9:bd:d7:be:f9:55:99:1e:f7:dd:
96:48:e1:35:0b:ff:4a:c4:d7:49:53:e0:71:00:b3:f5:f1:bf:
f7:01:27:05:21:b5:2e:4b:69:ea:63:0b:70:5e:d8:61:13:1a:
33:cd:74:62:74:9a:39:b1:f6:cf:6a:7d:83:ac:e6:b0:64:b9:
d5:e8:00:fd:ae:d4:38:34:ad:29:da:ef:f7:b0:67:cd:a8:8b:
e5:05:cb:6e
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkM5
MDNFMjA2MDAyRTE2NUMyQjY1MkExRjZENzdCNzdEODcyRTIyQTAeFw0yNTAzMjEw
MDI4MzhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEI0NkNDMzNFMkJCMzA4
NkIzNkVBQTBDRDkzNDBGODBFNTc5OEQ3NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5s7qfaJSXAKhH30CHxHTmnEZdoejHnfcXovHTOr5TosvYvHeA
ocC2fX3krfJoywfMiC3MBQpmPjoyvHuSosLM8bwewHviXBNZNJPaKjxXNiAJ/JM4
CFMZsJgdIRqmhpUlnFpgwZUF1b7DumQh/LbdqG1PUl+qydELN66xXhI2W5ds9hla
HwHWvOzX5ev9qPAm92Q/N/Ob10M18S2zEy9POGkD/VxHuzmjWuC830Xu6DVDmZQT
cBfSgZGLbf21dfVWLVCtEx6wkKQNd1e9lrjYulfTwmgICodbT5+60eSQd9n4G+Vw
M0R9Ezn1BJf9SM3xC+t6TtDgk9Opfx4kSkt/AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUtGzDPiuzCGs26qDNk0D4DleY10owHwYDVR0jBBgwFoAUvJA+IGAC4WXCtlKh
9td7d9hy4iowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0
OS92SkEtSUdBQzRXWEN0bEtoOXRkN2Q5aHk0aW8uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3ZKQS1JR0FDNFdYQ3RsS2g5dGQ3ZDloeTRpby5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDkvdkpBLUlHQUM0V1hD
dGxLaDl0ZDdkOWh5NGlvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAKP3YQ86qMaE5KJMnIODkjsO1ef9THBtkV58d9qYVvgrW/bHWeMBqWOOwEEL
KsvYvNsGC8c4uAf4Vj9c8pdDsu3q0ODCt9N8GOkkqyjNwYVPC2vY8GqpKS8FvsSV
7LbOq6yXkQ/N15JqAbQaR3gZPq9WpiFf+43ugQDbuoHczf/+YJXmPnQin2nJEu9N
mmYowaBHymGo3TvJ+MbRZL0Ns8itvUwLFc845lvX2b3XvvlVmR733ZZI4TUL/0rE
10lT4HEAs/Xxv/cBJwUhtS5LaepjC3Be2GETGjPNdGJ0mjmx9s9qfYOs5rBkudXo
AP2u1Dg0rSna7/ewZ82oi+UFy24=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:43 2025 by rpki-client