Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3268/kAlV0DbmnDCpyhxy-vMqiRQlO08.mft
File: kAlV0DbmnDCpyhxy-vMqiRQlO08.mft (raw, json)
Hash identifier: 6W5s2AGvP8Jq/jwrONlOhOUor0EsnEGS+/ryq7oTVj8=
Subject key identifier: 14:4A:C7:5C:75:6F:C3:66:88:A1:11:D7:76:BA:EA:86:E2:39:18:2B
Authority key identifier: 90:09:55:D0:36:E6:9C:30:A9:CA:1C:72:FA:F3:2A:89:14:25:3B:4F
Certificate issuer: /CN=900955D036E69C30A9CA1C72FAF32A8914253B4F
Certificate serial: 061C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kAlV0DbmnDCpyhxy-vMqiRQlO08.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/kAlV0DbmnDCpyhxy-vMqiRQlO08.mft
Manifest number: 061C
Signing time: Sat 29 Mar 2025 10:28:35 +0000
Manifest this update: Sat 29 Mar 2025 10:28:35 +0000
Manifest next update: Sat 29 Mar 2025 16:28:35 +0000
Files and hashes: 1: kAlV0DbmnDCpyhxy-vMqiRQlO08.crl (hash: Afz/scRuRA8jMhVwkmISGVNmsQI5e76er2MXz6wHvco=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1564 (0x61c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=900955D036E69C30A9CA1C72FAF32A8914253B4F
Validity
Not Before: Mar 29 10:28:35 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=144AC75C756FC36688A111D776BAEA86E239182B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:69:5e:ab:bd:dd:14:d9:f3:54:84:1c:1c:27:
b0:57:b2:ef:13:1a:92:b0:af:7e:8c:ca:2a:58:18:
86:ff:0a:fd:c4:6f:2a:eb:f1:64:8b:a5:78:97:cd:
e0:29:02:b1:b4:d9:22:7b:26:20:22:2c:ef:ca:85:
24:ec:94:0f:5d:49:3b:08:15:68:d0:13:ef:11:0c:
46:fa:ff:7a:83:5b:5d:07:37:29:7c:1b:10:63:6d:
b0:97:20:16:20:e6:81:51:34:e7:0c:f9:10:4f:2c:
2d:02:30:41:16:3f:a0:64:b2:85:c0:f5:48:82:ba:
76:a5:d2:48:74:49:62:2d:56:d6:85:ae:dd:df:1c:
8f:e5:82:16:24:d8:ab:3a:d6:ab:0c:7d:19:6d:91:
b1:84:36:11:0c:c3:fa:30:f9:17:64:14:06:f4:31:
4b:8c:ea:f8:cb:b1:01:dd:4f:a2:2c:f4:4a:4a:e2:
1b:c8:e7:bc:96:89:d4:4b:06:ae:0a:9e:2b:79:65:
3a:1d:6d:c5:bb:aa:34:a4:62:e4:aa:bd:86:05:91:
85:fc:04:eb:a4:c8:5b:3b:cd:d6:3b:c0:31:0f:4b:
26:e2:b9:7c:6b:bb:6b:e9:3d:78:bc:7c:96:1a:b4:
7f:dd:76:df:e1:30:73:9a:d4:b1:1c:03:0c:87:98:
21:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4A:C7:5C:75:6F:C3:66:88:A1:11:D7:76:BA:EA:86:E2:39:18:2B
X509v3 Authority Key Identifier:
keyid:90:09:55:D0:36:E6:9C:30:A9:CA:1C:72:FA:F3:2A:89:14:25:3B:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/kAlV0DbmnDCpyhxy-vMqiRQlO08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kAlV0DbmnDCpyhxy-vMqiRQlO08.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/kAlV0DbmnDCpyhxy-vMqiRQlO08.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:38:2a:e8:30:d6:f8:b4:15:98:1a:c2:fe:dc:59:d3:66:f1:
b7:83:bb:20:b9:c5:b0:cd:1c:97:79:46:20:f6:7a:26:4c:02:
52:f3:0f:de:a8:f5:db:f5:6f:51:e7:d3:d4:40:92:da:21:51:
09:8a:c4:1c:91:27:e4:05:14:f4:5f:8d:52:50:a6:5f:96:ee:
be:70:d9:28:47:f2:b9:62:f0:a4:bb:a5:92:1e:03:53:e0:a7:
d1:ff:11:98:e2:7c:28:38:77:e5:4d:0a:d3:77:9f:09:55:3e:
22:3e:2b:f5:14:aa:0e:31:7d:73:2b:8c:f1:14:5f:38:dc:d8:
96:a0:57:12:07:3b:fb:24:f3:4f:ed:ad:8f:ae:44:ea:52:f4:
a8:8d:b5:ec:51:09:a8:8b:af:19:70:52:1d:8e:24:f0:fa:82:
c4:16:a9:8f:e5:a3:37:99:24:02:e2:d6:0f:1a:0d:56:33:d6:
74:9b:23:2d:10:ee:40:12:68:7b:5f:5d:d3:94:4e:80:96:8b:
3a:5a:22:1f:b8:0c:f5:60:30:d1:bc:d0:5b:6d:4f:a0:bb:f4:
38:a2:50:1f:dc:10:90:63:a9:05:40:6b:1e:2d:ca:4f:1b:fd:
b4:9e:65:8d:60:7d:f9:5e:13:75:9d:fb:bb:8e:ba:dc:91:74:
f8:97:8e:b3
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBhwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTAw
OTU1RDAzNkU2OUMzMEE5Q0ExQzcyRkFGMzJBODkxNDI1M0I0RjAeFw0yNTAzMjkx
MDI4MzVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDE0NEFDNzVDNzU2RkMz
NjY4OEExMTFENzc2QkFFQTg2RTIzOTE4MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDxaV6rvd0U2fNUhBwcJ7BXsu8TGpKwr36MyipYGIb/Cv3Ebyrr
8WSLpXiXzeApArG02SJ7JiAiLO/KhSTslA9dSTsIFWjQE+8RDEb6/3qDW10HNyl8
GxBjbbCXIBYg5oFRNOcM+RBPLC0CMEEWP6BksoXA9UiCunal0kh0SWItVtaFrt3f
HI/lghYk2Ks61qsMfRltkbGENhEMw/ow+RdkFAb0MUuM6vjLsQHdT6Is9EpK4hvI
57yWidRLBq4Knit5ZTodbcW7qjSkYuSqvYYFkYX8BOukyFs7zdY7wDEPSybiuXxr
u2vpPXi8fJYatH/ddt/hMHOa1LEcAwyHmCFPAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUFErHXHVvw2aIoRHXdrrqhuI5GCswHwYDVR0jBBgwFoAUkAlV0DbmnDCpyhxy
+vMqiRQlO08wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2
OC9rQWxWMERibW5EQ3B5aHh5LXZNcWlSUWxPMDguY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2tBbFYwRGJtbkRDcHloeHktdk1xaVJRbE8wOC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjgva0FsVjBEYm1uRENw
eWh4eS12TXFpUlFsTzA4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAMQ4Kugw1vi0FZgawv7cWdNm8beDuyC5xbDNHJd5RiD2eiZMAlLzD96o9dv1
b1Hn09RAktohUQmKxByRJ+QFFPRfjVJQpl+W7r5w2ShH8rli8KS7pZIeA1Pgp9H/
EZjifCg4d+VNCtN3nwlVPiI+K/UUqg4xfXMrjPEUXzjc2JagVxIHO/sk80/trY+u
ROpS9KiNtexRCaiLrxlwUh2OJPD6gsQWqY/lozeZJALi1g8aDVYz1nSbIy0Q7kAS
aHtfXdOUToCWizpaIh+4DPVgMNG80FttT6C79DiiUB/cEJBjqQVAax4tyk8b/bSe
ZY1gffleE3Wd+7uOutyRdPiXjrM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:38 2025 by rpki-client