Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3269/KiJnreDthkvp9oLDpe2qFRu6hmQ.mft
File: KiJnreDthkvp9oLDpe2qFRu6hmQ.mft (raw, json)
Hash identifier: 0jjJyWToqPPbjhuoMnKdiKMj1EBfyG28UKwh/cmS+5E=
Subject key identifier: 9D:B8:B3:1D:70:A0:9D:50:14:14:79:71:2B:74:C8:29:C7:59:61:89
Authority key identifier: 2A:22:67:AD:E0:ED:86:4B:E9:F6:82:C3:A5:ED:AA:15:1B:BA:86:64
Certificate issuer: /CN=2A2267ADE0ED864BE9F682C3A5EDAA151BBA8664
Certificate serial: 07A1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KiJnreDthkvp9oLDpe2qFRu6hmQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/KiJnreDthkvp9oLDpe2qFRu6hmQ.mft
Manifest number: 07A1
Signing time: Fri 04 Apr 2025 19:08:40 +0000
Manifest this update: Fri 04 Apr 2025 19:08:40 +0000
Manifest next update: Sat 05 Apr 2025 01:08:40 +0000
Files and hashes: 1: KiJnreDthkvp9oLDpe2qFRu6hmQ.crl (hash: HP3cUV0irhG3SjiUK9P1vRassXZ41XdYB8vensoVw1E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1953 (0x7a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2267ADE0ED864BE9F682C3A5EDAA151BBA8664
Validity
Not Before: Apr 4 19:08:40 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9DB8B31D70A09D50141479712B74C829C7596189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fe:f4:b4:fc:14:06:23:af:c2:7f:14:0d:38:
0c:fa:8f:a1:9f:f8:90:2d:50:98:3c:36:e2:7a:9e:
07:98:0c:ec:e3:4b:b0:7c:f6:62:11:04:69:1b:2b:
39:07:4d:56:32:8f:78:5c:53:35:eb:b1:24:d1:cd:
74:3f:1c:33:ec:0e:b5:1c:f2:ea:24:02:65:29:54:
9a:20:01:8e:25:a7:90:a0:1d:dc:6c:9c:b5:71:fd:
af:cf:07:dd:0e:5d:13:d1:7b:cd:5d:f0:d5:aa:67:
82:8e:db:33:c0:b2:99:6a:93:53:e4:da:7e:2c:a5:
5b:05:94:38:51:fc:96:7c:2b:6f:c9:3a:9e:95:05:
ef:90:9d:13:de:47:31:13:cf:dc:dd:bb:02:a1:f4:
6a:93:a8:67:3b:da:05:ba:6b:e5:b7:09:54:c8:10:
04:80:59:11:39:be:fb:d9:51:cf:d5:b4:bb:1e:3a:
f4:8d:ba:02:7b:9d:a9:93:6e:8d:ed:a9:f3:dc:97:
ef:ac:17:ad:e0:17:be:22:24:b8:0a:60:e7:8c:f9:
e0:ab:58:cf:be:b3:fd:c8:b7:04:8b:df:3b:26:bf:
7e:79:78:e0:fd:f6:e0:fb:79:ee:88:52:dc:aa:23:
1c:53:f2:83:a0:a9:7b:ca:10:00:1a:5b:72:e9:09:
13:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B8:B3:1D:70:A0:9D:50:14:14:79:71:2B:74:C8:29:C7:59:61:89
X509v3 Authority Key Identifier:
keyid:2A:22:67:AD:E0:ED:86:4B:E9:F6:82:C3:A5:ED:AA:15:1B:BA:86:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/KiJnreDthkvp9oLDpe2qFRu6hmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KiJnreDthkvp9oLDpe2qFRu6hmQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/KiJnreDthkvp9oLDpe2qFRu6hmQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:af:3c:45:8a:d2:63:02:6c:a9:be:56:1e:8b:75:d3:03:97:
ce:54:9b:83:d1:45:e6:4b:00:ee:e8:d6:17:ee:5a:cc:7d:a1:
b0:ec:06:af:50:6c:07:74:64:f3:0d:15:c0:85:88:6f:f8:74:
71:97:fc:90:c0:57:11:33:4d:b8:cf:94:26:fe:64:ee:8f:27:
fa:36:da:68:e2:df:9e:ed:29:a4:e6:de:e8:82:6a:48:a4:d2:
b2:28:1d:3e:0f:29:86:de:2d:67:d6:ef:ab:45:6e:7c:ed:c5:
79:f6:bf:c0:ed:d8:d7:53:40:5b:12:2d:54:9d:35:eb:0b:49:
bf:3c:2b:1b:3e:6a:11:41:bc:0e:06:f1:f3:6a:c0:67:72:84:
6e:e2:cc:66:71:c8:ae:32:83:82:8b:a1:4e:6f:1a:ae:df:6b:
c4:8f:f7:af:34:ba:97:d4:14:7b:11:41:ea:8b:c1:80:8c:b4:
54:78:2f:ae:41:de:a9:16:a6:ca:3c:5b:07:c8:d9:76:fc:57:
37:71:04:02:9b:26:61:c2:6b:71:f1:5f:64:57:57:90:60:dc:
b7:42:59:da:91:7a:6d:4c:9d:b0:ba:52:ea:d1:13:e5:cc:54:
95:ad:dd:db:1e:29:0c:53:4a:61:c1:ce:e4:79:6a:63:a9:4f:
87:9a:ab:c4
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICB6EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkEy
MjY3QURFMEVEODY0QkU5RjY4MkMzQTVFREFBMTUxQkJBODY2NDAeFw0yNTA0MDQx
OTA4NDBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDlEQjhCMzFENzBBMDlE
NTAxNDE0Nzk3MTJCNzRDODI5Qzc1OTYxODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDr/vS0/BQGI6/CfxQNOAz6j6Gf+JAtUJg8NuJ6ngeYDOzjS7B8
9mIRBGkbKzkHTVYyj3hcUzXrsSTRzXQ/HDPsDrUc8uokAmUpVJogAY4lp5CgHdxs
nLVx/a/PB90OXRPRe81d8NWqZ4KO2zPAsplqk1Pk2n4spVsFlDhR/JZ8K2/JOp6V
Be+QnRPeRzETz9zduwKh9GqTqGc72gW6a+W3CVTIEASAWRE5vvvZUc/VtLseOvSN
ugJ7namTbo3tqfPcl++sF63gF74iJLgKYOeM+eCrWM++s/3ItwSL3zsmv355eOD9
9uD7ee6IUtyqIxxT8oOgqXvKEAAaW3LpCRMVAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUnbizHXCgnVAUFHlxK3TIKcdZYYkwHwYDVR0jBBgwFoAUKiJnreDthkvp9oLD
pe2qFRu6hmQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2
OS9LaUpucmVEdGhrdnA5b0xEcGUycUZSdTZobVEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0tpSm5yZUR0aGt2cDlvTERwZTJxRlJ1NmhtUS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjkvS2lKbnJlRHRoa3Zw
OW9MRHBlMnFGUnU2aG1RLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAC2vPEWK0mMCbKm+Vh6LddMDl85Um4PRReZLAO7o1hfuWsx9obDsBq9QbAd0
ZPMNFcCFiG/4dHGX/JDAVxEzTbjPlCb+ZO6PJ/o22mji357tKaTm3uiCakik0rIo
HT4PKYbeLWfW76tFbnztxXn2v8Dt2NdTQFsSLVSdNesLSb88Kxs+ahFBvA4G8fNq
wGdyhG7izGZxyK4yg4KLoU5vGq7fa8SP9680upfUFHsRQeqLwYCMtFR4L65B3qkW
pso8WwfI2Xb8VzdxBAKbJmHCa3HxX2RXV5Bg3LdCWdqRem1MnbC6UurRE+XMVJWt
3dseKQxTSmHBzuR5amOpT4eaq8Q=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:44 2025 by rpki-client