Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3276/nLvcfdaWZoc5BMwxZuPrC0W0KJA.mft
File: nLvcfdaWZoc5BMwxZuPrC0W0KJA.mft (raw, json)
Hash identifier: DNgVnSEZIjq7oilP84g1Ycg381fYqrGvM32jxKuf/Ng=
Subject key identifier: DB:8C:29:CD:FC:A2:83:85:EF:7F:BE:E3:D3:F7:B3:69:54:4B:36:8A
Authority key identifier: 9C:BB:DC:7D:D6:96:66:87:39:04:CC:31:66:E3:EB:0B:45:B4:28:90
Certificate issuer: /CN=9CBBDC7DD69666873904CC3166E3EB0B45B42890
Certificate serial: 06AC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nLvcfdaWZoc5BMwxZuPrC0W0KJA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/nLvcfdaWZoc5BMwxZuPrC0W0KJA.mft
Manifest number: 06AC
Signing time: Fri 21 Mar 2025 00:27:08 +0000
Manifest this update: Fri 21 Mar 2025 00:27:08 +0000
Manifest next update: Fri 21 Mar 2025 06:27:08 +0000
Files and hashes: 1: nLvcfdaWZoc5BMwxZuPrC0W0KJA.crl (hash: jQbcIp7uKcBRahf8QRRio5PlM/QT+ln/nCZCIFg0/kk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1708 (0x6ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CBBDC7DD69666873904CC3166E3EB0B45B42890
Validity
Not Before: Mar 21 00:27:08 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DB8C29CDFCA28385EF7FBEE3D3F7B369544B368A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:45:d7:e8:ed:8d:ad:45:8a:b7:61:5e:6a:
ee:ed:ac:2c:92:a5:f0:9d:ca:4f:a5:06:a3:78:22:
84:e1:72:5f:38:f5:f0:e5:c2:da:0a:f1:25:82:79:
51:92:93:c1:19:31:ce:8e:69:7c:d7:fc:bd:2e:f8:
9e:4c:5e:1f:28:5f:02:c6:58:b7:49:cd:fe:66:ed:
87:e9:d4:be:fb:38:e3:42:ac:dc:58:ed:92:ca:09:
a6:01:85:c0:68:cf:be:4b:28:12:db:77:14:cc:ed:
a6:92:90:d7:d8:d2:ea:ca:0d:7f:25:c4:d9:08:ae:
73:44:07:01:e4:a9:cc:ac:94:5a:2a:58:a5:b8:b9:
04:d2:e5:55:f9:32:2b:47:dd:aa:03:86:06:ef:46:
43:ef:c9:4b:e1:af:5e:07:b4:47:6b:15:a7:7f:ee:
04:f6:14:5c:1c:be:f8:08:69:31:f4:53:c8:7c:6b:
66:50:30:48:d4:4c:d2:61:0e:3e:f0:ba:9b:da:9a:
1d:f8:f0:79:ea:de:4c:1c:4c:6b:d4:12:9e:59:00:
2a:f0:14:b7:28:1f:ea:e8:6f:74:ce:4e:4e:f7:fd:
f2:5a:bd:8c:51:27:8b:e3:50:2f:71:66:8f:54:13:
3c:cd:14:ff:27:f3:92:68:1a:90:49:c1:f9:53:20:
11:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8C:29:CD:FC:A2:83:85:EF:7F:BE:E3:D3:F7:B3:69:54:4B:36:8A
X509v3 Authority Key Identifier:
keyid:9C:BB:DC:7D:D6:96:66:87:39:04:CC:31:66:E3:EB:0B:45:B4:28:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/nLvcfdaWZoc5BMwxZuPrC0W0KJA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nLvcfdaWZoc5BMwxZuPrC0W0KJA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/nLvcfdaWZoc5BMwxZuPrC0W0KJA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:72:15:ad:40:57:ac:a8:a6:73:ef:3e:46:72:8c:90:a4:aa:
c7:92:c6:88:70:e2:84:2e:82:ba:27:a6:64:29:94:97:b6:e7:
82:c5:a3:d2:aa:6e:82:5e:98:e8:60:48:09:ba:f8:7d:e7:6e:
ec:dd:6c:97:c2:83:46:c8:14:79:57:c8:84:5b:46:a7:08:25:
6c:98:5d:67:09:da:3b:55:20:d1:11:07:5e:17:63:c5:c3:cb:
ef:48:1a:5c:c0:4f:e5:4c:1a:0a:e5:30:6c:49:ec:bf:90:7e:
94:66:d3:b0:6b:f2:df:80:ac:09:9a:c6:21:b5:11:da:8f:c6:
09:76:96:cf:ae:37:7e:9e:cd:f3:7e:11:68:14:f8:16:4f:5c:
6f:05:0a:af:80:ef:ba:67:63:5e:5e:62:e0:c2:28:9c:7f:73:
ce:e5:3b:b8:97:ef:58:3e:b7:bc:1f:4f:2d:12:46:ba:62:79:
7d:88:7b:09:2d:a5:b2:29:9a:c9:da:a5:0c:e5:58:b0:d1:2a:
97:22:0c:fa:32:6c:6b:be:4b:72:1a:f0:a9:1a:89:e3:9f:ac:
ad:4b:86:b8:db:da:78:57:1e:b2:3d:b5:91:2b:65:4f:22:36:
ed:0e:df:ae:da:cd:3f:db:ad:e1:65:69:be:f1:37:8f:a0:64:
b1:13:7c:24
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBqwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUNC
QkRDN0RENjk2NjY4NzM5MDRDQzMxNjZFM0VCMEI0NUI0Mjg5MDAeFw0yNTAzMjEw
MDI3MDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKERCOEMyOUNERkNBMjgz
ODVFRjdGQkVFM0QzRjdCMzY5NTQ0QjM2OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCH0XX6O2NrUWKt2Feau7trCySpfCdyk+lBqN4IoThcl849fDl
wtoK8SWCeVGSk8EZMc6OaXzX/L0u+J5MXh8oXwLGWLdJzf5m7Yfp1L77OONCrNxY
7ZLKCaYBhcBoz75LKBLbdxTM7aaSkNfY0urKDX8lxNkIrnNEBwHkqcyslFoqWKW4
uQTS5VX5MitH3aoDhgbvRkPvyUvhr14HtEdrFad/7gT2FFwcvvgIaTH0U8h8a2ZQ
MEjUTNJhDj7wupvamh348Hnq3kwcTGvUEp5ZACrwFLcoH+rob3TOTk73/fJavYxR
J4vjUC9xZo9UEzzNFP8n85JoGpBJwflTIBHBAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU24wpzfyig4Xvf77j0/ezaVRLNoowHwYDVR0jBBgwFoAUnLvcfdaWZoc5BMwx
ZuPrC0W0KJAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3
Ni9uTHZjZmRhV1pvYzVCTXd4WnVQckMwVzBLSkEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL25MdmNmZGFXWm9jNUJNd3hadVByQzBXMEtKQS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzYvbkx2Y2ZkYVdab2M1
Qk13eFp1UHJDMFcwS0pBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBALdyFa1AV6yopnPvPkZyjJCkqseSxohw4oQugronpmQplJe254LFo9KqboJe
mOhgSAm6+H3nbuzdbJfCg0bIFHlXyIRbRqcIJWyYXWcJ2jtVINERB14XY8XDy+9I
GlzAT+VMGgrlMGxJ7L+QfpRm07Br8t+ArAmaxiG1EdqPxgl2ls+uN36ezfN+EWgU
+BZPXG8FCq+A77pnY15eYuDCKJx/c87lO7iX71g+t7wfTy0SRrpieX2IewktpbIp
msnapQzlWLDRKpciDPoybGu+S3Ia8KkaieOfrK1Lhrjb2nhXHrI9tZErZU8iNu0O
367azT/breFlab7xN4+gZLETfCQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:18 2025 by rpki-client