Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3292/cWhuC8YzZ_GWeISrs_G3FDUd7SQ.mft
File: cWhuC8YzZ_GWeISrs_G3FDUd7SQ.mft (raw, json)
Hash identifier: hJjMNhG0HIYpfW1B1IkD22ExMbzFApBTsCweqhQeBMI=
Subject key identifier: 95:C5:7C:B5:26:46:FB:36:82:F4:8E:D2:74:DB:8B:52:53:46:BA:8A
Authority key identifier: 71:68:6E:0B:C6:33:67:F1:96:78:84:AB:B3:F1:B7:14:35:1D:ED:24
Certificate issuer: /CN=71686E0BC63367F1967884ABB3F1B714351DED24
Certificate serial: 0568
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cWhuC8YzZ_GWeISrs_G3FDUd7SQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/cWhuC8YzZ_GWeISrs_G3FDUd7SQ.mft
Manifest number: 0568
Signing time: Fri 21 Mar 2025 00:28:19 +0000
Manifest this update: Fri 21 Mar 2025 00:28:19 +0000
Manifest next update: Fri 21 Mar 2025 06:28:19 +0000
Files and hashes: 1: cWhuC8YzZ_GWeISrs_G3FDUd7SQ.crl (hash: jgAxTsNcjZZMDw+IhaUHtllAvHEEyImW6JL9jJlyHKc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1384 (0x568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71686E0BC63367F1967884ABB3F1B714351DED24
Validity
Not Before: Mar 21 00:28:19 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=95C57CB52646FB3682F48ED274DB8B525346BA8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:df:8e:b0:ec:d1:a8:f3:3b:fa:5a:f1:e3:f1:
fc:ab:6b:75:8f:ed:fd:5d:6f:5a:be:d1:44:cc:12:
a3:e2:74:fc:d6:55:49:86:cb:89:9b:7b:89:d3:1f:
ef:dd:c5:8d:a1:61:6c:9f:6a:65:e7:c0:3c:13:66:
f4:aa:81:00:5b:ef:e9:4a:7e:d6:81:46:a0:64:63:
10:61:18:7a:56:87:4a:60:42:84:c4:72:50:ad:dd:
3b:fd:c2:83:c4:03:d9:95:10:e1:e0:95:a1:d5:c3:
b6:ec:75:c9:40:b3:68:1c:74:52:db:ca:77:ad:f4:
c3:0b:d5:e4:fe:ce:97:b2:b7:c3:57:2e:bf:b7:a6:
07:56:5e:c5:b9:54:ae:45:b7:b8:ba:10:41:f9:06:
ef:2c:b4:7d:bc:80:b3:7d:37:97:35:08:1a:74:2a:
3d:a3:2a:0d:23:2e:cc:c6:b6:45:de:ad:c3:85:87:
6c:38:43:8f:67:4b:17:ef:f9:99:60:25:cb:7d:f1:
35:84:b8:c3:86:9d:24:fe:06:b7:b1:33:87:6b:70:
98:e5:11:55:07:dd:96:eb:17:de:af:21:16:5d:a1:
06:36:70:97:da:87:c9:d6:2e:56:2e:da:c9:f3:96:
d9:6d:10:62:ab:ae:15:d3:32:3a:35:c5:83:23:d3:
86:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C5:7C:B5:26:46:FB:36:82:F4:8E:D2:74:DB:8B:52:53:46:BA:8A
X509v3 Authority Key Identifier:
keyid:71:68:6E:0B:C6:33:67:F1:96:78:84:AB:B3:F1:B7:14:35:1D:ED:24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/cWhuC8YzZ_GWeISrs_G3FDUd7SQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cWhuC8YzZ_GWeISrs_G3FDUd7SQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/cWhuC8YzZ_GWeISrs_G3FDUd7SQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:4f:1f:9a:4f:16:b3:0f:53:47:57:51:b3:7b:61:b6:86:a8:
be:f4:5f:7b:35:bd:16:46:ae:83:8a:ab:5a:70:e2:f4:7e:26:
71:28:ef:a6:2f:dd:ed:16:dd:f5:57:fc:67:04:2f:bc:c7:9f:
3a:f0:61:6f:1e:22:a2:4a:8e:45:36:81:93:78:5b:f2:47:bc:
99:b7:55:fb:64:95:fc:2c:fe:fa:e8:db:78:27:eb:c9:7c:05:
0e:b6:fe:fe:3f:52:25:e6:0c:bc:39:64:ec:fc:29:ee:10:b4:
cc:74:1d:e1:cb:95:21:f3:38:5c:14:fe:c7:1b:fa:66:f8:a7:
0c:a6:47:ca:21:06:3e:1f:2f:f1:31:82:31:a4:1c:e9:b0:10:
51:2a:e7:df:9e:76:fd:a3:f8:6d:34:04:6a:fc:d0:22:52:91:
7e:98:03:72:7f:9b:01:ba:e1:4b:c4:17:7b:ff:af:e2:89:8f:
27:73:ca:07:c2:31:21:5e:69:11:5e:c1:4e:93:df:5b:d4:06:
70:02:dd:85:04:42:33:a3:86:b9:26:64:20:b6:a1:2c:c8:5c:
20:97:2a:bc:97:82:73:fd:bb:13:ed:2a:31:2c:fc:4b:16:14:
86:57:e9:c7:a9:ee:da:06:da:44:53:b6:50:55:52:d5:72:35:
c5:eb:fa:b3
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBWgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzE2
ODZFMEJDNjMzNjdGMTk2Nzg4NEFCQjNGMUI3MTQzNTFERUQyNDAeFw0yNTAzMjEw
MDI4MTlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDk1QzU3Q0I1MjY0NkZC
MzY4MkY0OEVEMjc0REI4QjUyNTM0NkJBOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDI346w7NGo8zv6WvHj8fyra3WP7f1db1q+0UTMEqPidPzWVUmG
y4mbe4nTH+/dxY2hYWyfamXnwDwTZvSqgQBb7+lKftaBRqBkYxBhGHpWh0pgQoTE
clCt3Tv9woPEA9mVEOHglaHVw7bsdclAs2gcdFLbynet9MML1eT+zpeyt8NXLr+3
pgdWXsW5VK5Ft7i6EEH5Bu8stH28gLN9N5c1CBp0Kj2jKg0jLszGtkXercOFh2w4
Q49nSxfv+ZlgJct98TWEuMOGnST+BrexM4drcJjlEVUH3ZbrF96vIRZdoQY2cJfa
h8nWLlYu2snzltltEGKrrhXTMjo1xYMj04bxAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUlcV8tSZG+zaC9I7SdNuLUlNGuoowHwYDVR0jBBgwFoAUcWhuC8YzZ/GWeISr
s/G3FDUd7SQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5
Mi9jV2h1QzhZelpfR1dlSVNyc19HM0ZEVWQ3U1EuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2NXaHVDOFl6Wl9HV2VJU3JzX0czRkRVZDdTUS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTIvY1dodUM4WXpaX0dX
ZUlTcnNfRzNGRFVkN1NRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAIZPH5pPFrMPU0dXUbN7YbaGqL70X3s1vRZGroOKq1pw4vR+JnEo76Yv3e0W
3fVX/GcEL7zHnzrwYW8eIqJKjkU2gZN4W/JHvJm3Vftklfws/vro23gn68l8BQ62
/v4/UiXmDLw5ZOz8Ke4QtMx0HeHLlSHzOFwU/scb+mb4pwymR8ohBj4fL/ExgjGk
HOmwEFEq59+edv2j+G00BGr80CJSkX6YA3J/mwG64UvEF3v/r+KJjydzygfCMSFe
aRFewU6T31vUBnAC3YUEQjOjhrkmZCC2oSzIXCCXKryXgnP9uxPtKjEs/EsWFIZX
6cep7toG2kRTtlBVUtVyNcXr+rM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:32 2025 by rpki-client