Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3306/RBAtI7qVbpq1wyhz7kYy2T5P2-k.mft
File: RBAtI7qVbpq1wyhz7kYy2T5P2-k.mft (raw, json)
Hash identifier: 8NUp/RTa0zZ6zcJdEzPXyFfefu/CUWcMFalCtbpwNKY=
Subject key identifier: 96:5D:AA:48:54:B5:59:28:CD:A2:5F:51:C6:EC:DD:C2:AB:6B:31:5D
Authority key identifier: 44:10:2D:23:BA:95:6E:9A:B5:C3:28:73:EE:46:32:D9:3E:4F:DB:E9
Certificate issuer: /CN=44102D23BA956E9AB5C32873EE4632D93E4FDBE9
Certificate serial: 04E5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RBAtI7qVbpq1wyhz7kYy2T5P2-k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/RBAtI7qVbpq1wyhz7kYy2T5P2-k.mft
Manifest number: 04E5
Signing time: Sat 29 Mar 2025 10:32:12 +0000
Manifest this update: Sat 29 Mar 2025 10:32:12 +0000
Manifest next update: Sat 29 Mar 2025 16:32:12 +0000
Files and hashes: 1: RBAtI7qVbpq1wyhz7kYy2T5P2-k.crl (hash: ME3NAPF5h7u5yWzBAyWs1VrBMSeJ6njuVD9bEKfdZIE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1253 (0x4e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44102D23BA956E9AB5C32873EE4632D93E4FDBE9
Validity
Not Before: Mar 29 10:32:12 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=965DAA4854B55928CDA25F51C6ECDDC2AB6B315D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3b:2a:c0:63:43:33:68:45:08:82:ca:c2:a0:
51:b5:e8:7a:1f:b3:51:96:2e:95:ad:80:41:1d:a4:
18:78:c8:12:7d:24:cb:44:c7:01:03:53:56:c4:06:
0a:46:c5:c1:68:9c:5b:ce:ed:6c:37:fc:87:83:46:
78:77:47:58:3f:19:54:26:a6:4a:76:09:46:ac:1c:
8a:8d:f5:f9:24:27:22:27:31:2d:ed:14:82:5e:c0:
10:46:b2:82:8f:34:b2:85:7a:10:60:8d:81:68:5b:
26:25:a3:d1:cf:e0:1e:1c:26:f7:4e:c9:c3:b7:14:
f0:53:d0:42:a1:da:2b:2a:05:ca:4a:c4:2d:03:21:
2c:04:8b:85:07:69:2c:84:9b:bf:47:af:3d:d6:61:
95:11:97:aa:c1:ac:2a:95:63:67:5c:d7:57:3e:8b:
02:f5:35:9d:d9:91:2f:61:50:d4:8d:56:82:ff:40:
1b:a0:4a:84:c6:3f:24:ec:28:77:d5:cb:8e:44:f8:
a4:21:cd:2e:64:24:82:98:dd:c6:4d:e8:64:9b:61:
df:e5:ae:da:7d:58:6b:4e:58:11:f1:72:43:a3:00:
2e:84:35:f8:54:de:5c:4c:d6:b0:aa:92:1b:f6:1d:
0f:0f:9e:f3:b2:24:a4:2d:d7:93:4f:97:15:df:85:
a4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5D:AA:48:54:B5:59:28:CD:A2:5F:51:C6:EC:DD:C2:AB:6B:31:5D
X509v3 Authority Key Identifier:
keyid:44:10:2D:23:BA:95:6E:9A:B5:C3:28:73:EE:46:32:D9:3E:4F:DB:E9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/RBAtI7qVbpq1wyhz7kYy2T5P2-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RBAtI7qVbpq1wyhz7kYy2T5P2-k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/RBAtI7qVbpq1wyhz7kYy2T5P2-k.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:96:3d:14:24:01:e8:a8:c0:25:4e:8f:89:c5:00:6f:81:d3:
f0:ac:0a:b0:ee:94:c8:ec:44:75:39:06:17:10:cb:17:b4:4a:
af:86:af:a8:e7:d1:b7:51:7e:37:63:08:da:a5:bb:ce:93:6c:
f8:73:7c:ac:40:56:f2:db:e8:b0:15:ad:a9:62:3f:b9:67:8a:
3f:f5:b6:0d:66:48:f6:74:b6:40:a8:0e:49:12:b0:29:4f:3d:
43:0b:cc:ca:57:ed:06:80:0b:69:9a:17:0f:c1:23:ec:63:8d:
99:0b:32:06:ca:fe:cc:65:b6:88:8a:54:37:af:13:74:5e:ab:
46:15:a1:87:05:39:3b:09:51:4c:9b:7c:aa:c2:bf:43:7b:df:
3d:32:4d:56:4e:a7:cd:12:b3:8a:64:9b:09:db:16:01:4d:2d:
7b:54:35:05:a7:45:79:1c:5c:8d:08:be:89:70:88:17:1b:17:
4f:61:f0:ec:ee:d6:7e:5e:49:73:5d:ef:c0:36:40:46:a5:cf:
45:4c:07:32:18:ac:f8:f9:e6:95:27:d2:fd:1a:bc:7d:cc:c5:
1d:5a:6c:f3:21:91:ec:95:33:b9:2f:40:95:a1:1a:0f:66:f3:
60:39:dd:3c:c7:8c:d9:d6:83:47:cd:5c:50:37:12:0c:05:5e:
23:d8:2e:0a
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBOUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQx
MDJEMjNCQTk1NkU5QUI1QzMyODczRUU0NjMyRDkzRTRGREJFOTAeFw0yNTAzMjkx
MDMyMTJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDk2NURBQTQ4NTRCNTU5
MjhDREEyNUY1MUM2RUNEREMyQUI2QjMxNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQOyrAY0MzaEUIgsrCoFG16Hofs1GWLpWtgEEdpBh4yBJ9JMtE
xwEDU1bEBgpGxcFonFvO7Ww3/IeDRnh3R1g/GVQmpkp2CUasHIqN9fkkJyInMS3t
FIJewBBGsoKPNLKFehBgjYFoWyYlo9HP4B4cJvdOycO3FPBT0EKh2isqBcpKxC0D
ISwEi4UHaSyEm79Hrz3WYZURl6rBrCqVY2dc11c+iwL1NZ3ZkS9hUNSNVoL/QBug
SoTGPyTsKHfVy45E+KQhzS5kJIKY3cZN6GSbYd/lrtp9WGtOWBHxckOjAC6ENfhU
3lxM1rCqkhv2HQ8PnvOyJKQt15NPlxXfhaTtAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUll2qSFS1WSjNol9RxuzdwqtrMV0wHwYDVR0jBBgwFoAURBAtI7qVbpq1wyhz
7kYy2T5P2+kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw
Ni9SQkF0STdxVmJwcTF3eWh6N2tZeTJUNVAyLWsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1JCQXRJN3FWYnBxMXd5aHo3a1l5MlQ1UDItay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDYvUkJBdEk3cVZicHEx
d3loejdrWXkyVDVQMi1rLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAG6WPRQkAeiowCVOj4nFAG+B0/CsCrDulMjsRHU5BhcQyxe0Sq+Gr6jn0bdR
fjdjCNqlu86TbPhzfKxAVvLb6LAVraliP7lnij/1tg1mSPZ0tkCoDkkSsClPPUML
zMpX7QaAC2maFw/BI+xjjZkLMgbK/sxltoiKVDevE3Req0YVoYcFOTsJUUybfKrC
v0N73z0yTVZOp80Ss4pkmwnbFgFNLXtUNQWnRXkcXI0IvolwiBcbF09h8Ozu1n5e
SXNd78A2QEalz0VMBzIYrPj55pUn0v0avH3MxR1abPMhkeyVM7kvQJWhGg9m82A5
3TzHjNnWg0fNXFA3EgwFXiPYLgo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:15 2025 by rpki-client