Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3317/zLJsi7E6Na35sNYKu5OF0hBqWSI.mft
File: zLJsi7E6Na35sNYKu5OF0hBqWSI.mft (raw, json)
Hash identifier: zok5NubNTnCL1TVIr6/Fz6+L95bgTTTIxjBNEh88HDs=
Subject key identifier: 78:A0:9E:B1:40:D0:5D:3D:DF:BC:E2:F7:DE:E8:C3:80:18:72:F0:0E
Authority key identifier: CC:B2:6C:8B:B1:3A:35:AD:F9:B0:D6:0A:BB:93:85:D2:10:6A:59:22
Certificate issuer: /CN=CCB26C8BB13A35ADF9B0D60ABB9385D2106A5922
Certificate serial: 03CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zLJsi7E6Na35sNYKu5OF0hBqWSI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/zLJsi7E6Na35sNYKu5OF0hBqWSI.mft
Manifest number: 03CC
Signing time: Fri 21 Mar 2025 00:27:17 +0000
Manifest this update: Fri 21 Mar 2025 00:27:17 +0000
Manifest next update: Fri 21 Mar 2025 06:27:17 +0000
Files and hashes: 1: zLJsi7E6Na35sNYKu5OF0hBqWSI.crl (hash: QWC5fs1gjuKIuPX1ACQIqUcT9sU/sJM54nsSLA1rkss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 972 (0x3cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB26C8BB13A35ADF9B0D60ABB9385D2106A5922
Validity
Not Before: Mar 21 00:27:17 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=78A09EB140D05D3DDFBCE2F7DEE8C3801872F00E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:11:86:a0:84:d5:2c:13:7f:50:7a:e3:3d:c5:
7c:ed:41:d0:0c:0e:b8:e0:70:16:fb:bd:d6:ee:1e:
20:9c:cb:83:aa:9e:99:3a:6f:48:63:85:9f:b2:ba:
d8:f1:97:c6:25:e2:b6:9a:6a:2d:a5:db:09:b9:47:
ca:d1:df:14:76:fc:d6:68:74:22:be:db:4a:32:fa:
a1:08:b8:a5:d1:17:b0:39:04:1c:52:8d:41:fd:1f:
d9:c9:f3:4d:60:cd:24:a9:4e:6b:1e:f1:16:bf:fc:
5c:84:27:32:4d:e6:d3:38:ae:9c:38:71:2f:64:45:
37:81:3a:76:45:c8:8b:9d:0e:f9:91:57:40:60:a7:
dd:19:39:9d:ed:c7:11:1e:1f:6b:23:57:34:ca:97:
ce:9a:b8:4f:6e:43:44:00:10:0c:a1:25:2b:1e:fa:
86:0f:1f:40:9c:77:56:ee:2a:50:97:9e:88:c6:1a:
b8:96:a2:89:ea:e2:f1:0e:30:8e:4e:9a:ed:42:f9:
67:a6:ff:d8:56:87:74:58:1c:06:c6:d2:9a:3c:67:
2b:0f:2c:0d:53:74:e5:3d:e1:f7:6d:80:17:59:c6:
19:8d:85:a4:5e:d1:e5:d4:35:f5:2e:52:66:0f:a0:
5c:e8:e5:10:76:a5:b1:65:ac:fc:b9:a2:fc:c1:02:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A0:9E:B1:40:D0:5D:3D:DF:BC:E2:F7:DE:E8:C3:80:18:72:F0:0E
X509v3 Authority Key Identifier:
keyid:CC:B2:6C:8B:B1:3A:35:AD:F9:B0:D6:0A:BB:93:85:D2:10:6A:59:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/zLJsi7E6Na35sNYKu5OF0hBqWSI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zLJsi7E6Na35sNYKu5OF0hBqWSI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/zLJsi7E6Na35sNYKu5OF0hBqWSI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:74:cd:db:a1:7b:c3:0b:c8:a1:9f:8f:1f:d2:91:b2:d5:fb:
99:04:42:f6:a3:77:da:93:9b:e4:07:03:6d:80:d6:53:a9:4e:
67:57:22:39:f6:28:1b:04:3b:c8:34:44:86:dd:c6:97:0a:a5:
6b:53:5d:e5:6f:9a:cc:e6:cf:24:10:1a:a0:61:e2:62:0e:0d:
ee:ce:a1:76:84:2c:b3:69:8e:64:06:61:b9:5a:72:25:b9:36:
48:61:88:bc:73:b0:d2:6f:b6:3d:f9:d2:6e:d8:94:d3:7f:bc:
86:33:d8:77:e2:3d:60:6c:00:ed:fc:6a:62:10:8d:b2:44:58:
48:17:88:8e:28:65:7c:59:da:b6:b4:45:c7:15:c3:26:0a:e0:
f4:bc:bc:77:c8:80:61:ff:80:4b:58:88:bc:67:99:77:b9:24:
6e:17:da:a5:cf:ba:dd:00:6d:ac:eb:36:2f:2f:23:96:3b:44:
b0:25:23:d0:9e:06:57:db:66:ee:9a:3a:9f:16:c4:b4:20:26:
4c:1b:12:23:ce:fb:7b:72:d6:a5:33:60:49:e5:53:15:24:2c:
7a:e0:49:a0:c9:40:c9:bb:7d:30:cb:3a:32:4e:f3:02:54:41:
9d:e9:d8:2e:5f:fc:9c:7e:a6:26:5a:3f:7d:f1:fe:b0:01:00:
11:b0:5e:29
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICA8wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC
MjZDOEJCMTNBMzVBREY5QjBENjBBQkI5Mzg1RDIxMDZBNTkyMjAeFw0yNTAzMjEw
MDI3MTdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDc4QTA5RUIxNDBEMDVE
M0RERkJDRTJGN0RFRThDMzgwMTg3MkYwMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXEYaghNUsE39QeuM9xXztQdAMDrjgcBb7vdbuHiCcy4Oqnpk6
b0hjhZ+yutjxl8Yl4raaai2l2wm5R8rR3xR2/NZodCK+20oy+qEIuKXRF7A5BBxS
jUH9H9nJ801gzSSpTmse8Ra//FyEJzJN5tM4rpw4cS9kRTeBOnZFyIudDvmRV0Bg
p90ZOZ3txxEeH2sjVzTKl86auE9uQ0QAEAyhJSse+oYPH0Ccd1buKlCXnojGGriW
oonq4vEOMI5Omu1C+Wem/9hWh3RYHAbG0po8ZysPLA1TdOU94fdtgBdZxhmNhaRe
0eXUNfUuUmYPoFzo5RB2pbFlrPy5ovzBAgHVAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUeKCesUDQXT3fvOL33ujDgBhy8A4wHwYDVR0jBBgwFoAUzLJsi7E6Na35sNYK
u5OF0hBqWSIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx
Ny96TEpzaTdFNk5hMzVzTllLdTVPRjBoQnFXU0kuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3pMSnNpN0U2TmEzNXNOWUt1NU9GMGhCcVdTSS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTcvekxKc2k3RTZOYTM1
c05ZS3U1T0YwaEJxV1NJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBADx0zduhe8MLyKGfjx/SkbLV+5kEQvajd9qTm+QHA22A1lOpTmdXIjn2KBsE
O8g0RIbdxpcKpWtTXeVvmszmzyQQGqBh4mIODe7OoXaELLNpjmQGYblaciW5Nkhh
iLxzsNJvtj350m7YlNN/vIYz2HfiPWBsAO38amIQjbJEWEgXiI4oZXxZ2ra0RccV
wyYK4PS8vHfIgGH/gEtYiLxnmXe5JG4X2qXPut0AbazrNi8vI5Y7RLAlI9CeBlfb
Zu6aOp8WxLQgJkwbEiPO+3ty1qUzYEnlUxUkLHrgSaDJQMm7fTDLOjJO8wJUQZ3p
2C5f/Jx+piZaP33x/rABABGwXik=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:26:20 2025 by rpki-client