Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3325/Q3WRJmNI_24_oCHG3ObF0AlG6nY.mft
File: Q3WRJmNI_24_oCHG3ObF0AlG6nY.mft (raw, json)
Hash identifier: QVw7LyktfPTvkQ20vNT00ESzjh+xI1Yqis+flsW7IN8=
Subject key identifier: E3:7C:0C:4C:0D:A4:D2:DF:D7:7A:FB:8F:F7:63:C6:2C:FD:42:53:5F
Authority key identifier: 43:75:91:26:63:48:FF:6E:3F:A0:21:C6:DC:E6:C5:D0:09:46:EA:76
Certificate issuer: /CN=437591266348FF6E3FA021C6DCE6C5D00946EA76
Certificate serial: 02DA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q3WRJmNI_24_oCHG3ObF0AlG6nY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3325/Q3WRJmNI_24_oCHG3ObF0AlG6nY.mft
Manifest number: 02DA
Signing time: Fri 21 Mar 2025 00:31:34 +0000
Manifest this update: Fri 21 Mar 2025 00:31:34 +0000
Manifest next update: Fri 21 Mar 2025 06:31:34 +0000
Files and hashes: 1: Q3WRJmNI_24_oCHG3ObF0AlG6nY.crl (hash: CT8mKkiXhR8IoIo8kmng7lAccVfFUt7Dy1ccW6ZpWTM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 730 (0x2da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437591266348FF6E3FA021C6DCE6C5D00946EA76
Validity
Not Before: Mar 21 00:31:34 2025 GMT
Not After : Oct 25 01:36:21 2025 GMT
Subject: CN=E37C0C4C0DA4D2DFD77AFB8FF763C62CFD42535F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:23:a3:b0:5b:9e:d4:20:b6:f4:f6:06:ac:
cd:d7:db:b5:1b:39:25:a8:79:90:57:a9:41:99:52:
71:73:3e:05:8e:ad:ea:9c:94:93:d4:ce:3a:78:46:
90:4b:14:37:0f:45:7d:18:4c:41:b6:73:72:88:05:
99:a2:7b:68:ee:f0:0d:a2:c9:ff:2c:7b:4b:b4:e4:
f2:58:64:e7:73:19:df:ea:d5:f6:3b:24:30:2d:42:
47:de:9b:08:26:9f:1a:b7:a1:43:87:5d:d2:ba:79:
4e:3f:0b:04:e0:e7:16:09:83:16:f8:03:54:41:32:
c0:7e:90:fd:a7:8f:09:96:77:77:59:47:56:5a:19:
2a:c0:ea:65:b9:70:02:89:96:22:e3:67:aa:94:ef:
61:db:af:35:90:ad:25:65:8c:5a:b0:8c:71:41:6b:
7b:04:20:18:48:22:23:5a:0f:24:dd:8f:c6:bf:b5:
78:6a:47:d0:e7:a0:fd:49:87:05:2c:1f:bb:42:4c:
fd:4d:a6:71:d6:0b:b4:18:12:ec:72:29:c9:a3:d0:
8b:1b:2a:d6:e1:1a:5e:10:24:e0:96:0e:34:83:7b:
09:92:6d:4e:2d:0e:ed:f2:2c:48:0f:48:05:c8:e3:
ce:5c:fe:81:63:4d:10:ad:bf:d6:27:cb:27:c5:2f:
52:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7C:0C:4C:0D:A4:D2:DF:D7:7A:FB:8F:F7:63:C6:2C:FD:42:53:5F
X509v3 Authority Key Identifier:
keyid:43:75:91:26:63:48:FF:6E:3F:A0:21:C6:DC:E6:C5:D0:09:46:EA:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3325/Q3WRJmNI_24_oCHG3ObF0AlG6nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q3WRJmNI_24_oCHG3ObF0AlG6nY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3325/Q3WRJmNI_24_oCHG3ObF0AlG6nY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:59:3b:25:99:47:38:15:df:bb:f3:f8:c8:f8:62:2d:f3:59:
c8:a6:ff:fe:fd:64:0f:49:74:e3:40:3a:23:47:a0:ca:1a:ba:
5b:17:53:6a:48:18:6e:be:4a:ba:55:2f:76:fe:23:57:69:2a:
4a:0c:dc:29:e7:4d:e5:9c:b3:d4:97:16:58:78:15:e3:60:5f:
0f:3a:63:4d:49:52:3b:34:53:1a:b0:fc:d2:bc:b0:7d:c4:ab:
d5:8f:29:b3:a9:c2:32:7d:a3:32:80:82:ea:bf:b2:c6:9a:f1:
8c:d2:bc:1d:cf:c0:de:8d:89:c3:27:2a:6b:3e:4d:a6:95:88:
1e:cc:6f:f4:5d:15:4f:47:de:95:57:5a:68:f5:aa:1a:13:16:
06:e9:86:d6:34:f5:91:07:70:37:e3:72:0c:c3:c7:09:38:2b:
3e:90:8a:c1:b4:6a:6d:56:02:dd:99:67:0d:87:79:ac:1c:42:
3a:93:41:95:dd:0a:c5:8b:0a:af:0f:75:23:a5:ab:f8:6c:74:
ae:47:11:1b:d8:44:35:f0:1e:99:da:cd:be:0a:aa:75:cf:b9:
67:9e:a8:48:fa:2d:5c:8e:4c:98:77:35:b4:db:18:00:05:d0:
a5:ef:f0:d6:a1:87:bd:ad:fa:43:7b:26:54:6a:8c:aa:22:c3:
39:fe:40:f1
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICAtowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDM3
NTkxMjY2MzQ4RkY2RTNGQTAyMUM2RENFNkM1RDAwOTQ2RUE3NjAeFw0yNTAzMjEw
MDMxMzRaFw0yNTEwMjUwMTM2MjFaMDMxMTAvBgNVBAMTKEUzN0MwQzRDMERBNEQy
REZENzdBRkI4RkY3NjNDNjJDRkQ0MjUzNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5iSOjsFue1CC29PYGrM3X27UbOSWoeZBXqUGZUnFzPgWOreqc
lJPUzjp4RpBLFDcPRX0YTEG2c3KIBZmie2ju8A2iyf8se0u05PJYZOdzGd/q1fY7
JDAtQkfemwgmnxq3oUOHXdK6eU4/CwTg5xYJgxb4A1RBMsB+kP2njwmWd3dZR1Za
GSrA6mW5cAKJliLjZ6qU72HbrzWQrSVljFqwjHFBa3sEIBhIIiNaDyTdj8a/tXhq
R9DnoP1JhwUsH7tCTP1NpnHWC7QYEuxyKcmj0IsbKtbhGl4QJOCWDjSDewmSbU4t
Du3yLEgPSAXI485c/oFjTRCtv9YnyyfFL1KPAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU43wMTA2k0t/XevuP92PGLP1CU18wHwYDVR0jBBgwFoAUQ3WRJmNI/24/oCHG
3ObF0AlG6nYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy
NS9RM1dSSm1OSV8yNF9vQ0hHM09iRjBBbEc2blkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1EzV1JKbU5JXzI0X29DSEczT2JGMEFsRzZuWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjUvUTNXUkptTklfMjRf
b0NIRzNPYkYwQWxHNm5ZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAEFZOyWZRzgV37vz+Mj4Yi3zWcim//79ZA9JdONAOiNHoMoaulsXU2pIGG6+
SrpVL3b+I1dpKkoM3CnnTeWcs9SXFlh4FeNgXw86Y01JUjs0Uxqw/NK8sH3Eq9WP
KbOpwjJ9ozKAguq/ssaa8YzSvB3PwN6NicMnKms+TaaViB7Mb/RdFU9H3pVXWmj1
qhoTFgbphtY09ZEHcDfjcgzDxwk4Kz6QisG0am1WAt2ZZw2HeawcQjqTQZXdCsWL
Cq8PdSOlq/hsdK5HERvYRDXwHpnazb4KqnXPuWeeqEj6LVyOTJh3NbTbGAAF0KXv
8Nahh72t+kN7JlRqjKoiwzn+QPE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:34:28 2025 by rpki-client