Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/73/w2lZ9ie_P5SuFVwQLnPbHAf73Xg.mft
File: w2lZ9ie_P5SuFVwQLnPbHAf73Xg.mft (raw, json)
Hash identifier: M73XVnBUlBTIkug2u81simfypNYjkurr3wVPb6PvrX8=
Subject key identifier: 08:2F:6C:DB:C8:26:3E:CD:3E:1C:F5:31:ED:9B:03:05:04:4E:E0:47
Authority key identifier: C3:69:59:F6:27:BF:3F:94:AE:15:5C:10:2E:73:DB:1C:07:FB:DD:78
Certificate issuer: /CN=C36959F627BF3F94AE155C102E73DB1C07FBDD78
Certificate serial: 44FA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/w2lZ9ie_P5SuFVwQLnPbHAf73Xg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/w2lZ9ie_P5SuFVwQLnPbHAf73Xg.mft
Manifest number: 44FA
Signing time: Sat 29 Mar 2025 08:30:38 +0000
Manifest this update: Sat 29 Mar 2025 08:30:38 +0000
Manifest next update: Sat 29 Mar 2025 14:30:38 +0000
Files and hashes: 1: w2lZ9ie_P5SuFVwQLnPbHAf73Xg.crl (hash: 9XCyUayoHeRPI1VRSWjxdv2sjJ8NOBAkXc3xHY1Xqwk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17658 (0x44fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C36959F627BF3F94AE155C102E73DB1C07FBDD78
Validity
Not Before: Mar 29 08:30:38 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=082F6CDBC8263ECD3E1CF531ED9B0305044EE047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:60:c5:b6:29:37:32:7f:68:0e:8f:d2:f0:
a2:e8:2d:7e:22:15:da:3a:ef:2c:ce:5a:81:07:35:
35:4b:4b:16:a4:de:a1:2d:a4:f4:23:09:5f:43:db:
a5:9b:78:35:cc:ab:97:0c:52:d1:81:26:73:3e:af:
b2:59:71:71:bc:8b:56:9c:57:b2:ed:ca:05:d0:b9:
78:1a:c5:e0:89:53:30:9d:8f:e9:e7:a7:d1:c9:9a:
b6:8d:a9:8c:09:a2:29:ea:1c:77:e4:7e:02:01:4c:
90:0a:06:31:c5:2a:c2:ec:a2:b8:32:93:0b:b4:78:
58:7f:94:ce:3c:b7:1b:a9:50:78:a0:2e:24:88:77:
03:3f:64:34:32:9d:05:ab:77:f2:3c:57:6e:e1:95:
3f:2f:19:db:27:5a:b5:eb:90:a0:9a:5f:55:a5:d2:
53:bb:db:21:c8:c8:55:ba:95:7d:7a:c0:9a:fe:63:
35:d7:0d:92:1b:9c:5e:82:3e:a0:56:bb:4c:e3:19:
76:ec:00:95:46:30:b4:f1:d8:9b:a7:b9:90:34:38:
3f:3a:e9:63:40:81:8d:52:2e:00:ee:5b:f4:b1:12:
c5:2c:5d:42:02:7d:a1:56:4b:45:a5:e4:f3:ce:30:
d9:1f:e9:d7:69:48:92:db:3f:07:51:c9:f3:ed:72:
db:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2F:6C:DB:C8:26:3E:CD:3E:1C:F5:31:ED:9B:03:05:04:4E:E0:47
X509v3 Authority Key Identifier:
keyid:C3:69:59:F6:27:BF:3F:94:AE:15:5C:10:2E:73:DB:1C:07:FB:DD:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/w2lZ9ie_P5SuFVwQLnPbHAf73Xg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/w2lZ9ie_P5SuFVwQLnPbHAf73Xg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/w2lZ9ie_P5SuFVwQLnPbHAf73Xg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:8d:ab:fa:2e:92:e0:8f:c0:79:fe:fe:05:4c:e4:2f:4b:f9:
98:52:fb:74:5b:da:2c:c0:2a:b8:e5:f6:b0:ce:37:e1:63:77:
e4:b8:52:12:15:91:83:ff:7b:a6:3e:41:c4:dc:ad:7c:5a:4c:
dc:fa:02:b6:b8:d2:45:0c:42:eb:f1:69:3d:85:4c:d3:21:26:
ad:d0:81:61:86:22:70:51:74:52:68:d1:e2:c3:fd:a8:0d:e1:
b4:ca:ef:5f:3f:94:b1:01:e7:fc:c8:67:0c:2b:3b:02:8f:67:
ab:18:b4:11:e5:3d:df:4f:e0:97:fe:c5:9b:05:5b:ec:35:a2:
a3:44:3d:44:19:12:2c:4b:cb:56:52:de:86:62:e3:3f:10:b7:
1a:60:31:cc:48:ae:ed:3b:91:e8:0d:0a:2f:47:d4:0c:81:03:
e3:56:88:59:61:b5:a3:d5:0e:a2:ac:7b:4e:b4:30:ff:90:d2:
ce:dc:52:0e:99:01:b8:69:c2:78:2d:e5:97:f8:ee:63:b6:a6:
9d:54:11:07:e2:a0:ee:84:98:43:a8:31:25:5b:5c:89:ef:21:
25:b3:82:37:65:dd:16:58:3f:95:66:49:2f:8e:4e:22:94:64:
f7:9d:c0:ec:2d:79:63:cf:23:d7:4b:06:33:75:ae:d7:1d:bb:
9c:88:e4:3a
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgICRPowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzM2
OTU5RjYyN0JGM0Y5NEFFMTU1QzEwMkU3M0RCMUMwN0ZCREQ3ODAeFw0yNTAzMjkw
ODMwMzhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDA4MkY2Q0RCQzgyNjNF
Q0QzRTFDRjUzMUVEOUIwMzA1MDQ0RUUwNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDA1GDFtik3Mn9oDo/S8KLoLX4iFdo67yzOWoEHNTVLSxak3qEt
pPQjCV9D26WbeDXMq5cMUtGBJnM+r7JZcXG8i1acV7LtygXQuXgaxeCJUzCdj+nn
p9HJmraNqYwJoinqHHfkfgIBTJAKBjHFKsLsorgykwu0eFh/lM48txupUHigLiSI
dwM/ZDQynQWrd/I8V27hlT8vGdsnWrXrkKCaX1Wl0lO72yHIyFW6lX16wJr+YzXX
DZIbnF6CPqBWu0zjGXbsAJVGMLTx2JunuZA0OD866WNAgY1SLgDuW/SxEsUsXUIC
faFWS0Wl5PPOMNkf6ddpSJLbPwdRyfPtctsBAgMBAAGjggIIMIICBDAdBgNVHQ4E
FgQUCC9s28gmPs0+HPUx7ZsDBQRO4EcwHwYDVR0jBBgwFoAUw2lZ9ie/P5SuFVwQ
LnPbHAf73XgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzMv
dzJsWjlpZV9QNVN1RlZ3UUxuUGJIQWY3M1hnLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC93MmxaOWllX1A1U3VGVndRTG5QYkhBZjczWGcuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83My93MmxaOWllX1A1U3VGVndR
TG5QYkhBZjczWGcubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
Ao2r+i6S4I/Aef7+BUzkL0v5mFL7dFvaLMAquOX2sM434WN35LhSEhWRg/97pj5B
xNytfFpM3PoCtrjSRQxC6/FpPYVM0yEmrdCBYYYicFF0UmjR4sP9qA3htMrvXz+U
sQHn/MhnDCs7Ao9nqxi0EeU930/gl/7FmwVb7DWio0Q9RBkSLEvLVlLehmLjPxC3
GmAxzEiu7TuR6A0KL0fUDIED41aIWWG1o9UOoqx7TrQw/5DSztxSDpkBuGnCeC3l
l/juY7amnVQRB+Kg7oSYQ6gxJVtcie8hJbOCN2XdFlg/lWZJL45OIpRk953A7C15
Y88j10sGM3Wu1x27nIjkOg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:20 2025 by rpki-client