Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft
File: IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft (raw, json)
Hash identifier: rCbLTwZkrCn9bQqxBIFjgIV8u34Yha4Nk34zzgVUaqs=
Subject key identifier: 8F:67:08:B2:47:68:C9:A1:4D:5B:C9:B9:3B:5E:04:D0:CB:88:51:39
Authority key identifier: 23:32:0A:4B:AF:0A:F9:31:35:30:EC:99:D3:68:64:33:70:3E:07:1F
Certificate issuer: /CN=23320A4BAF0AF9313530EC99D3686433703E071F
Certificate serial: 2078
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzIKS68K-TE1MOyZ02hkM3A-Bx8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft
Manifest number: 2066
Signing time: Wed 09 Apr 2025 05:35:37 +0000
Manifest this update: Wed 09 Apr 2025 05:35:37 +0000
Manifest next update: Wed 09 Apr 2025 11:35:37 +0000
Files and hashes: 1: IzIKS68K-TE1MOyZ02hkM3A-Bx8.crl (hash: TdG01O3LiJgEPKQX6zoOftv34dc1/Z42VOgKK/jAdrM=)
2: noTTkGKBBA0IiF1s9t5qUE627a8.roa (hash: 7atMi/MrgnmN/IZ16hRnHqf3SP1bFaVyEPj4clXkIuM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8312 (0x2078)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23320A4BAF0AF9313530EC99D3686433703E071F
Validity
Not Before: Apr 9 05:35:37 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8F6708B24768C9A14D5BC9B93B5E04D0CB885139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:aa:75:54:3b:4a:b7:b6:b1:9b:96:0e:b2:
44:eb:c9:95:cf:2a:16:e8:ac:69:9c:59:10:60:de:
9e:f5:06:1f:2f:65:02:b9:44:52:cb:c0:c6:27:9d:
f2:fe:6e:24:5f:b6:c3:1f:23:63:b4:b7:e0:16:28:
4c:fb:88:23:b0:d6:b5:62:95:91:7e:a1:f3:c6:30:
62:5d:ce:0a:45:0e:3c:af:83:73:9f:b1:1e:3a:79:
40:98:40:37:4a:bc:89:d7:3e:f8:90:28:e9:51:86:
b3:a6:36:13:55:5f:cc:08:42:d3:3d:a0:4b:55:6d:
75:a4:1b:bf:32:31:c1:ff:8b:84:90:45:ce:ba:0e:
0d:b4:cf:51:31:40:a7:f9:46:0b:06:67:86:f1:7f:
bd:94:2a:ce:ce:e0:e4:0a:01:eb:79:12:e3:74:0f:
2c:9a:d6:fe:0c:07:bf:2b:b7:bf:92:37:47:cd:db:
14:13:7a:cb:5b:3f:46:ba:2d:91:3a:e7:1f:dd:47:
0b:d5:90:f4:cb:00:47:88:22:c9:d6:72:2c:69:a4:
90:13:97:78:59:20:80:1e:c0:b7:b2:e0:34:01:e3:
ce:e3:92:f7:aa:f0:83:a7:55:f5:b8:30:7c:fb:7a:
7f:1a:47:b2:98:42:cc:c5:8f:80:8e:1a:77:44:f2:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:67:08:B2:47:68:C9:A1:4D:5B:C9:B9:3B:5E:04:D0:CB:88:51:39
X509v3 Authority Key Identifier:
keyid:23:32:0A:4B:AF:0A:F9:31:35:30:EC:99:D3:68:64:33:70:3E:07:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzIKS68K-TE1MOyZ02hkM3A-Bx8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:c2:53:a7:5a:56:fb:53:e4:dd:c9:bb:8b:53:01:fd:57:0d:
f7:03:3d:b8:33:db:46:33:dd:9c:a7:3c:78:55:10:af:fe:c7:
ac:26:11:5d:fc:68:b1:03:3a:85:2b:ed:0c:d8:47:40:26:a2:
9c:f3:3e:5c:10:81:ad:fd:3d:9d:b1:e9:77:f1:bf:50:90:f1:
cc:28:a0:50:41:f6:26:7b:6d:a7:8c:e6:db:17:bc:af:a8:52:
61:2b:40:f4:f1:cb:9f:03:da:d2:b6:98:d9:fb:8b:d3:f1:bc:
9e:4e:1a:56:38:43:48:31:21:d4:9b:44:5b:d7:1d:6d:67:11:
7c:96:68:f2:53:16:6e:d1:82:bd:ef:7b:69:de:1f:66:08:86:
85:d4:c3:86:03:ab:2f:9d:df:9a:53:6c:c2:90:0a:26:b7:9c:
43:a8:69:c5:69:72:8e:98:21:08:4b:5a:42:88:d9:f7:5e:61:
d8:44:3b:68:0e:ec:a9:a4:35:54:d9:72:2d:98:f2:9a:b3:9c:
4e:12:5d:a8:c1:42:73:e0:5d:db:95:af:50:79:e2:ac:05:21:
91:12:49:d3:83:fa:e8:ea:ea:d6:66:63:22:d7:00:eb:ec:45:
81:55:b6:df:8c:89:2e:a5:98:44:bc:ee:1a:71:5d:96:27:d4:
8c:49:a3:3e
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICIHgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjMz
MjBBNEJBRjBBRjkzMTM1MzBFQzk5RDM2ODY0MzM3MDNFMDcxRjAeFw0yNTA0MDkw
NTM1MzdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhGNjcwOEIyNDc2OEM5
QTE0RDVCQzlCOTNCNUUwNEQwQ0I4ODUxMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7gap1VDtKt7axm5YOskTryZXPKhborGmcWRBg3p71Bh8vZQK5
RFLLwMYnnfL+biRftsMfI2O0t+AWKEz7iCOw1rVilZF+ofPGMGJdzgpFDjyvg3Of
sR46eUCYQDdKvInXPviQKOlRhrOmNhNVX8wIQtM9oEtVbXWkG78yMcH/i4SQRc66
Dg20z1ExQKf5RgsGZ4bxf72UKs7O4OQKAet5EuN0Dyya1v4MB78rt7+SN0fN2xQT
estbP0a6LZE65x/dRwvVkPTLAEeIIsnWcixppJATl3hZIIAewLey4DQB487jkveq
8IOnVfW4MHz7en8aR7KYQszFj4COGndE8nkDAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUj2cIskdoyaFNW8m5O14E0MuIUTkwHwYDVR0jBBgwFoAUIzIKS68K+TE1MOyZ
02hkM3A+Bx8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQ3
L0l6SUtTNjhLLVRFMU1PeVowMmhrTTNBLUJ4OC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvSXpJS1M2OEstVEUxTU95WjAyaGtNM0EtQng4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQ3L0l6SUtTNjhLLVRFMU1P
eVowMmhrTTNBLUJ4OC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBHwlOnWlb7U+TdybuLUwH9Vw33Az24M9tGM92cpzx4VRCv/sesJhFd/GixAzqF
K+0M2EdAJqKc8z5cEIGt/T2dsel38b9QkPHMKKBQQfYme22njObbF7yvqFJhK0D0
8cufA9rStpjZ+4vT8byeThpWOENIMSHUm0Rb1x1tZxF8lmjyUxZu0YK973tp3h9m
CIaF1MOGA6svnd+aU2zCkAomt5xDqGnFaXKOmCEIS1pCiNn3XmHYRDtoDuyppDVU
2XItmPKas5xOEl2owUJz4F3bla9QeeKsBSGREknTg/ro6urWZmMi1wDr7EWBVbbf
jIkupZhEvO4acV2WJ9SMSaM+
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:26:48 2025 by rpki-client