Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft
File: c_jFHpB2aR787kYX7QQw9Xy8gB0.mft (raw, json)
Hash identifier: g3D1b/vG95XUL3swKef4wHYFwWMPuI6GBsFU6MltFqk=
Subject key identifier: 1A:96:67:3E:80:78:64:04:FE:29:6B:91:E5:82:5F:A1:96:60:4F:17
Authority key identifier: 73:F8:C5:1E:90:76:69:1E:FC:EE:46:17:ED:04:30:F5:7C:BC:80:1D
Certificate issuer: /CN=73F8C51E9076691EFCEE4617ED0430F57CBC801D
Certificate serial: 06D0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c_jFHpB2aR787kYX7QQw9Xy8gB0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft
Manifest number: 06D0
Signing time: Sat 26 Apr 2025 11:08:25 +0000
Manifest this update: Sat 26 Apr 2025 11:08:25 +0000
Manifest next update: Sat 26 Apr 2025 17:08:25 +0000
Files and hashes: 1: c_jFHpB2aR787kYX7QQw9Xy8gB0.crl (hash: OJZs/nrxkxdtRnd8lHGq+2FOlcSXuT3ngtLSO7BnvEk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1744 (0x6d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73F8C51E9076691EFCEE4617ED0430F57CBC801D
Validity
Not Before: Apr 26 11:08:25 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=1A96673E80786404FE296B91E5825FA196604F17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:78:3d:60:00:57:d1:46:10:20:61:9e:95:
b0:49:1e:0d:5c:52:0b:c8:7a:1c:81:d0:ed:72:56:
ee:19:51:41:e0:24:b0:4d:06:1a:5d:3b:2c:8c:fb:
3d:11:d0:0c:29:ef:27:77:69:b8:2b:11:aa:83:4a:
a1:2b:ad:60:3b:f0:c1:4b:77:9c:38:cb:c6:39:9d:
80:df:69:73:ae:95:5e:ba:25:2d:b2:5d:27:67:74:
3a:d9:ec:52:fe:af:0b:9c:5f:9b:dd:00:ca:95:5d:
dc:5f:ad:55:3a:07:58:79:a2:39:2e:61:35:3b:80:
69:6c:60:58:d7:6a:11:2a:5e:86:a3:c5:1d:e6:08:
09:f7:5e:cb:6c:37:a0:c7:db:43:07:8e:40:b0:f5:
af:5d:89:94:f4:99:d8:ad:a3:4f:e6:94:9a:6d:36:
71:00:29:8e:2e:a4:3b:3e:04:a7:9f:57:16:e8:0b:
4a:6d:56:61:3f:85:74:d0:1a:4d:75:87:34:24:81:
3d:82:dc:41:54:70:cb:fa:58:69:2d:c9:fd:b4:94:
06:71:fe:be:99:8e:74:40:10:ab:98:00:cb:83:d9:
23:24:b9:23:b9:51:d8:51:6c:fd:14:59:7b:a4:37:
2a:54:8d:96:54:08:95:f7:8b:75:9e:40:9f:eb:5a:
8b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:96:67:3E:80:78:64:04:FE:29:6B:91:E5:82:5F:A1:96:60:4F:17
X509v3 Authority Key Identifier:
keyid:73:F8:C5:1E:90:76:69:1E:FC:EE:46:17:ED:04:30:F5:7C:BC:80:1D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c_jFHpB2aR787kYX7QQw9Xy8gB0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d2:73:d9:ef:3c:a7:84:45:de:59:3a:8c:c9:b1:a7:71:39:
cf:16:45:c8:f7:ee:4a:94:88:a0:68:4b:7e:5b:03:24:7d:72:
e5:8f:f7:73:4d:66:60:92:c4:e6:60:aa:0e:05:5d:c9:11:54:
6c:aa:47:a8:8a:ee:62:97:a1:be:3a:92:ae:1c:1c:11:e6:db:
2f:e3:c3:59:5c:52:24:49:86:43:c9:58:4c:6a:02:11:ca:c5:
a9:2b:9e:2b:a1:23:6c:54:42:52:11:94:b1:9d:6d:f2:18:6a:
8e:8e:60:b2:0e:1f:87:90:fd:28:2e:08:15:8c:82:54:6a:b2:
8e:c1:44:42:df:3e:c7:c9:af:98:93:4e:bf:f2:62:c9:4f:14:
d8:4e:f5:94:9a:ae:01:b9:7a:45:30:a4:78:12:13:e6:3b:c3:
0b:c4:df:93:f0:de:6d:18:8d:b7:8b:5c:27:5e:6d:8f:79:ad:
49:b3:3a:22:b2:56:9b:2b:3d:1a:cd:9a:71:03:18:67:d6:96:
8e:79:ab:0c:74:29:31:59:b1:4a:48:67:bc:7b:17:24:11:b0:
b1:ad:32:37:a4:3e:9a:60:f1:80:18:02:04:31:95:f4:31:46:
f7:b3:ed:3a:6b:9e:da:9c:80:64:54:c5:7e:53:6e:81:ac:bd:
49:57:79:14
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBtAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzNG
OEM1MUU5MDc2NjkxRUZDRUU0NjE3RUQwNDMwRjU3Q0JDODAxRDAeFw0yNTA0MjYx
MTA4MjVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFBOTY2NzNFODA3ODY0
MDRGRTI5NkI5MUU1ODI1RkExOTY2MDRGMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIGng9YABX0UYQIGGelbBJHg1cUgvIehyB0O1yVu4ZUUHgJLBN
BhpdOyyM+z0R0Awp7yd3abgrEaqDSqErrWA78MFLd5w4y8Y5nYDfaXOulV66JS2y
XSdndDrZ7FL+rwucX5vdAMqVXdxfrVU6B1h5ojkuYTU7gGlsYFjXahEqXoajxR3m
CAn3XstsN6DH20MHjkCw9a9diZT0mdito0/mlJptNnEAKY4upDs+BKefVxboC0pt
VmE/hXTQGk11hzQkgT2C3EFUcMv6WGktyf20lAZx/r6ZjnRAEKuYAMuD2SMkuSO5
UdhRbP0UWXukNypUjZZUCJX3i3WeQJ/rWourAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUGpZnPoB4ZAT+KWuR5YJfoZZgTxcwHwYDVR0jBBgwFoAUc/jFHpB2aR787kYX
7QQw9Xy8gB0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4
MS9jX2pGSHBCMmFSNzg3a1lYN1FRdzlYeThnQjAuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2NfakZIcEIyYVI3ODdrWVg3UVF3OVh5OGdCMC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODEvY19qRkhwQjJhUjc4
N2tZWDdRUXc5WHk4Z0IwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJ7Sc9nvPKeERd5ZOozJsadxOc8WRcj37kqUiKBoS35bAyR9cuWP93NNZmCS
xOZgqg4FXckRVGyqR6iK7mKXob46kq4cHBHm2y/jw1lcUiRJhkPJWExqAhHKxakr
niuhI2xUQlIRlLGdbfIYao6OYLIOH4eQ/SguCBWMglRqso7BRELfPsfJr5iTTr/y
YslPFNhO9ZSargG5ekUwpHgSE+Y7wwvE35Pw3m0YjbeLXCdebY95rUmzOiKyVpsr
PRrNmnEDGGfWlo55qwx0KTFZsUpIZ7x7FyQRsLGtMjekPppg8YAYAgQxlfQxRvez
7TprntqcgGRUxX5TboGsvUlXeRQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:13:24 2025 by rpki-client