Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3307/4D4PjKiQjhc6NwrDMIv3bA6iep0.mft
File: 4D4PjKiQjhc6NwrDMIv3bA6iep0.mft (raw, json)
Hash identifier: hfYvQBOacibxy237DLXIYTj2VhMCQuUejE7w4jVSu4c=
Subject key identifier: 74:A7:94:06:07:38:05:A9:F4:45:68:1B:96:96:9F:04:F5:E1:F5:92
Authority key identifier: E0:3E:0F:8C:A8:90:8E:17:3A:37:0A:C3:30:8B:F7:6C:0E:A2:7A:9D
Certificate issuer: /CN=E03E0F8CA8908E173A370AC3308BF76C0EA27A9D
Certificate serial: 0548
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4D4PjKiQjhc6NwrDMIv3bA6iep0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/4D4PjKiQjhc6NwrDMIv3bA6iep0.mft
Manifest number: 0548
Signing time: Sat 26 Apr 2025 11:07:08 +0000
Manifest this update: Sat 26 Apr 2025 11:07:08 +0000
Manifest next update: Sat 26 Apr 2025 17:07:08 +0000
Files and hashes: 1: 4D4PjKiQjhc6NwrDMIv3bA6iep0.crl (hash: 4PGnxru0Poh6oWKYCg+96PK+bTVkfbclTxPz/uZAytw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1352 (0x548)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E03E0F8CA8908E173A370AC3308BF76C0EA27A9D
Validity
Not Before: Apr 26 11:07:08 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=74A79406073805A9F445681B96969F04F5E1F592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f2:3a:9d:5e:bc:cb:a1:ee:ef:5f:8f:2a:0d:
5d:b2:d6:88:1a:ae:d6:12:50:ac:8b:44:0c:e8:ba:
42:2d:b8:55:49:0a:75:e9:f5:96:43:7c:08:01:cc:
23:41:32:00:d5:ca:81:29:88:0c:32:80:55:4b:f4:
54:b6:b7:1d:cf:cb:91:05:3f:ae:80:e8:9c:5b:e9:
55:81:f9:2c:73:99:d9:ba:20:43:ec:d0:b0:9d:f4:
16:f9:27:f3:1a:c4:03:0c:c2:3e:8e:fe:ff:22:d1:
8e:50:30:36:5e:3c:38:0c:48:3b:99:6c:35:3a:39:
bc:78:68:3f:c8:3d:a9:c4:77:01:79:21:0c:1f:ba:
e6:70:33:21:91:bb:a4:2a:30:10:82:a6:90:93:85:
84:9b:30:76:60:ec:31:e9:67:5d:51:7e:5a:f3:15:
e2:64:f8:ac:d8:02:86:b7:fc:40:be:3f:c3:bd:10:
3b:20:ea:76:27:4f:65:41:bd:a7:70:5a:ba:77:52:
bc:b6:cf:4f:f6:50:d6:cf:d6:2b:ce:0b:80:03:d8:
f8:aa:8c:02:0a:40:7a:03:89:e9:ba:be:a9:f6:85:
ff:45:d7:1a:b2:bf:89:54:5d:f0:7d:a3:a4:bc:8d:
4b:1a:6a:aa:62:5e:e6:90:11:0e:2a:9a:43:b6:a6:
44:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A7:94:06:07:38:05:A9:F4:45:68:1B:96:96:9F:04:F5:E1:F5:92
X509v3 Authority Key Identifier:
keyid:E0:3E:0F:8C:A8:90:8E:17:3A:37:0A:C3:30:8B:F7:6C:0E:A2:7A:9D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/4D4PjKiQjhc6NwrDMIv3bA6iep0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4D4PjKiQjhc6NwrDMIv3bA6iep0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/4D4PjKiQjhc6NwrDMIv3bA6iep0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:39:04:f3:c0:4d:e7:05:a7:d6:7f:71:27:76:a5:fe:03:af:
8a:16:35:a7:f6:47:a9:a8:9f:2c:80:0a:08:61:9f:82:bb:75:
b6:77:90:f4:ac:2a:a3:a4:4e:22:d6:dd:24:c6:91:36:51:10:
97:0c:59:fd:cc:ee:18:7d:ec:cd:40:74:0f:fa:3e:a8:06:62:
c7:31:f7:89:fa:80:4e:e2:de:db:51:9d:45:db:27:8a:1b:41:
3c:45:af:a2:c1:93:c9:17:5b:98:8e:ba:55:b8:1a:25:7a:14:
40:1b:5d:e3:dd:8a:25:f4:79:49:ad:3e:d5:bc:65:68:fd:a1:
e5:12:b1:fb:69:8d:ee:a7:f2:a3:18:24:35:5b:0e:31:ff:62:
35:b6:fc:47:a0:db:33:cd:0c:6a:99:36:91:22:01:dd:b5:3d:
dd:cb:1b:86:86:ed:c2:2d:28:e6:af:0b:7e:7b:a8:9a:ce:5f:
c2:23:e0:59:d8:09:d3:df:bc:55:87:47:84:6c:d8:9a:90:94:
2e:2b:ce:e3:c9:ff:26:6a:dc:2f:fa:46:1f:84:18:85:50:09:
c9:9d:5e:23:52:0d:09:4b:34:89:53:4e:6d:d2:3a:60:17:38:
86:65:7b:9d:7d:e6:3b:66:bc:4c:3f:64:fd:c9:32:dd:be:4f:
b9:e9:3b:ce
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBUgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAz
RTBGOENBODkwOEUxNzNBMzcwQUMzMzA4QkY3NkMwRUEyN0E5RDAeFw0yNTA0MjYx
MTA3MDhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc0QTc5NDA2MDczODA1
QTlGNDQ1NjgxQjk2OTY5RjA0RjVFMUY1OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDj8jqdXrzLoe7vX48qDV2y1ogartYSUKyLRAzoukItuFVJCnXp
9ZZDfAgBzCNBMgDVyoEpiAwygFVL9FS2tx3Py5EFP66A6Jxb6VWB+Sxzmdm6IEPs
0LCd9Bb5J/MaxAMMwj6O/v8i0Y5QMDZePDgMSDuZbDU6Obx4aD/IPanEdwF5IQwf
uuZwMyGRu6QqMBCCppCThYSbMHZg7DHpZ11RflrzFeJk+KzYAoa3/EC+P8O9EDsg
6nYnT2VBvadwWrp3Ury2z0/2UNbP1ivOC4AD2PiqjAIKQHoDiem6vqn2hf9F1xqy
v4lUXfB9o6S8jUsaaqpiXuaQEQ4qmkO2pkRPAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUdKeUBgc4Ban0RWgblpafBPXh9ZIwHwYDVR0jBBgwFoAU4D4PjKiQjhc6NwrD
MIv3bA6iep0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw
Ny80RDRQaktpUWpoYzZOd3JETUl2M2JBNmllcDAuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzRENFBqS2lRamhjNk53ckRNSXYzYkE2aWVwMC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDcvNEQ0UGpLaVFqaGM2
TndyRE1JdjNiQTZpZXAwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAGI5BPPATecFp9Z/cSd2pf4Dr4oWNaf2R6monyyACghhn4K7dbZ3kPSsKqOk
TiLW3STGkTZREJcMWf3M7hh97M1AdA/6PqgGYscx94n6gE7i3ttRnUXbJ4obQTxF
r6LBk8kXW5iOulW4GiV6FEAbXePdiiX0eUmtPtW8ZWj9oeUSsftpje6n8qMYJDVb
DjH/YjW2/Eeg2zPNDGqZNpEiAd21Pd3LG4aG7cItKOavC357qJrOX8Ij4FnYCdPf
vFWHR4Rs2JqQlC4rzuPJ/yZq3C/6Rh+EGIVQCcmdXiNSDQlLNIlTTm3SOmAXOIZl
e5195jtmvEw/ZP3JMt2+T7npO84=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:09:07 2025 by rpki-client