Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3330/yBW9GaZ-f0MMkQyjqLbOk4KDb0A.mft
File: yBW9GaZ-f0MMkQyjqLbOk4KDb0A.mft (raw, json)
Hash identifier: hhsOKSc4IgaLYcG3+vDTJ3yro3XEb0o8fAWSREa5R9g=
Subject key identifier: 53:11:FA:57:08:82:FE:DA:A7:AC:8D:38:C3:F3:25:9B:3B:D0:32:4E
Authority key identifier: C8:15:BD:19:A6:7E:7F:43:0C:91:0C:A3:A8:B6:CE:93:82:83:6F:40
Certificate issuer: /CN=C815BD19A67E7F430C910CA3A8B6CE9382836F40
Certificate serial: 0235
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yBW9GaZ-f0MMkQyjqLbOk4KDb0A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/yBW9GaZ-f0MMkQyjqLbOk4KDb0A.mft
Manifest number: 0235
Signing time: Fri 21 Mar 2025 00:32:09 +0000
Manifest this update: Fri 21 Mar 2025 00:32:09 +0000
Manifest next update: Fri 21 Mar 2025 06:32:09 +0000
Files and hashes: 1: yBW9GaZ-f0MMkQyjqLbOk4KDb0A.crl (hash: ElgP4qIbIee/kItNj790EspZjr7RHFfw+2ZTGbakCKM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C815BD19A67E7F430C910CA3A8B6CE9382836F40
Validity
Not Before: Mar 21 00:32:09 2025 GMT
Not After : Nov 15 08:24:41 2025 GMT
Subject: CN=5311FA570882FEDAA7AC8D38C3F3259B3BD0324E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:97:04:be:99:47:4c:0e:d6:44:94:aa:4a:
c7:2e:18:92:f2:87:8f:19:13:81:fc:5e:7c:ea:69:
7a:a8:34:ac:f4:8c:1b:5e:28:b1:da:86:a7:00:89:
b0:62:a2:37:cd:2c:2e:a1:4b:fa:8a:e0:cf:fe:c6:
b4:70:8d:bd:a0:93:f3:da:2e:96:ff:fd:2f:1b:11:
11:fa:b9:70:06:59:e6:f2:17:87:da:ad:97:6e:93:
47:82:2a:bd:ff:82:dc:79:f7:17:30:33:e5:d4:ee:
dc:c8:51:27:15:65:86:23:1e:ff:29:d8:b9:03:2d:
b9:96:02:ec:fc:c3:b2:09:13:09:ee:81:8b:0c:be:
a3:d4:f3:6b:04:69:bc:da:ec:c5:7e:13:be:c9:26:
f6:79:51:b1:2f:68:e9:43:59:11:28:a4:35:f5:0d:
53:34:43:50:c6:2e:03:57:90:d8:e9:d8:c3:a1:6c:
48:2a:4f:a6:02:64:d6:d1:50:1d:12:d4:f0:25:9f:
6c:a6:f3:31:8c:0e:49:43:d7:6f:1a:ce:20:08:50:
b1:6b:23:71:32:68:a9:c9:34:57:1f:1e:1e:38:09:
d1:d2:9f:9b:e3:37:ce:2c:dd:38:be:69:ac:4f:c4:
52:c8:21:97:d0:1b:e7:00:c2:6f:d9:1a:a6:89:71:
2d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:11:FA:57:08:82:FE:DA:A7:AC:8D:38:C3:F3:25:9B:3B:D0:32:4E
X509v3 Authority Key Identifier:
keyid:C8:15:BD:19:A6:7E:7F:43:0C:91:0C:A3:A8:B6:CE:93:82:83:6F:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/yBW9GaZ-f0MMkQyjqLbOk4KDb0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yBW9GaZ-f0MMkQyjqLbOk4KDb0A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/yBW9GaZ-f0MMkQyjqLbOk4KDb0A.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:4a:36:6a:96:ed:73:cb:18:24:38:35:8d:dc:4d:b1:fb:f6:
6a:37:44:7b:7d:ef:79:24:d7:1e:5d:e7:71:1e:06:5e:c3:1e:
41:df:a6:9c:27:39:08:73:c0:31:0d:61:c3:e7:d4:b2:42:20:
47:93:4f:a0:2d:c1:2b:44:d8:2b:5c:b8:4c:fd:77:8a:7e:35:
ed:f4:13:43:12:e4:7f:c7:df:a0:ef:83:b0:e5:43:43:2a:07:
55:1e:70:12:17:10:73:2e:41:90:6d:e8:fb:2a:23:b4:10:74:
6b:c0:75:a0:ac:b8:cc:9b:53:c2:7d:e9:9c:cf:bf:78:59:ae:
da:df:d4:55:b6:34:04:ec:07:ec:c9:83:73:35:be:a5:7f:0f:
d6:92:67:9c:6d:8a:ee:0b:6f:f5:eb:31:50:05:f2:fa:80:14:
6a:79:1f:58:46:96:b8:f4:55:da:b4:3f:1b:08:d2:71:a1:7f:
d8:42:5a:74:37:69:d1:10:b4:11:74:50:94:07:fe:d2:82:31:
04:e8:46:c8:9e:59:16:85:bd:07:fe:fa:b9:9a:74:e7:91:7c:
c3:4b:77:cf:43:fe:9a:8f:a1:ec:58:3b:6c:92:e8:27:65:92:
fd:78:23:ab:4f:fe:87:ec:62:b5:6a:fd:81:4d:90:90:07:33:
f4:83:e0:e8
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzgx
NUJEMTlBNjdFN0Y0MzBDOTEwQ0EzQThCNkNFOTM4MjgzNkY0MDAeFw0yNTAzMjEw
MDMyMDlaFw0yNTExMTUwODI0NDFaMDMxMTAvBgNVBAMTKDUzMTFGQTU3MDg4MkZF
REFBN0FDOEQzOEMzRjMyNTlCM0JEMDMyNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmypcEvplHTA7WRJSqSscuGJLyh48ZE4H8XnzqaXqoNKz0jBte
KLHahqcAibBiojfNLC6hS/qK4M/+xrRwjb2gk/PaLpb//S8bERH6uXAGWebyF4fa
rZduk0eCKr3/gtx59xcwM+XU7tzIUScVZYYjHv8p2LkDLbmWAuz8w7IJEwnugYsM
vqPU82sEabza7MV+E77JJvZ5UbEvaOlDWREopDX1DVM0Q1DGLgNXkNjp2MOhbEgq
T6YCZNbRUB0S1PAln2ym8zGMDklD128aziAIULFrI3EyaKnJNFcfHh44CdHSn5vj
N84s3Ti+aaxPxFLIIZfQG+cAwm/ZGqaJcS2XAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUUxH6VwiC/tqnrI04w/MlmzvQMk4wHwYDVR0jBBgwFoAUyBW9GaZ+f0MMkQyj
qLbOk4KDb0AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz
MC95Qlc5R2FaLWYwTU1rUXlqcUxiT2s0S0RiMEEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3lCVzlHYVotZjBNTWtReWpxTGJPazRLRGIwQS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzAveUJXOUdhWi1mME1N
a1F5anFMYk9rNEtEYjBBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAGRKNmqW7XPLGCQ4NY3cTbH79mo3RHt973kk1x5d53EeBl7DHkHfppwnOQhz
wDENYcPn1LJCIEeTT6AtwStE2CtcuEz9d4p+Ne30E0MS5H/H36Dvg7DlQ0MqB1Ue
cBIXEHMuQZBt6PsqI7QQdGvAdaCsuMybU8J96ZzPv3hZrtrf1FW2NATsB+zJg3M1
vqV/D9aSZ5xtiu4Lb/XrMVAF8vqAFGp5H1hGlrj0Vdq0PxsI0nGhf9hCWnQ3adEQ
tBF0UJQH/tKCMQToRsieWRaFvQf++rmadOeRfMNLd89D/pqPoexYO2yS6Cdlkv14
I6tP/ofsYrVq/YFNkJAHM/SD4Og=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:29:11 2025 by rpki-client