Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3364/8t0vOax2MXqpGoijKYFSZy0mmP8.mft
File: 8t0vOax2MXqpGoijKYFSZy0mmP8.mft (raw, json)
Hash identifier: AdZB5Uogjk56YTw9ErMFslMNqTFRzzzWFM2jcMAkiFc=
Subject key identifier: BC:1D:E0:F2:57:AE:40:40:64:D1:61:95:D1:83:49:B7:3A:68:FC:52
Authority key identifier: F2:DD:2F:39:AC:76:31:7A:A9:1A:88:A3:29:81:52:67:2D:26:98:FF
Certificate issuer: /CN=F2DD2F39AC76317AA91A88A3298152672D2698FF
Certificate serial: 2A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8t0vOax2MXqpGoijKYFSZy0mmP8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3364/8t0vOax2MXqpGoijKYFSZy0mmP8.mft
Manifest number: 2A
Signing time: Thu 24 Apr 2025 01:06:19 +0000
Manifest this update: Thu 24 Apr 2025 01:06:19 +0000
Manifest next update: Thu 24 Apr 2025 07:06:19 +0000
Files and hashes: 1: 8t0vOax2MXqpGoijKYFSZy0mmP8.crl (hash: vJiK9coQ/ICwuEZvtgVB8Nki4bm0izRd8zs/bDhHLHA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2DD2F39AC76317AA91A88A3298152672D2698FF
Validity
Not Before: Apr 24 01:06:19 2025 GMT
Not After : Apr 14 03:10:51 2026 GMT
Subject: CN=BC1DE0F257AE404064D16195D18349B73A68FC52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:ed:b9:12:e7:6a:74:6c:49:2e:4f:66:58:
e6:92:f4:4b:f6:de:f4:a6:2e:4e:31:ec:e4:f8:77:
32:f1:e0:50:31:a1:ea:ed:6d:38:d1:2f:19:bd:6a:
e9:a1:8f:29:6a:91:8e:50:a9:ca:f2:96:2f:6c:44:
3b:e3:f0:c0:f5:10:94:6e:66:f3:44:a1:3b:da:14:
b5:7e:fa:50:2e:17:dc:28:a9:25:9c:2f:9f:47:51:
ee:ba:cc:53:ea:40:c8:c2:10:f3:a9:4e:87:87:f4:
0a:21:b3:75:d9:b4:1b:1d:f2:63:50:f1:24:dd:3d:
b5:ee:37:a0:0c:3d:29:37:18:88:cf:76:83:ae:a8:
a5:ab:51:28:43:8b:65:08:1c:61:da:11:33:eb:f5:
10:24:c1:41:41:da:79:6b:2e:0b:d6:94:3d:c6:52:
e9:20:d5:ce:01:31:a4:f7:b4:06:e9:61:13:04:20:
2d:04:1b:99:22:e6:ee:d1:09:83:51:c4:6f:ec:df:
df:99:25:de:91:a3:d9:4d:96:24:2f:54:b7:40:7c:
17:eb:d2:2e:84:6f:b0:fe:8f:26:79:75:8e:55:39:
44:e1:7a:fb:f7:8b:30:78:4f:d6:21:b2:33:7b:94:
93:b0:32:7f:c6:95:91:f0:94:06:3c:0a:c9:1c:1a:
c8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1D:E0:F2:57:AE:40:40:64:D1:61:95:D1:83:49:B7:3A:68:FC:52
X509v3 Authority Key Identifier:
keyid:F2:DD:2F:39:AC:76:31:7A:A9:1A:88:A3:29:81:52:67:2D:26:98:FF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3364/8t0vOax2MXqpGoijKYFSZy0mmP8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8t0vOax2MXqpGoijKYFSZy0mmP8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3364/8t0vOax2MXqpGoijKYFSZy0mmP8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:53:fb:8e:28:9c:29:e8:5c:d9:53:4f:77:2b:e0:16:25:c8:
46:62:ab:5e:bf:24:30:d6:c3:5c:28:39:a4:f2:6a:70:4e:fa:
73:50:6f:3e:73:bf:f1:4b:76:7c:59:c9:72:88:90:18:8e:f3:
95:18:ef:a6:9c:9f:4a:dc:09:75:13:6a:34:b1:97:c9:8c:c0:
15:c6:cf:86:c1:27:5b:ee:9e:0d:60:33:53:01:65:f2:64:43:
ad:9f:d8:2f:85:2a:a0:ac:33:01:ee:4b:cf:15:9a:b4:34:2a:
45:db:36:bd:c2:9a:73:7d:1c:73:dd:8d:3e:39:e8:42:4a:92:
61:d2:fc:67:26:0f:c7:06:c9:11:29:2f:93:c0:73:b3:95:c0:
2c:d3:84:8d:bd:1c:cd:b8:8e:9e:6f:9e:ba:c5:e0:cc:04:07:
66:8a:6c:59:d6:08:8d:db:c7:2d:52:c7:e0:cd:00:34:58:14:
cd:0c:9b:42:58:f2:b7:4f:a2:dd:9e:bb:7b:5a:57:3e:3c:ae:
e8:8d:37:37:5b:26:d3:e8:3a:23:93:19:fe:c6:b8:09:ba:aa:
18:f9:0e:60:8e:31:fa:cc:44:cc:21:d9:88:f5:82:7c:c8:3c:
98:fb:dd:66:e0:cd:24:0b:10:44:b1:07:0f:1f:98:29:df:a3:
bf:ba:9e:61
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMkRE
MkYzOUFDNzYzMTdBQTkxQTg4QTMyOTgxNTI2NzJEMjY5OEZGMB4XDTI1MDQyNDAx
MDYxOVoXDTI2MDQxNDAzMTA1MVowMzExMC8GA1UEAxMoQkMxREUwRjI1N0FFNDA0
MDY0RDE2MTk1RDE4MzQ5QjczQTY4RkM1MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMEa7bkS52p0bEkuT2ZY5pL0S/be9KYuTjHs5Ph3MvHgUDGh6u1t
ONEvGb1q6aGPKWqRjlCpyvKWL2xEO+PwwPUQlG5m80ShO9oUtX76UC4X3CipJZwv
n0dR7rrMU+pAyMIQ86lOh4f0CiGzddm0Gx3yY1DxJN09te43oAw9KTcYiM92g66o
patRKEOLZQgcYdoRM+v1ECTBQUHaeWsuC9aUPcZS6SDVzgExpPe0BulhEwQgLQQb
mSLm7tEJg1HEb+zf35kl3pGj2U2WJC9Ut0B8F+vSLoRvsP6PJnl1jlU5ROF6+/eL
MHhP1iGyM3uUk7Ayf8aVkfCUBjwKyRwayI8CAwEAAaOCAgwwggIIMB0GA1UdDgQW
BBS8HeDyV65AQGTRYZXRg0m3Omj8UjAfBgNVHSMEGDAWgBTy3S85rHYxeqkaiKMp
gVJnLSaY/zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzY0
Lzh0MHZPYXgyTVhxcEdvaWpLWUZTWnkwbW1QOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvOHQwdk9heDJNWHFwR29paktZRlNaeTBtbVA4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM2NC84dDB2T2F4Mk1YcXBH
b2lqS1lGU1p5MG1tUDgubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmFP7jiicKehc2VNPdyvgFiXIRmKrXr8kMNbDXCg5pPJqcE76c1BvPnO/8Ut2
fFnJcoiQGI7zlRjvppyfStwJdRNqNLGXyYzAFcbPhsEnW+6eDWAzUwFl8mRDrZ/Y
L4UqoKwzAe5LzxWatDQqRds2vcKac30cc92NPjnoQkqSYdL8ZyYPxwbJESkvk8Bz
s5XALNOEjb0czbiOnm+eusXgzAQHZopsWdYIjdvHLVLH4M0ANFgUzQybQljyt0+i
3Z67e1pXPjyu6I03N1sm0+g6I5MZ/sa4CbqqGPkOYI4x+sxEzCHZiPWCfMg8mPvd
ZuDNJAsQRLEHDx+YKd+jv7qeYQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:34:46 2025 by rpki-client