Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3368/pOPO1GYcOU6TnS2AjPrHXSV_lig.mft
File: pOPO1GYcOU6TnS2AjPrHXSV_lig.mft (raw, json)
Hash identifier: 4KvpSMVKQ8LaogCPnRMybloHDTsw6CpiTthEdthpXwc=
Subject key identifier: 7E:E1:CD:33:84:A2:80:B1:F0:F8:1B:11:62:54:4A:DC:42:6A:C1:AD
Authority key identifier: A4:E3:CE:D4:66:1C:39:4E:93:9D:2D:80:8C:FA:C7:5D:25:7F:96:28
Certificate issuer: /CN=A4E3CED4661C394E939D2D808CFAC75D257F9628
Certificate serial: 0D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pOPO1GYcOU6TnS2AjPrHXSV_lig.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3368/pOPO1GYcOU6TnS2AjPrHXSV_lig.mft
Manifest number: 0D
Signing time: Sat 26 Apr 2025 11:06:33 +0000
Manifest this update: Sat 26 Apr 2025 11:06:33 +0000
Manifest next update: Sat 26 Apr 2025 17:06:33 +0000
Files and hashes: 1: pOPO1GYcOU6TnS2AjPrHXSV_lig.crl (hash: Jz+1D+oId0RoAmu4f7kUGN07oR13+cOX5m60UAHCZIg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4E3CED4661C394E939D2D808CFAC75D257F9628
Validity
Not Before: Apr 26 11:06:33 2025 GMT
Not After : Apr 24 06:35:20 2026 GMT
Subject: CN=7EE1CD3384A280B1F0F81B1162544ADC426AC1AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:8a:23:5b:39:78:21:8e:43:dd:f5:74:fc:
1e:60:dc:45:e2:91:99:5e:7c:92:74:24:54:a5:48:
35:5f:c5:be:a6:70:11:be:53:de:cd:f5:6c:ea:bf:
45:60:59:ec:7b:f7:72:56:61:96:97:5d:e9:2d:f2:
5f:1f:5f:6d:4a:da:9d:83:fe:bd:61:16:52:4d:c7:
66:7a:77:7b:da:89:af:e0:2e:7d:60:8f:b6:71:22:
25:98:5e:ec:64:55:f4:ee:38:59:85:34:eb:96:1f:
54:d7:2d:fd:02:16:22:df:d1:b6:82:d1:f5:a6:70:
78:b4:36:f3:8a:10:76:68:78:57:88:4a:ec:63:0e:
c4:b7:a1:24:c6:cd:10:11:ad:9c:30:78:95:4d:0b:
54:6b:c7:f1:ba:0a:ff:a9:88:23:45:81:32:5a:5f:
d2:ff:a7:e1:7a:30:05:7b:54:84:b5:7d:0d:5d:94:
69:0e:7d:be:61:ef:15:ec:8e:79:0f:da:12:f0:d7:
46:f3:4a:0d:88:53:b5:d9:3d:3c:53:85:eb:f3:74:
0c:12:94:40:d3:0f:13:ae:62:b4:f8:55:35:98:3d:
cf:fa:b2:ad:23:d0:41:6d:e5:45:cb:00:74:29:e4:
b8:e3:af:d0:b1:af:63:7f:e5:43:9f:d7:3d:c4:dc:
6f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E1:CD:33:84:A2:80:B1:F0:F8:1B:11:62:54:4A:DC:42:6A:C1:AD
X509v3 Authority Key Identifier:
keyid:A4:E3:CE:D4:66:1C:39:4E:93:9D:2D:80:8C:FA:C7:5D:25:7F:96:28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3368/pOPO1GYcOU6TnS2AjPrHXSV_lig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pOPO1GYcOU6TnS2AjPrHXSV_lig.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3368/pOPO1GYcOU6TnS2AjPrHXSV_lig.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:bd:79:36:3a:36:39:7a:0e:c1:7c:4d:d7:d8:42:c2:3a:27:
58:4e:f8:73:05:4c:e2:38:1e:e2:08:5e:8a:ad:3a:3f:e4:87:
44:bc:50:7f:81:bf:51:66:5c:8e:0d:71:33:17:08:6a:70:2b:
74:ce:fb:67:65:13:19:d9:64:d9:81:44:1e:8b:c2:ed:c1:08:
cf:ab:88:f7:3c:79:a5:ae:3a:a9:9d:9a:dd:9a:6b:1b:59:e3:
46:54:07:3e:10:cc:54:f5:b7:00:b1:8a:9b:b3:68:51:18:3c:
db:85:87:dd:2c:4d:a3:a9:44:4e:6c:93:aa:5e:eb:97:4d:7c:
9c:a6:51:7a:97:32:60:4f:2c:e9:12:fd:b6:e8:f4:96:b8:28:
b9:3c:4b:cd:2f:8d:dc:47:10:1b:cb:3c:76:bb:cd:0b:61:21:
a0:79:c2:56:25:7d:a0:6e:0c:52:a1:ed:e9:fc:6a:5c:5d:cc:
8d:54:1f:37:33:13:6a:46:a9:4c:e6:66:5f:71:42:d6:f5:20:
a6:63:81:1e:3b:ae:a1:23:ad:9a:2f:e8:b1:51:ae:e7:48:90:
aa:0b:8c:9d:21:8e:dd:ce:a3:fa:84:57:8f:7f:50:8d:95:30:
12:60:26:08:bf:77:bb:39:79:de:1f:10:c0:3e:2d:c8:a6:cf:
3b:43:76:ea
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIBDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNEUz
Q0VENDY2MUMzOTRFOTM5RDJEODA4Q0ZBQzc1RDI1N0Y5NjI4MB4XDTI1MDQyNjEx
MDYzM1oXDTI2MDQyNDA2MzUyMFowMzExMC8GA1UEAxMoN0VFMUNEMzM4NEEyODBC
MUYwRjgxQjExNjI1NDRBREM0MjZBQzFBRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMZViiNbOXghjkPd9XT8HmDcReKRmV58knQkVKVINV/FvqZwEb5T
3s31bOq/RWBZ7Hv3clZhlpdd6S3yXx9fbUranYP+vWEWUk3HZnp3e9qJr+AufWCP
tnEiJZhe7GRV9O44WYU065YfVNct/QIWIt/RtoLR9aZweLQ284oQdmh4V4hK7GMO
xLehJMbNEBGtnDB4lU0LVGvH8boK/6mII0WBMlpf0v+n4XowBXtUhLV9DV2UaQ59
vmHvFeyOeQ/aEvDXRvNKDYhTtdk9PFOF6/N0DBKUQNMPE65itPhVNZg9z/qyrSPQ
QW3lRcsAdCnkuOOv0LGvY3/lQ5/XPcTcb40CAwEAAaOCAgwwggIIMB0GA1UdDgQW
BBR+4c0zhKKAsfD4GxFiVErcQmrBrTAfBgNVHSMEGDAWgBSk487UZhw5TpOdLYCM
+sddJX+WKDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzY4
L3BPUE8xR1ljT1U2VG5TMkFqUHJIWFNWX2xpZy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvcE9QTzFHWWNPVTZUblMyQWpQckhYU1ZfbGlnLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM2OC9wT1BPMUdZY09VNlRu
UzJBalBySFhTVl9saWcubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADb15Njo2OXoOwXxN19hCwjonWE74cwVM4jge4gheiq06P+SHRLxQf4G/UWZc
jg1xMxcIanArdM77Z2UTGdlk2YFEHovC7cEIz6uI9zx5pa46qZ2a3ZprG1njRlQH
PhDMVPW3ALGKm7NoURg824WH3SxNo6lETmyTql7rl018nKZRepcyYE8s6RL9tuj0
lrgouTxLzS+N3EcQG8s8drvNC2EhoHnCViV9oG4MUqHt6fxqXF3MjVQfNzMTakap
TOZmX3FC1vUgpmOBHjuuoSOtmi/osVGu50iQqguMnSGO3c6j+oRXj39QjZUwEmAm
CL93uzl53h8QwD4tyKbPO0N26g==
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:15:42 2025 by rpki-client