Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2890/QANTiAtHjVuXKhIEzwZR3ilfjso.mft
File: QANTiAtHjVuXKhIEzwZR3ilfjso.mft (raw, json)
Hash identifier: QzkYm20VxvKgoasdPL1h3qTnHuFk/mn2AySigHs0Ak4=
Subject key identifier: 3E:02:B0:EC:72:B4:53:6E:FB:18:99:9F:8A:FE:BD:6B:63:5D:F8:01
Authority key identifier: 40:03:53:88:0B:47:8D:5B:97:2A:12:04:CF:06:51:DE:29:5F:8E:CA
Certificate issuer: /CN=400353880B478D5B972A1204CF0651DE295F8ECA
Certificate serial: 1346
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QANTiAtHjVuXKhIEzwZR3ilfjso.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/QANTiAtHjVuXKhIEzwZR3ilfjso.mft
Manifest number: 1341
Signing time: Thu 20 Feb 2025 00:25:42 +0000
Manifest this update: Thu 20 Feb 2025 00:25:42 +0000
Manifest next update: Thu 20 Feb 2025 06:25:42 +0000
Files and hashes: 1: QANTiAtHjVuXKhIEzwZR3ilfjso.crl (hash: vjLhzXVPMmXZ4yuA1y+bznHEvwyQO9lu4mY0/RT9W18=)
2: YChybX2-uPVVnqdSYmR5njJNPi8.roa (hash: Eoa/Wqb1zFLj0i5Y48PjM9Jp4VzTiVGXZggsf4eLD9A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4934 (0x1346)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400353880B478D5B972A1204CF0651DE295F8ECA
Validity
Not Before: Feb 20 00:25:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3E02B0EC72B4536EFB18999F8AFEBD6B635DF801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:58:a9:d9:69:b3:4b:f1:61:4b:87:6a:75:
b6:dc:4a:1c:b4:5f:ba:82:db:a0:72:66:f1:81:08:
59:bd:57:ef:79:43:59:e7:38:14:5a:62:1f:35:98:
41:d2:5f:f0:df:8d:c1:62:65:50:ca:e2:5c:08:a0:
d0:6d:af:98:80:82:a4:85:45:bf:5e:83:60:f2:53:
99:f3:2d:fe:d7:95:35:30:00:87:20:de:a5:5b:69:
1b:0a:1c:b3:83:65:27:64:be:d9:fa:d4:cf:99:f4:
d7:e5:de:c4:9d:7f:a1:a4:37:55:3a:fd:04:50:66:
34:88:f5:cc:62:55:6b:03:3b:7b:eb:ae:8e:0c:8f:
b5:3b:c8:7f:cc:ab:c1:4a:b6:6f:10:e5:80:06:dd:
6b:19:c4:d5:49:fe:f5:33:13:ad:62:ec:cf:17:5f:
1c:1b:8b:b4:7a:89:1b:87:32:d1:c7:ee:ea:c5:9d:
2c:19:b7:11:ca:ca:d4:6d:17:bf:f6:4a:2c:0f:8e:
5f:5a:63:d4:33:f4:86:05:10:71:4b:25:a4:fa:95:
f1:4d:2a:24:7b:a9:55:95:ee:4e:94:86:70:36:a4:
80:c0:b0:62:2e:39:5b:48:f4:14:d7:a4:b6:9c:0f:
6d:91:f2:30:19:7e:6d:86:c6:12:7b:5a:a2:a1:e5:
0c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:02:B0:EC:72:B4:53:6E:FB:18:99:9F:8A:FE:BD:6B:63:5D:F8:01
X509v3 Authority Key Identifier:
keyid:40:03:53:88:0B:47:8D:5B:97:2A:12:04:CF:06:51:DE:29:5F:8E:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/QANTiAtHjVuXKhIEzwZR3ilfjso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QANTiAtHjVuXKhIEzwZR3ilfjso.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/QANTiAtHjVuXKhIEzwZR3ilfjso.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:33:ce:56:3a:85:3b:96:ae:35:02:37:08:db:54:be:7b:d8:
bf:58:e5:c5:f1:c9:5f:f5:7a:a8:8f:41:39:80:f0:0c:b2:d4:
2c:b0:08:42:81:27:2d:31:78:05:4f:93:87:42:66:fc:d3:db:
55:0a:d0:40:b7:23:ae:cd:f0:5a:2a:2b:a5:f4:f9:e3:bb:2a:
ff:9a:01:98:7c:7c:20:ff:dd:6d:f9:ce:31:51:61:bd:ba:42:
40:55:f5:78:a5:38:06:15:6f:7d:97:8d:40:b3:8b:58:bf:9f:
07:b7:74:7b:52:d2:42:48:48:f9:30:5c:2d:29:e0:05:fc:59:
7a:7e:9c:cf:b6:73:5c:29:2a:13:ca:5f:5a:b6:e5:c3:a6:21:
c7:4c:ac:50:70:1c:e4:b2:39:43:4e:dd:c1:14:8c:c5:c7:ee:
63:b1:99:e5:07:4c:d7:34:e2:ff:50:db:19:49:f3:d5:0f:2c:
64:b2:f1:78:1e:9e:18:bf:9e:08:32:1f:26:e7:ba:95:6b:19:
64:d3:0c:2f:cd:45:a9:e2:a7:fa:1b:6d:24:48:f8:36:3c:30:
6e:9d:b2:f9:51:e9:a6:68:31:15:11:50:80:4d:03:d7:c2:e1:
3d:43:2b:04:63:c1:c0:ca:90:1f:c0:a8:80:2f:f0:77:00:be:
70:ec:69:4d
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICE0YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDAw
MzUzODgwQjQ3OEQ1Qjk3MkExMjA0Q0YwNjUxREUyOTVGOEVDQTAeFw0yNTAyMjAw
MDI1NDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDNFMDJCMEVDNzJCNDUz
NkVGQjE4OTk5RjhBRkVCRDZCNjM1REY4MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOMlip2WmzS/FhS4dqdbbcShy0X7qC26ByZvGBCFm9V+95Q1nn
OBRaYh81mEHSX/DfjcFiZVDK4lwIoNBtr5iAgqSFRb9eg2DyU5nzLf7XlTUwAIcg
3qVbaRsKHLODZSdkvtn61M+Z9Nfl3sSdf6GkN1U6/QRQZjSI9cxiVWsDO3vrro4M
j7U7yH/Mq8FKtm8Q5YAG3WsZxNVJ/vUzE61i7M8XXxwbi7R6iRuHMtHH7urFnSwZ
txHKytRtF7/2SiwPjl9aY9Qz9IYFEHFLJaT6lfFNKiR7qVWV7k6UhnA2pIDAsGIu
OVtI9BTXpLacD22R8jAZfm2GxhJ7WqKh5Qz1AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUPgKw7HK0U277GJmfiv69a2Nd+AEwHwYDVR0jBBgwFoAUQANTiAtHjVuXKhIE
zwZR3ilfjsowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg5
MC9RQU5UaUF0SGpWdVhLaElFendaUjNpbGZqc28uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1FBTlRpQXRIalZ1WEtoSUV6d1pSM2lsZmpzby5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4OTAvUUFOVGlBdEhqVnVY
S2hJRXp3WlIzaWxmanNvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBACUzzlY6hTuWrjUCNwjbVL572L9Y5cXxyV/1eqiPQTmA8Ayy1CywCEKBJy0x
eAVPk4dCZvzT21UK0EC3I67N8FoqK6X0+eO7Kv+aAZh8fCD/3W35zjFRYb26QkBV
9XilOAYVb32XjUCzi1i/nwe3dHtS0kJISPkwXC0p4AX8WXp+nM+2c1wpKhPKX1q2
5cOmIcdMrFBwHOSyOUNO3cEUjMXH7mOxmeUHTNc04v9Q2xlJ89UPLGSy8Xgenhi/
nggyHybnupVrGWTTDC/NRanip/obbSRI+DY8MG6dsvlR6aZoMRURUIBNA9fC4T1D
KwRjwcDKkB/AqIAv8HcAvnDsaU0=
-----END CERTIFICATE-----
Generated at Tue Feb 25 03:43:17 2025 by rpki-client on console.sobornost.net