Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft
File: JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft (raw, json)
Hash identifier: KpzWu124zOHUM0caSGQaHMu49mEvEO6H8UWSq7ibHw8=
Subject key identifier: 8F:DA:8E:1F:76:2C:31:87:57:64:20:B9:E9:29:48:47:5E:97:BB:9E
Authority key identifier: 24:6B:8D:86:9C:83:01:89:45:DF:9F:99:00:93:42:90:3D:07:64:71
Certificate issuer: /CN=246B8D869C83018945DF9F99009342903D076471
Certificate serial: 0D14
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JGuNhpyDAYlF35-ZAJNCkD0HZHE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft
Manifest number: 0D14
Signing time: Mon 28 Apr 2025 19:36:51 +0000
Manifest this update: Mon 28 Apr 2025 19:36:51 +0000
Manifest next update: Tue 29 Apr 2025 01:36:51 +0000
Files and hashes: 1: JGuNhpyDAYlF35-ZAJNCkD0HZHE.crl (hash: Si1zUkVOwmHVJGHoVI4MaYF1baysvWYT5f/Cdwj6zIc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3348 (0xd14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246B8D869C83018945DF9F99009342903D076471
Validity
Not Before: Apr 28 19:36:51 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=8FDA8E1F762C3187576420B9E92948475E97BB9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:41:ef:79:37:1e:c4:f8:1c:e5:0e:71:9d:
c9:14:b5:45:c8:aa:4a:b6:7f:b6:64:6d:9c:c5:b4:
9d:64:a4:5d:ae:e0:ed:5a:99:90:d5:ed:c7:09:85:
0b:c6:66:ea:de:08:3b:27:c5:cf:0c:8c:3f:54:ad:
62:47:28:69:25:ab:e7:ba:5c:a2:35:85:40:00:ca:
db:57:06:09:65:3d:dd:07:b0:1b:9b:da:10:2f:f3:
9a:68:b7:36:09:06:0a:4a:aa:1b:46:6f:b1:e6:45:
d8:1a:ea:3f:5c:63:42:76:05:d5:24:29:3b:9b:7e:
1b:eb:34:ff:53:23:ab:6e:da:9a:59:45:35:96:30:
93:60:cb:65:9d:a8:c8:1b:e3:ab:f7:c7:ec:b0:b3:
da:48:9c:79:e5:ac:6f:fc:af:ec:2b:30:f4:69:7a:
5b:07:4e:6a:5f:49:a9:b0:d5:ac:08:92:3f:c5:6e:
0a:fd:89:aa:7b:61:23:03:8e:ba:cd:f3:07:2e:54:
c1:d9:42:92:6d:36:57:70:93:04:79:95:a2:d4:f7:
c0:6c:c6:dd:1a:1c:88:96:b8:36:74:cf:47:aa:f9:
ea:58:a5:1b:b4:05:52:37:ba:62:65:7b:4b:4f:39:
a9:19:cf:aa:b3:fc:e9:18:0f:6c:f6:2f:52:2b:d1:
99:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DA:8E:1F:76:2C:31:87:57:64:20:B9:E9:29:48:47:5E:97:BB:9E
X509v3 Authority Key Identifier:
keyid:24:6B:8D:86:9C:83:01:89:45:DF:9F:99:00:93:42:90:3D:07:64:71
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JGuNhpyDAYlF35-ZAJNCkD0HZHE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:32:70:94:e9:4b:c9:14:6c:e6:75:cb:4f:ed:16:b5:ed:c1:
1f:01:67:38:9d:41:6e:e6:4d:03:cf:69:0e:1e:b1:3f:89:40:
fc:b9:d4:73:f3:f3:4d:d4:9c:fd:f4:a2:52:64:90:d2:6c:04:
f5:25:c0:66:38:16:38:ab:d0:74:cc:57:23:28:98:80:fa:27:
11:c0:52:d2:ba:c6:ca:3a:75:ee:0d:ab:94:18:4b:35:9d:10:
1c:ab:ec:d8:29:dd:aa:dc:18:f9:8b:a0:aa:d1:5a:70:23:59:
68:53:b2:e2:68:56:ac:fa:ba:95:72:de:f5:a8:a0:48:3e:60:
83:0d:5f:b6:04:e4:26:d9:90:ba:21:8c:8f:21:7a:0f:b1:26:
ef:2b:91:02:95:e9:da:11:62:53:9c:c1:e1:e3:c7:c4:8c:f8:
35:39:8e:ed:84:c8:b8:7b:40:e6:13:69:8d:64:60:00:da:7f:
b3:fd:bc:b8:e5:c2:29:15:98:c8:c5:93:70:11:b9:75:b2:03:
83:19:54:83:fe:93:36:45:21:03:00:0e:d1:cd:9a:f8:9d:47:
4e:79:90:48:ad:65:47:98:c1:ac:e4:4f:d8:47:0e:f8:1b:a9:
04:57:71:a7:cb:12:aa:7a:0e:5b:16:dc:aa:6d:ef:90:a9:36:
ad:51:2e:6d
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICDRQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQ2
QjhEODY5QzgzMDE4OTQ1REY5Rjk5MDA5MzQyOTAzRDA3NjQ3MTAeFw0yNTA0Mjgx
OTM2NTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDhGREE4RTFGNzYyQzMx
ODc1NzY0MjBCOUU5Mjk0ODQ3NUU5N0JCOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvv0HveTcexPgc5Q5xnckUtUXIqkq2f7ZkbZzFtJ1kpF2u4O1a
mZDV7ccJhQvGZureCDsnxc8MjD9UrWJHKGklq+e6XKI1hUAAyttXBgllPd0HsBub
2hAv85potzYJBgpKqhtGb7HmRdga6j9cY0J2BdUkKTubfhvrNP9TI6tu2ppZRTWW
MJNgy2WdqMgb46v3x+yws9pInHnlrG/8r+wrMPRpelsHTmpfSamw1awIkj/Fbgr9
iap7YSMDjrrN8wcuVMHZQpJtNldwkwR5laLU98Bsxt0aHIiWuDZ0z0eq+epYpRu0
BVI3umJle0tPOakZz6qz/OkYD2z2L1Ir0ZmXAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUj9qOH3YsMYdXZCC56SlIR16Xu54wHwYDVR0jBBgwFoAUJGuNhpyDAYlF35+Z
AJNCkD0HZHEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy
NC9KR3VOaHB5REFZbEYzNS1aQUpOQ2tEMEhaSEUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0pHdU5ocHlEQVlsRjM1LVpBSk5Da0QwSFpIRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjQvSkd1TmhweURBWWxG
MzUtWkFKTkNrRDBIWkhFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAE0ycJTpS8kUbOZ1y0/tFrXtwR8BZzidQW7mTQPPaQ4esT+JQPy51HPz803U
nP30olJkkNJsBPUlwGY4Fjir0HTMVyMomID6JxHAUtK6xso6de4Nq5QYSzWdEByr
7Ngp3arcGPmLoKrRWnAjWWhTsuJoVqz6upVy3vWooEg+YIMNX7YE5CbZkLohjI8h
eg+xJu8rkQKV6doRYlOcweHjx8SM+DU5ju2EyLh7QOYTaY1kYADaf7P9vLjlwikV
mMjFk3ARuXWyA4MZVIP+kzZFIQMADtHNmvidR055kEitZUeYwazkT9hHDvgbqQRX
cafLEqp6DlsW3Kpt75CpNq1RLm0=
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:44 2025 by rpki-client on console.sobornost.net