Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3243/VYfZQrIadek6XDTl3374TyZsNnk.mft
File: VYfZQrIadek6XDTl3374TyZsNnk.mft (raw, json)
Hash identifier: 84zYJSkK2CPb3Ng6Lan0Wc4tTnP3CSjYQIoZ3LqdMr8=
Subject key identifier: 76:22:F0:78:F3:A0:62:53:2B:9B:90:39:4C:F0:FB:CD:5C:C4:38:30
Authority key identifier: 55:87:D9:42:B2:1A:75:E9:3A:5C:34:E5:DF:7E:F8:4F:26:6C:36:79
Certificate issuer: /CN=5587D942B21A75E93A5C34E5DF7EF84F266C3679
Certificate serial: 0AEE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VYfZQrIadek6XDTl3374TyZsNnk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3243/VYfZQrIadek6XDTl3374TyZsNnk.mft
Manifest number: 0AEE
Signing time: Mon 28 Apr 2025 19:41:44 +0000
Manifest this update: Mon 28 Apr 2025 19:41:44 +0000
Manifest next update: Tue 29 Apr 2025 01:41:44 +0000
Files and hashes: 1: VYfZQrIadek6XDTl3374TyZsNnk.crl (hash: mfFbz6KlX4FLdSRA9qEgot7ElxgpV0ott4l+ofizrt0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2798 (0xaee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5587D942B21A75E93A5C34E5DF7EF84F266C3679
Validity
Not Before: Apr 28 19:41:44 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=7622F078F3A062532B9B90394CF0FBCD5CC43830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:1b:0d:14:29:ca:ce:90:1f:6c:67:08:9b:
89:ae:95:65:70:52:a1:02:c9:dc:85:1f:cd:bb:18:
6d:bc:4e:b5:c9:86:cf:b2:b9:10:6b:60:51:50:55:
4c:46:21:56:a3:10:0e:43:9e:25:20:55:55:50:31:
0f:21:77:a8:53:5c:22:24:31:29:f9:07:3e:f9:6a:
57:58:f9:4b:e9:c0:32:e3:5f:71:3c:ce:88:0a:79:
73:ec:fa:84:85:d2:16:88:0c:d0:ca:45:c6:a7:e2:
f9:8b:38:9a:71:d4:9a:6e:99:94:06:fa:77:80:52:
18:84:4b:04:1c:e0:de:95:30:67:d5:fa:86:a0:dc:
99:8b:ef:11:af:84:61:ab:bd:4b:81:52:fd:2e:83:
f5:46:60:c6:56:9c:cf:18:88:b8:91:10:21:51:05:
70:ba:53:4a:e9:f8:3e:10:ae:36:56:4e:97:ed:de:
15:84:74:2d:11:ad:b4:2a:86:cd:e0:7b:21:10:04:
83:3e:d8:63:6d:8d:02:d2:f9:10:3d:85:bf:a9:ff:
df:6b:56:be:3f:f1:3d:05:23:2d:a6:ba:91:0a:83:
55:dc:53:3b:01:e9:72:45:fb:e7:8a:4c:7f:20:12:
55:af:78:13:ba:f3:dd:5a:5f:38:d5:7f:35:19:8e:
ae:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:22:F0:78:F3:A0:62:53:2B:9B:90:39:4C:F0:FB:CD:5C:C4:38:30
X509v3 Authority Key Identifier:
keyid:55:87:D9:42:B2:1A:75:E9:3A:5C:34:E5:DF:7E:F8:4F:26:6C:36:79
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3243/VYfZQrIadek6XDTl3374TyZsNnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VYfZQrIadek6XDTl3374TyZsNnk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3243/VYfZQrIadek6XDTl3374TyZsNnk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:5e:fb:6b:91:de:43:70:5e:37:28:f5:c7:88:b1:10:b2:98:
44:0f:2d:e0:f9:04:d7:4d:1a:99:6e:00:f6:cf:e6:9d:bb:f8:
b2:64:13:18:3b:f1:15:24:01:7d:82:5b:a7:a9:f9:82:7f:7e:
0f:0c:42:57:dc:df:4e:dc:8d:0b:c3:5b:6f:b2:94:7e:03:d1:
66:cc:83:f6:32:63:b5:b7:7b:60:41:a7:40:2b:34:51:3a:57:
4e:2e:27:07:19:1d:3d:20:4b:a0:f7:43:84:c6:e1:f9:1d:7e:
94:87:b6:3e:21:af:83:09:48:0d:1a:fd:cc:7e:bb:0e:e1:91:
79:d0:93:1c:7c:69:1c:81:a1:8e:d6:df:d4:b1:bf:db:1e:f0:
5c:16:79:1f:c5:41:5b:c5:83:8b:f1:73:06:49:ea:17:57:09:
41:8d:8e:83:46:e3:6d:65:a6:77:76:42:e8:fe:62:0e:41:a9:
f4:68:39:00:bf:f4:47:e1:a2:2e:b9:b5:16:fc:1d:f4:68:5c:
8e:1c:96:e3:74:13:c4:87:a6:a7:ff:b4:4d:9e:86:84:f2:d8:
d1:d5:60:61:dd:27:47:e3:ec:f5:1f:67:e0:ab:13:22:de:aa:
f9:d8:99:2a:4a:09:76:a2:ea:1b:5d:e3:31:b3:74:b4:23:e1:
a1:2b:72:a7
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCu4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTU4
N0Q5NDJCMjFBNzVFOTNBNUMzNEU1REY3RUY4NEYyNjZDMzY3OTAeFw0yNTA0Mjgx
OTQxNDRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc2MjJGMDc4RjNBMDYy
NTMyQjlCOTAzOTRDRjBGQkNENUNDNDM4MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrsRsNFCnKzpAfbGcIm4mulWVwUqECydyFH827GG28TrXJhs+y
uRBrYFFQVUxGIVajEA5DniUgVVVQMQ8hd6hTXCIkMSn5Bz75aldY+UvpwDLjX3E8
zogKeXPs+oSF0haIDNDKRcan4vmLOJpx1JpumZQG+neAUhiESwQc4N6VMGfV+oag
3JmL7xGvhGGrvUuBUv0ug/VGYMZWnM8YiLiRECFRBXC6U0rp+D4QrjZWTpft3hWE
dC0RrbQqhs3geyEQBIM+2GNtjQLS+RA9hb+p/99rVr4/8T0FIy2mupEKg1XcUzsB
6XJF++eKTH8gElWveBO6891aXzjVfzUZjq6fAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUdiLwePOgYlMrm5A5TPD7zVzEODAwHwYDVR0jBBgwFoAUVYfZQrIadek6XDTl
3374TyZsNnkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0
My9WWWZaUXJJYWRlazZYRFRsMzM3NFR5WnNObmsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1ZZZlpRcklhZGVrNlhEVGwzMzc0VHlac05uay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDMvVllmWlFySWFkZWs2
WERUbDMzNzRUeVpzTm5rLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBACFe+2uR3kNwXjco9ceIsRCymEQPLeD5BNdNGpluAPbP5p27+LJkExg78RUk
AX2CW6ep+YJ/fg8MQlfc307cjQvDW2+ylH4D0WbMg/YyY7W3e2BBp0ArNFE6V04u
JwcZHT0gS6D3Q4TG4fkdfpSHtj4hr4MJSA0a/cx+uw7hkXnQkxx8aRyBoY7W39Sx
v9se8FwWeR/FQVvFg4vxcwZJ6hdXCUGNjoNG421lpnd2Quj+Yg5BqfRoOQC/9Efh
oi65tRb8HfRoXI4cluN0E8SHpqf/tE2ehoTy2NHVYGHdJ0fj7PUfZ+CrEyLeqvnY
mSpKCXai6htd4zGzdLQj4aErcqc=
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:44 2025 by rpki-client on console.sobornost.net