Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3252/U4_HWfrs-Y7XUQyPLm3ppxj43M4.mft
File: U4_HWfrs-Y7XUQyPLm3ppxj43M4.mft (raw, json)
Hash identifier: MpbwnP9GuoLcIivE9L7elm4TBnhQbMGV8u+AJcTt87s=
Subject key identifier: CE:C9:8C:09:0F:7F:37:2A:F4:5C:A1:35:F2:A5:1E:E1:C4:CF:F0:FC
Authority key identifier: 53:8F:C7:59:FA:EC:F9:8E:D7:51:0C:8F:2E:6D:E9:A7:18:F8:DC:CE
Certificate issuer: /CN=538FC759FAECF98ED7510C8F2E6DE9A718F8DCCE
Certificate serial: 0958
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U4_HWfrs-Y7XUQyPLm3ppxj43M4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/U4_HWfrs-Y7XUQyPLm3ppxj43M4.mft
Manifest number: 0954
Signing time: Mon 28 Apr 2025 19:37:51 +0000
Manifest this update: Mon 28 Apr 2025 19:37:51 +0000
Manifest next update: Tue 29 Apr 2025 01:37:51 +0000
Files and hashes: 1: U4_HWfrs-Y7XUQyPLm3ppxj43M4.crl (hash: C2qTsX4BeNb08PYNm/vrKrZ4bTYmF/sEhMYphkfKB50=)
2: bu6hhjGdwcSVWU6ctnE5sH_9zTA.roa (hash: xFPgpcMsHTSZJADrBkrkSBA1yrEfbTxlof6jzCQ6Pfg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2392 (0x958)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538FC759FAECF98ED7510C8F2E6DE9A718F8DCCE
Validity
Not Before: Apr 28 19:37:51 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=CEC98C090F7F372AF45CA135F2A51EE1C4CFF0FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:33:6c:9a:1c:63:6f:9d:13:40:1d:6f:ee:53:
9d:a4:4c:9a:b9:e4:f4:97:0c:d4:41:88:4b:be:b4:
71:86:ea:cb:70:2b:03:18:3e:87:7c:7c:2e:8e:c8:
d4:02:58:18:b8:ce:a2:1a:e3:04:15:85:7d:13:f7:
eb:4b:3c:87:7c:35:ae:f7:fb:66:3d:d2:c2:dc:22:
4b:3b:73:33:41:4c:0f:be:65:f1:04:e1:64:c6:00:
29:e0:69:d1:7b:b9:ce:3d:de:f1:4f:57:d5:2e:21:
1d:e1:ca:88:f2:ff:ed:7c:05:c5:d2:ba:56:8d:6c:
a4:6b:4c:16:71:b3:d7:8e:65:7e:17:01:99:a2:dc:
67:21:4c:96:5f:66:f8:84:54:3d:86:e5:77:bb:2e:
1c:7c:ca:3e:d5:1d:d0:d1:a0:bf:7c:d9:4e:2a:0d:
f4:35:ca:c5:41:a5:ea:73:fd:1d:5d:11:b4:cd:3a:
52:94:b5:a3:dd:cd:6f:7c:73:b4:1d:23:2a:f5:d2:
3a:8d:57:97:6a:19:c2:62:8f:69:44:9f:3c:80:e5:
2a:0a:b3:47:9f:be:9d:29:fe:c7:f0:cc:b2:c0:8b:
86:fd:e2:5b:22:d1:4c:0f:2b:6b:d5:bc:be:bc:5e:
45:f0:22:32:13:e7:42:f4:8b:af:2c:05:25:60:29:
e6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C9:8C:09:0F:7F:37:2A:F4:5C:A1:35:F2:A5:1E:E1:C4:CF:F0:FC
X509v3 Authority Key Identifier:
keyid:53:8F:C7:59:FA:EC:F9:8E:D7:51:0C:8F:2E:6D:E9:A7:18:F8:DC:CE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/U4_HWfrs-Y7XUQyPLm3ppxj43M4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U4_HWfrs-Y7XUQyPLm3ppxj43M4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/U4_HWfrs-Y7XUQyPLm3ppxj43M4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:d6:73:cf:5c:fb:59:fc:52:13:11:ce:50:4b:65:05:7a:68:
df:bb:5f:c7:c1:88:cb:00:bb:04:b8:1f:b6:c4:95:19:cb:83:
ff:87:1b:dd:9a:ac:7e:19:ed:55:3b:e0:47:97:e2:1a:17:3a:
b4:de:3e:7c:aa:88:d9:84:29:14:bf:c3:90:28:bb:8c:c7:5a:
2d:7c:4e:17:58:36:53:e5:af:88:7c:6c:4a:30:e8:f4:af:a4:
d2:63:a8:b8:08:c9:cd:0f:93:02:16:7e:b4:d7:5e:64:fb:ad:
ee:eb:fc:82:70:92:e0:7d:be:cd:4a:17:d2:d4:75:07:5e:2b:
0f:92:b9:6d:20:8b:03:20:87:15:cf:c6:67:ba:94:ea:a0:70:
94:ef:eb:73:f4:a1:9b:8d:ac:81:c5:c5:bd:7f:19:b8:9e:82:
ef:69:69:06:2a:2f:90:55:25:fe:70:e4:09:bc:84:e5:56:bd:
28:e5:c1:c7:74:10:e9:2e:fa:40:95:22:f4:06:ab:77:df:6e:
b4:14:8b:b9:ea:45:03:63:c1:7e:7a:0b:1c:6c:ea:1a:40:41:
56:f3:68:53:1e:65:5b:c0:75:0b:22:22:25:d0:6a:cd:6e:62:
60:cc:ac:2a:ce:47:b8:3d:0c:aa:b5:99:de:3e:29:aa:83:9e:
8f:c1:50:11
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCVgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTM4
RkM3NTlGQUVDRjk4RUQ3NTEwQzhGMkU2REU5QTcxOEY4RENDRTAeFw0yNTA0Mjgx
OTM3NTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKENFQzk4QzA5MEY3RjM3
MkFGNDVDQTEzNUYyQTUxRUUxQzRDRkYwRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9M2yaHGNvnRNAHW/uU52kTJq55PSXDNRBiEu+tHGG6stwKwMY
Pod8fC6OyNQCWBi4zqIa4wQVhX0T9+tLPId8Na73+2Y90sLcIks7czNBTA++ZfEE
4WTGACngadF7uc493vFPV9UuIR3hyojy/+18BcXSulaNbKRrTBZxs9eOZX4XAZmi
3GchTJZfZviEVD2G5Xe7Lhx8yj7VHdDRoL982U4qDfQ1ysVBpepz/R1dEbTNOlKU
taPdzW98c7QdIyr10jqNV5dqGcJij2lEnzyA5SoKs0efvp0p/sfwzLLAi4b94lsi
0UwPK2vVvL68XkXwIjIT50L0i68sBSVgKeb5AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUzsmMCQ9/Nyr0XKE18qUe4cTP8PwwHwYDVR0jBBgwFoAUU4/HWfrs+Y7XUQyP
Lm3ppxj43M4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1
Mi9VNF9IV2Zycy1ZN1hVUXlQTG0zcHB4ajQzTTQuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1U0X0hXZnJzLVk3WFVReVBMbTNwcHhqNDNNNC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTIvVTRfSFdmcnMtWTdY
VVF5UExtM3BweGo0M000Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAGnWc89c+1n8UhMRzlBLZQV6aN+7X8fBiMsAuwS4H7bElRnLg/+HG92arH4Z
7VU74EeX4hoXOrTePnyqiNmEKRS/w5Aou4zHWi18ThdYNlPlr4h8bEow6PSvpNJj
qLgIyc0PkwIWfrTXXmT7re7r/IJwkuB9vs1KF9LUdQdeKw+SuW0giwMghxXPxme6
lOqgcJTv63P0oZuNrIHFxb1/Gbiegu9paQYqL5BVJf5w5Am8hOVWvSjlwcd0EOku
+kCVIvQGq3ffbrQUi7nqRQNjwX56Cxxs6hpAQVbzaFMeZVvAdQsiIiXQas1uYmDM
rCrOR7g9DKq1md4+KaqDno/BUBE=
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:45 2025 by rpki-client on console.sobornost.net