Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.mft
File: lazTI5qu6vMSOhjdo_diO4EFNtI.mft (raw, json)
Hash identifier: 0j0ZyXnvU4U3uhFaYDwduidnHq/UwyI6EJtXjSXK+Nc=
Subject key identifier: E6:48:C1:6B:92:E9:3D:4A:7B:48:10:29:F3:BE:18:38:63:5C:7A:2D
Authority key identifier: 95:AC:D3:23:9A:AE:EA:F3:12:3A:18:DD:A3:F7:62:3B:81:05:36:D2
Certificate issuer: /CN=95ACD3239AAEEAF3123A18DDA3F7623B810536D2
Certificate serial: 0693
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lazTI5qu6vMSOhjdo_diO4EFNtI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.mft
Manifest number: 0693
Signing time: Mon 28 Apr 2025 19:38:25 +0000
Manifest this update: Mon 28 Apr 2025 19:38:25 +0000
Manifest next update: Tue 29 Apr 2025 01:38:25 +0000
Files and hashes: 1: lazTI5qu6vMSOhjdo_diO4EFNtI.crl (hash: bm5l8tvDp2imOWiOUk11C70R95au4NtmQTVUPjIo77g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1683 (0x693)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ACD3239AAEEAF3123A18DDA3F7623B810536D2
Validity
Not Before: Apr 28 19:38:25 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E648C16B92E93D4A7B481029F3BE1838635C7A2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:03:5c:80:ef:04:fa:0b:e3:a9:b7:62:2e:34:
82:27:27:82:04:5c:4e:e8:fc:b8:ce:60:93:81:2d:
0f:88:f9:0e:e8:bb:5d:d8:97:d4:35:b5:ad:84:e8:
a3:80:f9:3f:19:52:c7:d7:69:46:0e:c0:49:1c:18:
bf:d9:12:63:b1:a2:ea:e2:67:8b:bb:36:c3:b9:b3:
c1:f3:5a:60:3c:7f:9c:77:1f:4c:0a:f4:0e:7f:84:
2c:74:e3:2e:d1:6f:d3:8c:7e:cd:19:61:42:b5:79:
8a:b7:6e:e9:91:a5:d4:9a:1f:ad:0a:44:c0:94:94:
ca:d7:37:97:e6:8b:ce:a7:1e:92:b1:d0:d1:c1:b8:
3d:48:54:61:6e:f1:48:3d:17:24:0c:f7:c0:50:4e:
8c:49:e0:44:31:52:b9:cb:69:d9:bd:a4:d6:52:a2:
f5:c0:d1:13:ee:7e:8c:4b:71:10:75:25:39:a9:c5:
e1:10:38:36:44:13:57:f3:b6:7d:8f:f0:06:34:fd:
3f:d8:a9:96:00:66:af:87:59:07:6b:55:68:a2:17:
16:2f:df:26:80:d7:93:84:0d:39:05:0b:63:fe:fd:
1e:fa:af:f8:4c:c7:27:17:6b:1d:ad:39:20:bb:c1:
a3:d2:10:6e:e5:34:b9:23:9f:71:a1:eb:f5:69:7c:
04:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:48:C1:6B:92:E9:3D:4A:7B:48:10:29:F3:BE:18:38:63:5C:7A:2D
X509v3 Authority Key Identifier:
keyid:95:AC:D3:23:9A:AE:EA:F3:12:3A:18:DD:A3:F7:62:3B:81:05:36:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lazTI5qu6vMSOhjdo_diO4EFNtI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:5e:f0:5f:ea:c5:e4:76:3a:31:f0:1c:40:24:dd:cc:e1:ee:
d3:a8:6e:c9:7a:a9:10:81:30:71:4c:34:98:c7:a8:e4:e2:64:
3e:5d:22:ec:a1:2b:61:b1:47:36:3d:d2:c4:83:49:d9:21:54:
02:47:e1:33:96:bc:60:94:16:ae:ce:fa:8a:eb:2a:56:c3:cd:
00:85:00:1a:e1:04:c8:f0:11:6e:00:bf:13:20:00:02:3c:3a:
82:90:3b:35:68:ee:ea:48:17:fb:24:7c:ad:e2:48:6d:39:87:
1d:8d:03:22:96:60:7b:ff:10:29:ab:02:9a:72:34:0c:bb:07:
c5:c9:90:98:51:13:03:33:cb:12:a2:39:86:23:75:3c:54:9b:
82:93:dd:1f:e2:27:eb:fd:d2:54:11:c2:c4:13:b4:8a:56:a7:
9d:91:74:7e:2f:65:65:a8:44:d4:c9:66:1a:b0:dd:b1:b7:43:
52:37:8f:75:7e:0b:ed:34:28:ad:a0:dd:40:59:29:62:0c:8b:
25:a3:93:6f:c2:e8:7d:40:91:f4:40:3f:8d:b7:4f:5a:fb:eb:
c8:cb:56:f0:e8:2d:a4:cb:f3:7c:5d:7d:d6:9d:79:b0:87:0c:
d4:1e:d6:69:a5:ee:03:2c:7a:eb:ff:d4:c3:f8:43:bf:e1:82:
32:e0:64:14
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBpMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTVB
Q0QzMjM5QUFFRUFGMzEyM0ExOEREQTNGNzYyM0I4MTA1MzZEMjAeFw0yNTA0Mjgx
OTM4MjVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEU2NDhDMTZCOTJFOTNE
NEE3QjQ4MTAyOUYzQkUxODM4NjM1QzdBMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeA1yA7wT6C+Opt2IuNIInJ4IEXE7o/LjOYJOBLQ+I+Q7ou13Y
l9Q1ta2E6KOA+T8ZUsfXaUYOwEkcGL/ZEmOxouriZ4u7NsO5s8HzWmA8f5x3H0wK
9A5/hCx04y7Rb9OMfs0ZYUK1eYq3bumRpdSaH60KRMCUlMrXN5fmi86nHpKx0NHB
uD1IVGFu8Ug9FyQM98BQToxJ4EQxUrnLadm9pNZSovXA0RPufoxLcRB1JTmpxeEQ
ODZEE1fztn2P8AY0/T/YqZYAZq+HWQdrVWiiFxYv3yaA15OEDTkFC2P+/R76r/hM
xycXax2tOSC7waPSEG7lNLkjn3Gh6/VpfASRAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU5kjBa5LpPUp7SBAp874YOGNcei0wHwYDVR0jBBgwFoAUlazTI5qu6vMSOhjd
o/diO4EFNtIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4
NS9sYXpUSTVxdTZ2TVNPaGpkb19kaU80RUZOdEkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2xhelRJNXF1NnZNU09oamRvX2RpTzRFRk50SS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODUvbGF6VEk1cXU2dk1T
T2hqZG9fZGlPNEVGTnRJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAHde8F/qxeR2OjHwHEAk3czh7tOobsl6qRCBMHFMNJjHqOTiZD5dIuyhK2Gx
RzY90sSDSdkhVAJH4TOWvGCUFq7O+orrKlbDzQCFABrhBMjwEW4AvxMgAAI8OoKQ
OzVo7upIF/skfK3iSG05hx2NAyKWYHv/ECmrAppyNAy7B8XJkJhREwMzyxKiOYYj
dTxUm4KT3R/iJ+v90lQRwsQTtIpWp52RdH4vZWWoRNTJZhqw3bG3Q1I3j3V+C+00
KK2g3UBZKWIMiyWjk2/C6H1AkfRAP423T1r768jLVvDoLaTL83xdfdadebCHDNQe
1mml7gMseuv/1MP4Q7/hgjLgZBQ=
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:45 2025 by rpki-client on console.sobornost.net