Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.mft
File: YBt2TrIFMYSt13mb83x-Ctsz99w.mft (raw, json)
Hash identifier: +xVEAp5cGdBApp2wVt3qu3y9+iErOzZsFQabmr+vxAo=
Subject key identifier: B1:7C:3C:F4:4B:F9:80:D1:A0:BF:8E:74:79:DA:90:78:E8:29:0A:73
Authority key identifier: 60:1B:76:4E:B2:05:31:84:AD:D7:79:9B:F3:7C:7E:0A:DB:33:F7:DC
Certificate issuer: /CN=601B764EB2053184ADD7799BF37C7E0ADB33F7DC
Certificate serial: 02D4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YBt2TrIFMYSt13mb83x-Ctsz99w.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.mft
Manifest number: 02D4
Signing time: Mon 28 Apr 2025 19:39:29 +0000
Manifest this update: Mon 28 Apr 2025 19:39:29 +0000
Manifest next update: Tue 29 Apr 2025 01:39:29 +0000
Files and hashes: 1: YBt2TrIFMYSt13mb83x-Ctsz99w.crl (hash: Z5dnu95XToiZh0hSx0IOaUfYf/x9NGJOXDrTxtFewLE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 724 (0x2d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601B764EB2053184ADD7799BF37C7E0ADB33F7DC
Validity
Not Before: Apr 28 19:39:29 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B17C3CF44BF980D1A0BF8E7479DA9078E8290A73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:eb:28:ea:a9:81:15:e8:67:3f:e4:f3:8a:
14:e9:34:01:10:18:8d:d3:fb:a9:6a:ed:20:f6:02:
72:24:f9:94:e1:cc:e5:9a:94:95:d1:bf:0b:fd:0e:
d7:fc:4c:c7:06:e7:99:e1:aa:fd:93:f6:05:76:69:
f8:28:79:bc:77:65:1a:1c:da:11:24:68:6d:7f:1f:
e8:34:2b:ab:73:bf:ca:23:95:b9:57:40:e3:70:71:
f0:02:3c:40:22:9c:ae:65:97:7d:cc:d4:50:41:17:
a2:11:16:e8:69:cc:2a:38:eb:6a:6f:98:83:14:99:
7e:d1:ec:11:11:5b:a2:42:ed:d7:00:96:5c:51:f2:
0a:3c:53:af:c7:16:a2:e5:9c:c4:51:cc:bc:5f:49:
e2:f8:6f:4c:c8:12:6e:32:14:23:34:1d:84:77:6f:
40:4d:aa:5a:a7:a3:b5:8a:27:62:64:8a:53:b1:60:
77:b5:ee:d5:f7:20:1c:35:fc:9e:b7:08:ca:42:34:
5f:22:a9:f7:98:2c:3f:eb:40:dc:16:55:97:e9:da:
6b:a4:fd:8e:46:7f:bd:a0:94:d2:b4:08:c6:df:a8:
61:1a:f2:0a:57:ac:97:65:73:88:d2:3c:2e:3c:63:
eb:87:e2:40:0d:58:9a:a8:0a:6b:9e:31:59:d2:36:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7C:3C:F4:4B:F9:80:D1:A0:BF:8E:74:79:DA:90:78:E8:29:0A:73
X509v3 Authority Key Identifier:
keyid:60:1B:76:4E:B2:05:31:84:AD:D7:79:9B:F3:7C:7E:0A:DB:33:F7:DC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YBt2TrIFMYSt13mb83x-Ctsz99w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:49:a1:ff:0f:99:74:26:e7:4e:b9:0b:d3:9b:49:34:10:f5:
73:e0:d7:a3:0a:34:83:8c:2f:69:a9:29:a8:77:78:10:28:5e:
3f:de:40:de:c3:b6:fb:1d:4b:b5:df:e9:43:46:1c:35:02:be:
86:26:67:3b:ca:f8:0f:13:c1:3c:c0:b3:f1:08:53:86:6c:86:
97:7e:e7:ad:4a:47:15:71:25:7c:2d:6a:aa:60:fa:bf:c2:d5:
f3:cb:01:78:eb:4a:34:e5:2c:7f:8f:9a:1f:12:5e:b9:dc:8e:
3a:03:f8:1d:d8:71:b8:08:5d:8d:90:17:2b:e8:10:69:0f:30:
34:2d:99:c5:40:3d:9f:e4:ec:86:f3:a6:d1:26:17:01:6a:05:
24:8f:fa:94:4d:2f:c7:2f:4e:91:19:32:29:75:52:18:46:4d:
9b:f5:9d:c8:62:b0:66:f3:14:3d:e3:6b:bf:e5:61:a4:35:76:
06:30:e1:de:54:9e:84:04:42:aa:00:b5:c0:9d:f0:6a:6b:89:
d0:19:6b:3d:74:be:80:f9:1a:63:16:9d:cf:79:c6:d0:ce:ac:
0b:0e:1d:79:1a:7f:18:59:e9:2f:67:de:2c:81:4c:67:20:ef:
33:d1:e7:1a:1a:1d:10:c2:24:9c:79:ec:b0:7e:8f:e5:ba:67:
8e:c4:dd:32
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjAx
Qjc2NEVCMjA1MzE4NEFERDc3OTlCRjM3QzdFMEFEQjMzRjdEQzAeFw0yNTA0Mjgx
OTM5MjlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEIxN0MzQ0Y0NEJGOTgw
RDFBMEJGOEU3NDc5REE5MDc4RTgyOTBBNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGQ+so6qmBFehnP+TzihTpNAEQGI3T+6lq7SD2AnIk+ZThzOWa
lJXRvwv9Dtf8TMcG55nhqv2T9gV2afgoebx3ZRoc2hEkaG1/H+g0K6tzv8ojlblX
QONwcfACPEAinK5ll33M1FBBF6IRFuhpzCo462pvmIMUmX7R7BERW6JC7dcAllxR
8go8U6/HFqLlnMRRzLxfSeL4b0zIEm4yFCM0HYR3b0BNqlqno7WKJ2JkilOxYHe1
7tX3IBw1/J63CMpCNF8iqfeYLD/rQNwWVZfp2muk/Y5Gf72glNK0CMbfqGEa8gpX
rJdlc4jSPC48Y+uH4kANWJqoCmueMVnSNt5PAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUsXw89Ev5gNGgv450edqQeOgpCnMwHwYDVR0jBBgwFoAUYBt2TrIFMYSt13mb
83x+Ctsz99wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz
Ni9ZQnQyVHJJRk1ZU3QxM21iODN4LUN0c3o5OXcuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1lCdDJUcklGTVlTdDEzbWI4M3gtQ3Rzejk5dy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzYvWUJ0MlRySUZNWVN0
MTNtYjgzeC1DdHN6OTl3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAEVJof8PmXQm5065C9ObSTQQ9XPg16MKNIOML2mpKah3eBAoXj/eQN7Dtvsd
S7Xf6UNGHDUCvoYmZzvK+A8TwTzAs/EIU4Zshpd+561KRxVxJXwtaqpg+r/C1fPL
AXjrSjTlLH+Pmh8SXrncjjoD+B3YcbgIXY2QFyvoEGkPMDQtmcVAPZ/k7IbzptEm
FwFqBSSP+pRNL8cvTpEZMil1UhhGTZv1nchisGbzFD3ja7/lYaQ1dgYw4d5UnoQE
QqoAtcCd8GpridAZaz10voD5GmMWnc95xtDOrAsOHXkafxhZ6S9n3iyBTGcg7zPR
5xoaHRDCJJx57LB+j+W6Z47E3TI=
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:46 2025 by rpki-client on console.sobornost.net