Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3343/0Thk00ASqL2IAiF99LmT9iQBB2w.mft
File: 0Thk00ASqL2IAiF99LmT9iQBB2w.mft (raw, json)
Hash identifier: pvJPiUUF3psc7xzVcCBVS2p+BPV+2m00yW8DKIaGwIs=
Subject key identifier: 00:91:B7:3B:A0:64:11:18:D0:2A:80:45:59:62:19:82:07:B8:3A:C5
Authority key identifier: D1:38:64:D3:40:12:A8:BD:88:02:21:7D:F4:B9:93:F6:24:01:07:6C
Certificate issuer: /CN=D13864D34012A8BD8802217DF4B993F62401076C
Certificate serial: 0270
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Thk00ASqL2IAiF99LmT9iQBB2w.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3343/0Thk00ASqL2IAiF99LmT9iQBB2w.mft
Manifest number: 0270
Signing time: Mon 28 Apr 2025 19:40:56 +0000
Manifest this update: Mon 28 Apr 2025 19:40:56 +0000
Manifest next update: Tue 29 Apr 2025 01:40:56 +0000
Files and hashes: 1: 0Thk00ASqL2IAiF99LmT9iQBB2w.crl (hash: NacLu26UZHk5UKCTXQkadJ0CKhEPFOLxgKmrsLGqIDE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D13864D34012A8BD8802217DF4B993F62401076C
Validity
Not Before: Apr 28 19:40:56 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0091B73BA0641118D02A80455962198207B83AC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:dd:4f:f5:72:89:66:0d:f6:f6:47:59:ec:
ef:40:b2:1c:56:8e:08:72:8a:d3:68:9a:b4:0f:7c:
ea:16:27:97:c8:f2:4c:ec:26:15:97:6c:e3:16:9a:
09:5c:90:34:44:85:54:23:41:4d:b4:41:a7:41:92:
f2:33:4c:fe:3b:19:8c:40:d3:bc:8f:e3:31:d6:2e:
c7:fe:4c:6c:3e:e4:ef:c8:74:0a:db:1d:3c:e2:07:
38:d5:0c:a0:16:fc:6f:22:f5:09:8f:2b:ad:b0:11:
2f:ec:3f:04:f1:82:ed:38:51:42:d2:46:ab:fb:e4:
24:f6:1a:60:04:66:6a:4b:5a:9d:78:14:c1:84:90:
c1:4c:a3:6e:14:e2:3b:7c:dd:5d:e1:c1:d2:83:6f:
11:6d:40:89:48:47:e2:d6:c4:63:c5:e8:c7:15:d1:
ed:eb:a7:fb:b5:09:fe:b5:d7:c3:a5:e4:6a:dc:61:
dd:8f:73:dd:fe:ec:f4:da:7a:40:a0:61:62:f5:c5:
35:6a:28:36:e0:ef:db:a9:1b:f7:40:e1:fa:12:9f:
67:c5:4e:48:84:83:1d:93:c7:b3:3f:ba:c4:09:25:
8a:b4:b0:a9:b7:68:8c:a9:b3:88:a5:ba:d1:75:16:
2c:0c:36:fc:c2:72:a2:1b:56:c0:e1:c5:6c:d9:4a:
4d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:91:B7:3B:A0:64:11:18:D0:2A:80:45:59:62:19:82:07:B8:3A:C5
X509v3 Authority Key Identifier:
keyid:D1:38:64:D3:40:12:A8:BD:88:02:21:7D:F4:B9:93:F6:24:01:07:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3343/0Thk00ASqL2IAiF99LmT9iQBB2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Thk00ASqL2IAiF99LmT9iQBB2w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3343/0Thk00ASqL2IAiF99LmT9iQBB2w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:3a:c7:48:b7:60:3d:74:b9:cf:44:bd:25:77:2b:87:ee:90:
fe:c8:1d:92:10:38:45:f5:f4:64:b6:7f:47:e5:47:5b:c0:5c:
fa:94:22:dc:60:d1:0f:29:f0:9f:2b:3f:83:f4:51:14:b9:b9:
9e:48:e7:c8:c2:27:0b:b4:7e:59:87:f5:42:8d:e8:e7:ba:c4:
3f:bc:ee:db:a6:d6:02:62:bb:d8:05:3c:8f:9a:c7:07:a4:4d:
01:40:42:6a:cb:3c:ad:19:e9:17:78:86:f9:5b:8d:b9:b6:dc:
60:3f:f0:dd:71:de:c6:d5:c5:1a:8a:90:29:92:2d:52:4a:ea:
74:02:cb:50:e3:7f:3f:02:e3:4d:2c:58:2c:f9:01:ff:82:e0:
63:0a:e5:6a:0f:e0:8e:a5:1a:33:d5:d2:e0:af:a6:27:59:56:
4a:17:f3:c7:1e:7e:50:3a:ba:80:ba:41:f7:a1:2d:04:5c:ab:
e7:06:ff:d3:ae:89:60:bd:2a:44:d4:20:b3:d0:43:9f:47:e0:
da:29:ac:f4:44:3e:be:30:31:42:31:93:7a:92:7f:8c:a9:d1:
06:86:8e:e0:14:05:99:8e:1a:d2:da:78:08:8a:2e:64:71:0e:
0d:07:ae:5f:7e:ba:1d:09:20:f9:6d:70:3a:2c:fb:87:da:d5:
c4:d6:c1:3e
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDEz
ODY0RDM0MDEyQThCRDg4MDIyMTdERjRCOTkzRjYyNDAxMDc2QzAeFw0yNTA0Mjgx
OTQwNTZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDAwOTFCNzNCQTA2NDEx
MThEMDJBODA0NTU5NjIxOTgyMDdCODNBQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSL91P9XKJZg329kdZ7O9AshxWjghyitNomrQPfOoWJ5fI8kzs
JhWXbOMWmglckDREhVQjQU20QadBkvIzTP47GYxA07yP4zHWLsf+TGw+5O/IdArb
HTziBzjVDKAW/G8i9QmPK62wES/sPwTxgu04UULSRqv75CT2GmAEZmpLWp14FMGE
kMFMo24U4jt83V3hwdKDbxFtQIlIR+LWxGPF6McV0e3rp/u1Cf6118Ol5GrcYd2P
c93+7PTaekCgYWL1xTVqKDbg79upG/dA4foSn2fFTkiEgx2Tx7M/usQJJYq0sKm3
aIyps4ilutF1FiwMNvzCcqIbVsDhxWzZSk0NAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUAJG3O6BkERjQKoBFWWIZgge4OsUwHwYDVR0jBBgwFoAU0Thk00ASqL2IAiF9
9LmT9iQBB2wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0
My8wVGhrMDBBU3FMMklBaUY5OUxtVDlpUUJCMncuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBUaGswMEFTcUwySUFpRjk5TG1UOWlRQkIydy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNDMvMFRoazAwQVNxTDJJ
QWlGOTlMbVQ5aVFCQjJ3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBACQ6x0i3YD10uc9EvSV3K4fukP7IHZIQOEX19GS2f0flR1vAXPqUItxg0Q8p
8J8rP4P0URS5uZ5I58jCJwu0flmH9UKN6Oe6xD+87tum1gJiu9gFPI+axwekTQFA
QmrLPK0Z6Rd4hvlbjbm23GA/8N1x3sbVxRqKkCmSLVJK6nQCy1Djfz8C400sWCz5
Af+C4GMK5WoP4I6lGjPV0uCvpidZVkoX88ceflA6uoC6QfehLQRcq+cG/9OuiWC9
KkTUILPQQ59H4NoprPREPr4wMUIxk3qSf4yp0QaGjuAUBZmOGtLaeAiKLmRxDg0H
rl9+uh0JIPltcDos+4fa1cTWwT4=
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:46 2025 by rpki-client on console.sobornost.net