Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/643/h_17fpSNGju7kJe0WdcTt0M8C2U.mft
File: h_17fpSNGju7kJe0WdcTt0M8C2U.mft (raw, json)
Hash identifier: zEuzdj7ggyKjUShr+W5E3qWvZ7xB2yhS4oVDxFPi4wU=
Subject key identifier: C3:34:5D:ED:0C:47:F9:8D:2F:7E:31:DD:D0:47:55:85:DA:87:93:B9
Authority key identifier: 87:FD:7B:7E:94:8D:1A:3B:BB:90:97:B4:59:D7:13:B7:43:3C:0B:65
Certificate issuer: /CN=87FD7B7E948D1A3BBB9097B459D713B7433C0B65
Certificate serial: 2B09
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h_17fpSNGju7kJe0WdcTt0M8C2U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/h_17fpSNGju7kJe0WdcTt0M8C2U.mft
Manifest number: 2B09
Signing time: Mon 28 Apr 2025 20:36:26 +0000
Manifest this update: Mon 28 Apr 2025 20:36:26 +0000
Manifest next update: Tue 29 Apr 2025 02:36:26 +0000
Files and hashes: 1: h_17fpSNGju7kJe0WdcTt0M8C2U.crl (hash: pUPuZ1XN8js4xHSa9ZrRQyLVIaXvFEcA0mHKy7rcOt0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11017 (0x2b09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87FD7B7E948D1A3BBB9097B459D713B7433C0B65
Validity
Not Before: Apr 28 20:36:26 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C3345DED0C47F98D2F7E31DDD0475585DA8793B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:3d:86:a9:25:8c:84:d2:47:0d:30:23:25:
bd:d1:70:38:60:c2:2c:2d:ac:14:bd:46:c4:40:26:
1d:a0:7f:40:53:55:29:99:99:09:51:8c:c4:9a:51:
6b:37:41:de:48:3a:cc:21:9d:6e:97:b8:af:bd:37:
a1:93:e7:c0:a5:22:f4:ee:bf:fa:1d:92:ef:3a:07:
ad:ad:91:9b:ef:8e:a1:7b:44:44:a9:b4:ac:59:5c:
ef:74:0f:12:63:cc:fc:6a:7b:e2:a7:62:71:b5:e6:
bb:51:aa:f9:83:25:6c:1e:d5:3e:b2:92:62:63:86:
02:22:de:8b:50:2b:3a:13:45:86:bf:7e:83:ba:21:
44:e5:d1:a7:e0:68:db:cd:fd:6b:88:e7:8a:a9:8c:
84:4e:b9:d1:f2:74:d6:e5:16:ea:14:87:60:31:ea:
dc:60:55:16:3e:2b:f0:ea:3e:34:b5:57:8b:e7:9d:
eb:15:6f:6f:e2:14:c5:8f:d8:f1:a0:1f:2d:30:e5:
fc:7a:cf:ec:74:87:d1:a1:d8:42:45:d8:0f:c4:c7:
a1:32:a7:37:37:aa:7d:75:78:f7:b3:48:8b:3a:05:
69:5d:ef:d8:1d:80:b5:bf:0b:8c:7c:c3:65:b7:a3:
6e:a0:63:a1:e3:d0:94:26:ad:18:02:3e:63:5d:b9:
53:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:34:5D:ED:0C:47:F9:8D:2F:7E:31:DD:D0:47:55:85:DA:87:93:B9
X509v3 Authority Key Identifier:
keyid:87:FD:7B:7E:94:8D:1A:3B:BB:90:97:B4:59:D7:13:B7:43:3C:0B:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/h_17fpSNGju7kJe0WdcTt0M8C2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h_17fpSNGju7kJe0WdcTt0M8C2U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/h_17fpSNGju7kJe0WdcTt0M8C2U.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e2:44:cb:eb:09:96:1e:43:37:35:09:a8:e8:33:f9:44:70:17:
c4:2e:76:18:2f:f7:0c:ab:ee:d8:5d:4e:3c:72:d3:c4:07:9e:
ae:82:4a:c5:f5:87:97:55:f1:25:4e:b2:9d:2b:42:d0:e7:1e:
50:5e:64:9d:95:3a:1d:71:25:a2:1f:3d:e2:a1:83:81:57:08:
d9:89:3a:4d:5b:68:c2:52:0f:9e:80:b7:97:f8:79:d7:6a:90:
e2:4a:28:28:18:2d:38:bd:f9:20:7c:d7:04:91:33:b8:54:61:
9f:e7:46:27:da:72:06:02:e4:26:a9:ac:3d:09:02:2b:e0:be:
ac:0c:c1:66:ac:7f:22:ec:3d:89:db:97:97:ad:8b:ce:b9:99:
48:77:e5:40:e1:ae:bd:2c:31:62:ba:45:50:5e:ee:a2:10:74:
10:cc:17:03:34:60:c5:80:a7:30:df:2b:f6:d8:92:6d:4c:43:
5d:37:30:ca:bf:30:1e:e5:54:6b:34:7b:d1:d8:7b:36:c0:40:
36:c6:ad:70:1a:61:52:a5:1e:9d:05:e2:b6:ac:38:3d:66:a1:
eb:64:ee:5f:bd:85:d6:e3:3a:43:76:b6:a2:13:b6:e1:51:82:
f9:49:5d:6a:52:9d:2b:88:14:02:35:c1:b4:f6:6d:b5:3d:da:
71:f1:34:7f
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICKwkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODdG
RDdCN0U5NDhEMUEzQkJCOTA5N0I0NTlENzEzQjc0MzNDMEI2NTAeFw0yNTA0Mjgy
MDM2MjZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEMzMzQ1REVEMEM0N0Y5
OEQyRjdFMzFEREQwNDc1NTg1REE4NzkzQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDP9j2GqSWMhNJHDTAjJb3RcDhgwiwtrBS9RsRAJh2gf0BTVSmZ
mQlRjMSaUWs3Qd5IOswhnW6XuK+9N6GT58ClIvTuv/odku86B62tkZvvjqF7RESp
tKxZXO90DxJjzPxqe+KnYnG15rtRqvmDJWwe1T6ykmJjhgIi3otQKzoTRYa/foO6
IUTl0afgaNvN/WuI54qpjIROudHydNblFuoUh2Ax6txgVRY+K/DqPjS1V4vnnesV
b2/iFMWP2PGgHy0w5fx6z+x0h9Gh2EJF2A/Ex6Eypzc3qn11ePezSIs6BWld79gd
gLW/C4x8w2W3o26gY6Hj0JQmrRgCPmNduVNlAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUwzRd7QxH+Y0vfjHd0EdVhdqHk7kwHwYDVR0jBBgwFoAUh/17fpSNGju7kJe0
WdcTt0M8C2UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjQz
L2hfMTdmcFNOR2p1N2tKZTBXZGNUdDBNOEMyVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvaF8xN2ZwU05HanU3a0plMFdkY1R0ME04QzJVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjQzL2hfMTdmcFNOR2p1N2tK
ZTBXZGNUdDBNOEMyVS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDiRMvrCZYeQzc1CajoM/lEcBfELnYYL/cMq+7YXU48ctPEB56ugkrF9YeXVfEl
TrKdK0LQ5x5QXmSdlTodcSWiHz3ioYOBVwjZiTpNW2jCUg+egLeX+HnXapDiSigo
GC04vfkgfNcEkTO4VGGf50Yn2nIGAuQmqaw9CQIr4L6sDMFmrH8i7D2J25eXrYvO
uZlId+VA4a69LDFiukVQXu6iEHQQzBcDNGDFgKcw3yv22JJtTENdNzDKvzAe5VRr
NHvR2Hs2wEA2xq1wGmFSpR6dBeK2rDg9ZqHrZO5fvYXW4zpDdraiE7bhUYL5SV1q
Up0riBQCNcG09m21Pdpx8TR/
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:49 2025 by rpki-client on console.sobornost.net