Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft
File: DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft (raw, json)
Hash identifier: IUXSVcyQHdOF4nq7yTPnNMkaz5wSQVqn3kzQS3Bpvg8=
Subject key identifier: FC:F5:43:9A:91:CB:5C:8B:12:A0:B1:D2:0A:BD:08:5D:68:E3:8C:E2
Authority key identifier: 0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95
Certificate issuer: /CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
Certificate serial: 15E9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft
Manifest number: 15E9
Signing time: Sat 29 Mar 2025 10:31:30 +0000
Manifest this update: Sat 29 Mar 2025 10:31:30 +0000
Manifest next update: Sat 29 Mar 2025 16:31:30 +0000
Files and hashes: 1: DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl (hash: B60zmg3qAiFfKmCdGrWqVpLYRHnptYtW47vNgbnuqKU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5609 (0x15e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
Validity
Not Before: Mar 29 10:31:30 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FCF5439A91CB5C8B12A0B1D20ABD085D68E38CE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:5c:90:18:ef:c8:62:22:03:31:02:88:92:
ba:69:ac:3b:08:40:66:9e:e0:16:c3:6c:fb:4c:c1:
42:4b:e7:72:0e:3c:24:8a:f0:06:ab:87:ce:8e:68:
ff:2f:b6:f5:69:a5:47:f1:d8:ee:20:52:61:a7:ad:
4b:ce:b6:f9:47:df:5a:23:da:7e:e4:c0:b0:6c:d3:
51:fb:0e:f4:7e:65:09:72:b0:99:91:7c:e5:83:25:
2f:00:a1:35:2d:fe:86:ab:69:7c:dc:fc:ee:b3:ec:
58:d7:af:49:db:c1:42:b2:6f:b4:1b:47:da:34:4f:
14:37:4e:d7:f6:66:6b:e2:d6:b5:ba:f5:a2:dc:e3:
1d:db:7a:06:81:50:e1:74:a7:9f:b6:1a:ca:b9:36:
49:3a:4d:e4:d4:48:1f:5e:49:58:cc:14:4c:b3:cf:
bf:33:ba:7b:4d:3b:0c:fb:cc:4b:84:da:79:9c:b5:
75:a8:ad:41:96:48:56:08:c6:1d:f2:63:2a:3f:01:
14:51:0a:c0:0a:fc:e2:1c:c7:01:8b:fd:57:c6:d4:
f1:dd:cb:ac:1a:80:eb:7d:50:13:a9:29:7f:90:00:
ec:d5:8e:bb:bc:8b:cf:d3:5b:89:a4:c0:5f:d7:d9:
49:9e:d9:e2:9c:da:0f:05:3d:58:c3:7a:cd:05:31:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F5:43:9A:91:CB:5C:8B:12:A0:B1:D2:0A:BD:08:5D:68:E3:8C:E2
X509v3 Authority Key Identifier:
keyid:0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:07:da:e3:62:c5:5c:22:22:91:02:bc:1a:5e:30:a2:77:fc:
40:bc:8d:a2:eb:0e:32:a4:1a:a1:cd:55:f6:28:1f:52:7d:12:
db:9c:3d:d4:03:75:b8:e4:2a:bc:45:df:10:5b:e4:cf:a8:19:
d8:6d:71:2b:f8:f7:78:fc:3d:3a:f2:84:2e:c3:d0:59:fd:a9:
41:27:43:a3:ea:b5:61:ae:a5:95:a3:11:6e:1c:9a:34:d4:0e:
d3:54:2b:c0:9e:ca:20:23:2f:57:32:26:35:af:4a:fd:d8:6a:
e8:2b:51:55:8c:21:a1:3f:c0:f9:87:bc:3e:3f:03:40:f8:2d:
ae:0f:ba:ce:86:58:de:72:c0:21:7f:24:a9:9f:18:6b:4a:2d:
02:c5:3d:f7:cb:63:e2:b3:d9:5b:eb:fa:2e:67:dc:d2:14:60:
47:a1:63:b9:a7:80:09:e2:ab:0e:58:18:2c:47:26:61:37:83:
47:5a:7d:b5:bd:36:0b:be:49:52:07:81:f3:ff:ca:e0:c2:f4:
71:77:8e:8d:26:7c:8a:7d:1a:2b:59:66:d4:8a:9c:23:f9:7c:
ff:f0:d6:cd:d2:43:7e:45:eb:1c:4d:24:25:92:4d:d1:71:2f:
e7:cd:a5:0f:fe:ae:cd:95:aa:40:f5:61:58:20:24:08:7b:6d:
b5:ca:31:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:26:15 2025 by rpki-client