Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft
File: vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft (raw, json)
Hash identifier: EuCmOUMFbeH47W+ohz+kT5vmLiYW0sr4gLEBSVU/Zn8=
Subject key identifier: DB:D9:F4:F5:91:4A:39:EC:DE:3E:5E:AE:B2:E4:00:EE:30:13:11:35
Authority key identifier: BC:B6:D3:C4:96:F5:01:2C:58:D1:B4:8E:83:5C:01:36:E6:40:AB:B8
Certificate issuer: /CN=BCB6D3C496F5012C58D1B48E835C0136E640ABB8
Certificate serial: 1D2E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vLbTxJb1ASxY0bSOg1wBNuZAq7g.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft
Manifest number: 1D2E
Signing time: Sat 29 Mar 2025 08:29:48 +0000
Manifest this update: Sat 29 Mar 2025 08:29:48 +0000
Manifest next update: Sat 29 Mar 2025 14:29:48 +0000
Files and hashes: 1: vLbTxJb1ASxY0bSOg1wBNuZAq7g.crl (hash: V4bg0gbRkczh30/ImE+AqRRQbYwpAvPgvQ466wqPPvo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7470 (0x1d2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCB6D3C496F5012C58D1B48E835C0136E640ABB8
Validity
Not Before: Mar 29 08:29:48 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DBD9F4F5914A39ECDE3E5EAEB2E400EE30131135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:75:68:4d:86:6f:36:a4:da:5e:c9:c9:ac:
e4:0d:29:b9:86:9a:6c:b9:54:b5:76:2b:51:2e:7a:
f9:1f:8e:5f:c1:9e:74:c3:8b:1c:d7:28:d4:83:be:
96:5b:aa:b5:2a:fc:21:26:ce:12:62:66:c0:e9:38:
d6:b9:09:14:50:be:43:bf:6a:09:e1:0e:57:20:37:
de:05:f6:91:7f:40:75:d6:2b:29:7b:76:15:24:4b:
cd:71:18:cf:71:41:ea:fe:70:c4:a2:4a:e5:ae:83:
45:4d:29:54:9e:15:65:75:da:68:ff:db:ce:a6:e9:
b7:fb:24:89:2a:2a:bd:44:a9:d2:55:da:1d:2c:ca:
2e:8b:ae:87:ee:3e:1e:0e:9b:32:e4:22:61:f5:86:
fe:49:0e:d9:2c:26:6b:28:52:ba:76:32:24:b7:ad:
3f:65:2c:a5:8a:67:7d:c6:12:f2:2d:55:54:50:8b:
22:6e:65:32:1e:a3:4e:7d:3a:8d:f3:c4:34:6d:e2:
84:a4:48:d3:eb:18:0a:6c:c3:73:a9:f6:ce:58:fd:
c9:5e:17:d6:67:f0:75:14:b8:8b:73:3a:11:76:57:
8a:39:24:b0:d1:0f:48:6c:7f:77:25:33:37:f4:92:
54:a2:bc:0e:64:9e:90:e1:6a:b5:5a:7c:00:1f:24:
b8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D9:F4:F5:91:4A:39:EC:DE:3E:5E:AE:B2:E4:00:EE:30:13:11:35
X509v3 Authority Key Identifier:
keyid:BC:B6:D3:C4:96:F5:01:2C:58:D1:B4:8E:83:5C:01:36:E6:40:AB:B8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vLbTxJb1ASxY0bSOg1wBNuZAq7g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5f:56:e0:2a:46:a7:55:99:a4:a2:41:15:af:3a:35:8b:46:
e1:59:c6:a4:cb:ed:01:cd:f4:a5:72:d2:03:f0:b9:bf:b3:44:
69:d1:84:b1:70:b2:88:bf:7d:c6:92:d8:64:27:e7:51:04:03:
c2:d7:07:87:38:f8:6f:00:82:74:aa:2b:cc:c8:19:0a:53:12:
60:b5:79:3e:37:18:e9:48:c7:37:23:49:16:7d:7a:a7:49:21:
72:c5:94:ad:9d:40:96:63:1d:da:08:cf:92:c4:58:54:fd:79:
0f:c7:39:ce:83:c8:7d:05:ea:65:db:1e:8f:63:b5:2e:fb:7d:
47:5b:09:db:b5:33:24:bf:a6:ce:f9:02:0f:c3:99:c2:a4:d9:
64:ec:ff:47:8f:f6:0c:53:12:09:aa:1c:72:18:a6:24:26:ae:
6f:b1:a4:47:6b:83:f4:48:f9:ad:db:28:58:42:70:b0:b8:3c:
30:eb:ba:f9:5a:3d:fd:d4:a6:f1:bd:c6:dc:3d:ca:8c:fd:d4:
15:5d:39:9e:74:d7:81:16:d7:2b:95:ea:c1:c3:9e:15:f1:c8:
2c:d4:d8:0b:21:21:39:e4:9c:04:c1:ea:38:5b:a9:92:76:f7:
fd:bd:23:2e:33:fb:0f:90:63:dd:51:36:c0:2f:cb:6b:86:d4:
ea:f8:20:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:41 2025 by rpki-client