Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/135/pT5UsSYIO-poFXlysjQqCd94Fag.mft
File: pT5UsSYIO-poFXlysjQqCd94Fag.mft (raw, json)
Hash identifier: J0pfInjUE3z8J03BSEtfB/xWogC8gw2/JnAjFQfdIO0=
Subject key identifier: 41:96:E9:B1:7E:53:95:7E:2C:72:75:3E:48:3D:EF:7A:60:78:30:4F
Authority key identifier: A5:3E:54:B1:26:08:3B:EA:68:15:79:72:B2:34:2A:09:DF:78:15:A8
Certificate issuer: /CN=A53E54B126083BEA68157972B2342A09DF7815A8
Certificate serial: 354F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pT5UsSYIO-poFXlysjQqCd94Fag.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/135/pT5UsSYIO-poFXlysjQqCd94Fag.mft
Manifest number: 354F
Signing time: Fri 04 Apr 2025 19:35:45 +0000
Manifest this update: Fri 04 Apr 2025 19:35:45 +0000
Manifest next update: Sat 05 Apr 2025 01:35:45 +0000
Files and hashes: 1: pT5UsSYIO-poFXlysjQqCd94Fag.crl (hash: Jd7J3CN7usZGU7W3Y1hlTup1R7o7/IIJOWk07Q1PS6I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13647 (0x354f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A53E54B126083BEA68157972B2342A09DF7815A8
Validity
Not Before: Apr 4 19:35:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4196E9B17E53957E2C72753E483DEF7A6078304F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:27:76:13:c6:96:f8:fa:09:7e:02:d1:96:1b:
d7:68:65:77:7c:82:ca:61:a4:4e:18:f0:b2:4d:33:
6d:7b:37:64:c2:8e:d2:6e:64:bd:92:5a:ae:0c:d4:
e8:49:b1:7a:2e:9e:37:3f:23:7d:c6:f4:4a:76:bc:
2c:f7:73:f8:11:00:77:37:e6:ca:98:5b:8f:9e:92:
ff:f2:94:ca:a5:d6:d8:11:7f:93:73:17:55:77:d0:
e4:f0:a7:82:a7:ef:d2:67:17:a3:ba:02:45:db:66:
28:2d:73:8c:a2:ca:c6:34:cc:89:9b:f5:dc:6a:c9:
6c:a5:7c:5d:9d:ff:17:f5:27:2b:b6:e6:25:a9:21:
cf:1e:fb:9a:13:5f:48:d4:e8:d5:fe:7f:fc:eb:d9:
cc:f7:42:f2:48:90:aa:47:fd:ea:df:b3:9a:8d:d6:
ac:aa:51:99:af:90:54:59:4f:3e:b0:4b:0f:ad:7a:
2d:e7:65:f8:df:de:58:8e:c1:1e:0f:f1:94:54:64:
25:43:e9:1c:71:0d:5b:1c:cc:09:fd:8e:9b:48:62:
26:86:38:c0:50:60:a5:56:6d:2a:36:ba:31:5d:dd:
cb:97:c6:e0:c6:e2:45:16:5a:22:46:5f:38:94:31:
58:16:cf:25:ae:06:c2:95:49:ef:be:3f:30:bf:09:
50:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:96:E9:B1:7E:53:95:7E:2C:72:75:3E:48:3D:EF:7A:60:78:30:4F
X509v3 Authority Key Identifier:
keyid:A5:3E:54:B1:26:08:3B:EA:68:15:79:72:B2:34:2A:09:DF:78:15:A8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/135/pT5UsSYIO-poFXlysjQqCd94Fag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pT5UsSYIO-poFXlysjQqCd94Fag.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/135/pT5UsSYIO-poFXlysjQqCd94Fag.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:74:a8:d0:eb:9c:93:36:2e:b9:3a:0b:77:d5:13:2d:02:23:
67:ad:eb:6b:d7:4b:0e:47:ee:4f:05:2a:87:20:65:47:00:47:
55:57:a9:b7:b8:fe:8f:f4:b3:83:f6:e1:71:90:08:b6:7d:bc:
54:ee:ce:b3:79:c7:c8:56:90:25:d4:7d:36:c8:f0:35:ca:1b:
f6:2a:82:97:69:04:c0:01:f9:04:cb:23:16:2f:0d:f7:e3:56:
7d:0d:76:08:ac:a2:db:6f:93:5c:1c:cd:45:f1:9d:c6:51:c8:
2c:b6:0e:39:10:0e:f0:06:e3:a0:c9:37:5f:8a:ea:0d:d1:56:
42:3d:e4:b4:68:3d:71:07:ef:af:4b:79:dc:6e:a6:ec:ba:42:
05:04:cf:73:c6:81:9b:60:5e:cc:64:7f:93:d2:3f:53:c1:78:
84:37:4e:e4:3e:89:6c:b4:20:c6:4e:a7:8c:01:b0:0d:84:b3:
d3:95:26:e6:42:05:5a:76:e3:28:e0:24:b3:70:28:b0:f8:47:
e6:2b:ab:b0:fa:07:99:4f:44:9f:d0:bb:2f:5b:24:43:16:72:
e4:0a:32:f0:eb:f7:f4:f0:6d:f2:89:bb:20:7c:d2:e8:80:f1:
a3:62:d7:5b:bf:a9:96:8b:db:5f:2a:53:0f:71:55:65:9f:a9:
19:64:9b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:40 2025 by rpki-client