Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1817/h2aIiphaWvBfbvEvvU9k8h9SYYg.mft
File: h2aIiphaWvBfbvEvvU9k8h9SYYg.mft (raw, json)
Hash identifier: 9whxln1ieoPTHymCujW9WNPC2DH7Hh/DE7R4tiVDuBw=
Subject key identifier: D8:67:8A:A9:53:70:86:1C:41:93:AE:13:A0:81:E7:5C:D1:C4:1B:D7
Authority key identifier: 87:66:88:8A:98:5A:5A:F0:5F:6E:F1:2F:BD:4F:64:F2:1F:52:61:88
Certificate issuer: /CN=8766888A985A5AF05F6EF12FBD4F64F21F526188
Certificate serial: 0903
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h2aIiphaWvBfbvEvvU9k8h9SYYg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1817/h2aIiphaWvBfbvEvvU9k8h9SYYg.mft
Manifest number: 0903
Signing time: Sat 29 Mar 2025 08:27:11 +0000
Manifest this update: Sat 29 Mar 2025 08:27:11 +0000
Manifest next update: Sat 29 Mar 2025 14:27:11 +0000
Files and hashes: 1: h2aIiphaWvBfbvEvvU9k8h9SYYg.crl (hash: 8WRBAKVuWuLGTQu6a3KIgy/CkXRKcG6pgOEIGm55i0k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2307 (0x903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8766888A985A5AF05F6EF12FBD4F64F21F526188
Validity
Not Before: Mar 29 08:27:11 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D8678AA95370861C4193AE13A081E75CD1C41BD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c0:ff:85:04:90:e9:70:da:7d:d0:ea:7d:8b:
f6:99:03:3a:0b:5c:4f:4b:1d:e7:7c:aa:93:12:9b:
33:7a:64:7a:38:d4:29:2c:60:d6:c5:0d:77:99:c0:
e4:16:48:ab:00:f5:64:65:d8:0a:ec:21:39:34:6b:
b5:43:4d:93:7c:a3:75:4d:a4:6c:bb:0a:28:9f:f1:
78:f1:e1:5f:91:17:0b:da:4f:2f:1d:56:e4:24:b0:
7e:af:5e:6b:11:88:36:ec:f0:b6:9a:83:90:cb:da:
27:0b:e9:17:93:48:fe:4e:e1:ce:2a:50:b6:91:8c:
3a:00:a3:d5:53:9d:5f:52:f5:d2:4e:d2:6e:67:31:
ef:4c:91:28:a1:30:5b:37:15:cd:90:4f:f1:ba:64:
f0:24:57:f3:d8:5e:d7:c8:26:d4:b9:15:7d:07:1c:
45:c4:03:72:96:41:c5:f4:fe:d9:00:51:8f:1e:4f:
c7:e3:d8:15:9e:1d:0f:86:07:5e:f1:e1:70:cb:65:
14:6e:8a:c9:eb:fc:b0:2b:e7:ba:ca:53:c2:c8:00:
f3:bd:b9:96:55:5a:52:26:d8:aa:3d:40:75:57:15:
a0:69:dc:7e:c8:81:d1:0e:e0:1c:c6:78:3a:f5:09:
9a:8f:3f:21:84:bc:b4:6b:ef:da:46:f4:ea:38:f8:
7c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:67:8A:A9:53:70:86:1C:41:93:AE:13:A0:81:E7:5C:D1:C4:1B:D7
X509v3 Authority Key Identifier:
keyid:87:66:88:8A:98:5A:5A:F0:5F:6E:F1:2F:BD:4F:64:F2:1F:52:61:88
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1817/h2aIiphaWvBfbvEvvU9k8h9SYYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h2aIiphaWvBfbvEvvU9k8h9SYYg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1817/h2aIiphaWvBfbvEvvU9k8h9SYYg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:a0:62:7b:b3:32:b6:92:88:60:16:35:e2:1c:89:2e:23:f1:
51:a3:2a:1d:82:15:73:94:b8:0e:fa:e0:0e:77:58:c2:21:a4:
fe:38:f7:bc:87:a2:ad:ae:52:cd:98:ac:80:72:99:25:ac:96:
3e:e8:51:01:c8:e5:81:f8:02:3d:c7:77:49:84:a7:f6:5b:c0:
f2:b5:f0:ae:cd:02:b2:6d:52:c8:66:a1:69:9f:e5:9f:a2:c5:
4d:b1:93:b5:d2:32:8a:ea:3f:64:ab:eb:96:61:d5:07:93:c3:
ef:65:b4:52:ae:13:9a:4a:0b:3c:a7:54:8a:ee:ed:0b:8b:9e:
15:62:26:c3:67:f7:9e:fb:a4:e0:95:7a:ad:8e:95:66:a8:63:
c6:2a:72:2b:24:00:7b:da:82:bf:10:1b:88:2a:77:54:9a:5d:
17:29:d9:14:8e:2b:ce:2e:1d:3f:6d:54:f0:5e:79:4b:b9:b4:
3c:e6:ce:a9:ae:b8:d7:fe:2e:5a:48:a8:1e:8b:a8:61:61:21:
ae:5c:6d:b1:2a:29:2d:4f:f6:59:b2:ee:b3:78:7a:6e:3f:47:
41:e4:79:18:d6:9a:f3:2f:70:92:a6:16:eb:56:11:23:cd:6d:
9c:69:3b:46:17:8b:da:c5:43:bf:67:bf:fb:02:07:bd:bc:63:
ae:5e:f9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:26 2025 by rpki-client