Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft
File: yZxuUM1dFkZVP-VT5x64vu2RUKo.mft (raw, json)
Hash identifier: 9ffDdAvnAuAtIIgDawKkv0QHs0Oi5/yJzWX9Y2DhcvM=
Subject key identifier: 67:72:01:A6:62:82:30:D0:D6:33:B6:E4:1A:A4:EA:04:F1:27:C1:8D
Authority key identifier: C9:9C:6E:50:CD:5D:16:46:55:3F:E5:53:E7:1E:B8:BE:ED:91:50:AA
Certificate issuer: /CN=C99C6E50CD5D1646553FE553E71EB8BEED9150AA
Certificate serial: 1D04
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft
Manifest number: 1D04
Signing time: Sat 29 Mar 2025 10:28:15 +0000
Manifest this update: Sat 29 Mar 2025 10:28:15 +0000
Manifest next update: Sat 29 Mar 2025 16:28:15 +0000
Files and hashes: 1: yZxuUM1dFkZVP-VT5x64vu2RUKo.crl (hash: n71iiGRuTTpG626RukCePkBrKFgcdr3JZL+TcmUHw/A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7428 (0x1d04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C99C6E50CD5D1646553FE553E71EB8BEED9150AA
Validity
Not Before: Mar 29 10:28:15 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=677201A6628230D0D633B6E41AA4EA04F127C18D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:88:c7:7c:50:81:f4:7e:df:0b:fd:f4:0e:76:
24:1c:17:31:c1:3b:df:fe:96:84:35:f6:a5:1d:83:
b6:df:67:63:94:53:eb:e3:1d:3b:a7:24:4b:c3:df:
09:fe:24:f4:f1:9e:27:7c:36:75:2b:ed:54:62:e9:
66:e3:14:7b:db:a7:d9:9e:1d:27:06:b7:9b:c7:84:
e7:95:6c:78:68:d8:e9:ce:51:41:52:79:f2:1c:f1:
72:90:57:2b:05:a5:99:3a:ed:a9:e1:bb:3e:9b:f9:
ff:da:34:39:a5:d2:56:fb:64:14:74:3f:86:cf:97:
7e:fb:89:38:af:f7:98:55:e1:d5:e3:61:5b:78:7e:
70:0f:9c:81:3b:37:fd:5e:db:9e:5f:e3:e8:0b:8f:
88:0b:d8:b4:fb:4e:22:96:cd:e2:d3:9a:7d:bd:8b:
8c:83:d7:e4:c3:7d:0a:e0:09:e8:fa:18:e0:db:f3:
8f:64:4b:21:e9:fa:57:88:21:82:de:6d:77:0f:fb:
cb:69:12:d8:bf:87:7b:02:fc:77:b5:7a:ec:d0:93:
c6:01:00:a6:a7:5a:bd:7d:fa:e4:ec:32:b7:47:e6:
c0:42:f3:ef:df:84:9d:d0:1d:54:ff:51:9a:8e:d5:
5c:0d:f8:d7:11:b3:c2:16:a5:27:0d:01:3e:d2:c1:
ca:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:72:01:A6:62:82:30:D0:D6:33:B6:E4:1A:A4:EA:04:F1:27:C1:8D
X509v3 Authority Key Identifier:
keyid:C9:9C:6E:50:CD:5D:16:46:55:3F:E5:53:E7:1E:B8:BE:ED:91:50:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:e2:b9:a0:5e:cc:24:cc:07:fc:85:19:fe:c8:4a:09:54:c7:
5b:a5:ad:0b:fd:0c:2c:b6:a7:87:e3:9a:53:b6:b5:59:80:3a:
12:f3:e6:0b:8b:2c:18:f5:8f:21:83:3a:0d:98:12:2b:33:66:
94:0c:0a:d5:7c:bf:5c:98:ca:5f:c0:d8:90:62:5c:7d:b0:76:
34:6d:21:08:53:90:95:d2:89:49:37:a2:b2:58:c2:19:f0:6a:
13:db:ee:76:3b:fd:56:76:da:60:fe:12:4c:75:e1:38:57:9b:
bb:84:db:33:08:4b:44:29:2f:a8:59:e2:32:e3:7b:0d:7b:2b:
3a:0b:ae:de:e4:17:30:03:f1:db:48:8a:71:5e:2d:3c:5d:77:
8c:f8:34:68:29:20:6a:17:7d:b2:94:f2:34:83:03:18:03:2d:
c1:34:e6:8c:6c:8d:a3:c9:45:b2:d0:09:07:49:cb:43:4e:30:
c5:a3:31:7a:16:c1:19:0e:69:92:21:db:2c:14:4a:6a:f3:55:
2e:5c:bc:44:49:79:f4:d6:71:2a:9a:20:37:b8:8e:e5:77:ac:
36:d1:20:ee:f0:28:a4:bf:72:40:17:80:04:1e:52:0f:8e:14:
f0:1d:62:fe:f1:ac:f8:bc:1e:28:b3:eb:15:54:2a:6f:b5:2c:
9e:7b:bd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:18 2025 by rpki-client