Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2141/1rsep985B3YngQY-7FeZ2Qdz2cI.mft
File: 1rsep985B3YngQY-7FeZ2Qdz2cI.mft (raw, json)
Hash identifier: RRCRMqSbuPvaVfMkz5TWhlUvUfXi+T6oXXASjSXhE/I=
Subject key identifier: A1:44:D7:61:B9:8C:3D:6E:46:F9:9E:23:85:93:4E:20:7F:3F:56:08
Authority key identifier: D6:BB:1E:A7:DF:39:07:76:27:81:06:3E:EC:57:99:D9:07:73:D9:C2
Certificate issuer: /CN=D6BB1EA7DF3907762781063EEC5799D90773D9C2
Certificate serial: 4F23
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1rsep985B3YngQY-7FeZ2Qdz2cI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2141/1rsep985B3YngQY-7FeZ2Qdz2cI.mft
Manifest number: 4F23
Signing time: Sat 29 Mar 2025 10:32:21 +0000
Manifest this update: Sat 29 Mar 2025 10:32:20 +0000
Manifest next update: Sat 29 Mar 2025 16:32:20 +0000
Files and hashes: 1: 1rsep985B3YngQY-7FeZ2Qdz2cI.crl (hash: R+2v1j7ug1+w8Bb9Hqipc7FMYAT/PjX3khTVRE0m+Xw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20259 (0x4f23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6BB1EA7DF3907762781063EEC5799D90773D9C2
Validity
Not Before: Mar 29 10:32:20 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A144D761B98C3D6E46F99E2385934E207F3F5608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:8d:e3:1f:16:6d:a5:05:7c:2e:71:f0:c5:
80:18:2c:f5:ec:f3:a6:6b:0d:9d:64:b9:17:52:69:
6f:ad:06:89:79:31:51:8b:38:54:24:21:0c:51:7f:
7f:2c:03:bc:de:70:b6:81:21:2a:5e:d9:e8:64:c6:
58:ee:55:18:8f:c8:1e:4f:a7:a1:62:0c:c5:e0:d6:
6e:9b:98:24:01:5b:8d:77:19:78:c9:24:d8:d0:72:
11:1a:8a:e8:dc:03:ff:57:96:aa:a7:5f:86:ba:9f:
c4:9e:3b:8b:ed:d9:eb:9f:dd:60:33:f4:bc:df:58:
13:04:46:da:ba:9a:30:2e:eb:95:ca:cf:9c:d1:b5:
11:0f:fe:76:dc:74:ac:90:b1:e2:06:77:63:f5:64:
11:97:9d:91:29:55:ba:46:bf:08:bb:94:87:e0:39:
a7:0b:f3:e9:5f:c9:f3:1c:9f:10:73:d0:30:ae:23:
6b:b0:d3:5f:47:7e:3f:c8:d1:42:a5:1e:42:12:72:
5d:27:dd:4e:40:ab:b5:0d:ba:05:58:d6:bb:6f:74:
50:2d:45:53:a8:a1:17:22:0c:d7:6f:85:71:f4:22:
d4:81:9c:a3:51:c4:06:ed:54:71:07:5f:d7:b2:49:
18:9b:2c:3b:cd:7d:1f:2b:f6:c1:40:71:20:e8:01:
a2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:44:D7:61:B9:8C:3D:6E:46:F9:9E:23:85:93:4E:20:7F:3F:56:08
X509v3 Authority Key Identifier:
keyid:D6:BB:1E:A7:DF:39:07:76:27:81:06:3E:EC:57:99:D9:07:73:D9:C2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2141/1rsep985B3YngQY-7FeZ2Qdz2cI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1rsep985B3YngQY-7FeZ2Qdz2cI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2141/1rsep985B3YngQY-7FeZ2Qdz2cI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d9:ac:4a:e9:15:3f:b3:27:69:a8:4b:76:57:51:00:c1:cc:
b4:93:8c:b3:1a:c1:59:09:ed:b7:40:79:22:be:93:8d:38:91:
41:35:71:03:d7:a8:dd:6b:99:5e:8e:99:46:aa:de:10:62:e7:
7a:6a:7c:e4:b3:d6:31:3e:3f:2d:4e:71:8a:00:ae:93:88:2f:
12:ac:fe:c7:53:60:44:b9:b8:55:6a:a7:d9:ed:2c:80:5c:d3:
81:ce:43:d3:32:7f:51:ea:5d:54:ea:41:d3:83:18:da:1b:05:
41:27:3d:06:07:f5:7f:44:c9:4d:3a:06:bb:15:3f:26:de:a5:
4c:91:7f:ae:96:99:0d:82:5b:1a:e4:df:d3:04:1b:27:11:89:
a5:66:39:4b:d3:e2:4f:6e:5a:69:18:74:9c:96:1b:06:10:96:
92:5c:74:c0:58:74:c2:9a:38:ed:7e:59:ea:69:84:ee:84:6d:
a3:7a:1d:11:42:f5:ba:a1:b8:19:1a:bc:86:39:f9:06:56:5c:
36:0e:05:5a:c0:2d:7c:55:2a:f6:fe:46:ff:26:07:07:3c:e5:
e8:47:8e:32:e4:ae:03:41:e1:a8:82:b0:7d:f7:eb:31:11:3d:
eb:25:a8:26:6a:bc:83:32:59:58:c4:2d:09:50:d9:86:2c:10:
59:3d:4f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:42 2025 by rpki-client