Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2330/NxT4EtSpDicn7ABvXkzukIk0r3g.mft
File: NxT4EtSpDicn7ABvXkzukIk0r3g.mft (raw, json)
Hash identifier: CgxE0dB0ueuEgRxGdcD7YvLt9jQGpXEojchqkYrIgi4=
Subject key identifier: D4:72:7B:D1:54:0D:F9:B6:C4:FC:C1:74:C4:0A:00:22:80:30:2B:DA
Authority key identifier: 37:14:F8:12:D4:A9:0E:27:27:EC:00:6F:5E:4C:EE:90:89:34:AF:78
Certificate issuer: /CN=3714F812D4A90E2727EC006F5E4CEE908934AF78
Certificate serial: 1BF0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NxT4EtSpDicn7ABvXkzukIk0r3g.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2330/NxT4EtSpDicn7ABvXkzukIk0r3g.mft
Manifest number: 1BF0
Signing time: Sat 29 Mar 2025 06:27:13 +0000
Manifest this update: Sat 29 Mar 2025 06:27:13 +0000
Manifest next update: Sat 29 Mar 2025 12:27:13 +0000
Files and hashes: 1: NxT4EtSpDicn7ABvXkzukIk0r3g.crl (hash: QdqVo351/OL2nsEycpMpvram998KOHVbzVRsjAttZ/I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7152 (0x1bf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3714F812D4A90E2727EC006F5E4CEE908934AF78
Validity
Not Before: Mar 29 06:27:13 2025 GMT
Not After : Sep 27 02:44:34 2025 GMT
Subject: CN=D4727BD1540DF9B6C4FCC174C40A002280302BDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:3b:6c:95:b3:19:b9:3c:7f:39:15:f1:fd:
b5:9a:0d:ba:0a:83:cf:0b:a9:32:4a:ca:fd:8f:1b:
6f:47:00:29:45:8d:60:ee:28:18:fd:d7:fb:7f:64:
ef:7e:1a:0a:cf:8c:34:ba:5b:61:b5:06:1f:0b:0d:
e3:bc:71:9b:9c:a1:a8:2c:7b:f9:40:62:42:f9:7a:
bb:ef:ee:7b:87:00:71:3b:9d:88:82:03:e1:31:35:
45:68:19:50:53:82:cf:b2:98:1d:7d:9b:ea:4e:fd:
e0:a5:fc:fc:e8:78:8f:1e:bc:32:20:2e:38:36:d5:
9b:80:27:94:10:10:57:d4:8f:1e:eb:a2:1e:a4:4e:
25:cf:74:bb:2f:a0:63:d9:e0:46:f0:ea:a8:3f:0f:
a6:15:6a:18:76:b1:18:10:34:b2:12:65:9a:8e:24:
55:5c:e4:42:15:ac:20:09:ac:fd:4c:d9:e4:ae:f9:
cf:6d:24:a6:9e:58:90:f9:7c:bf:53:a1:79:36:b5:
b6:5f:4d:61:ac:0b:4e:c0:02:8d:ed:02:71:78:51:
30:c9:c9:fe:b6:8c:43:03:1e:8c:21:e5:3a:c1:50:
8e:02:c4:07:e4:5a:c2:d7:3e:c3:0d:16:fd:ef:36:
d7:b2:a6:7c:43:3b:d4:c0:9e:5d:4e:17:63:ec:3a:
b3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:72:7B:D1:54:0D:F9:B6:C4:FC:C1:74:C4:0A:00:22:80:30:2B:DA
X509v3 Authority Key Identifier:
keyid:37:14:F8:12:D4:A9:0E:27:27:EC:00:6F:5E:4C:EE:90:89:34:AF:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2330/NxT4EtSpDicn7ABvXkzukIk0r3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NxT4EtSpDicn7ABvXkzukIk0r3g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2330/NxT4EtSpDicn7ABvXkzukIk0r3g.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:58:0e:15:21:1b:78:1c:51:1e:e5:b4:ff:07:e5:fa:44:67:
33:89:a3:26:dc:e2:39:d8:c4:d0:d6:6f:84:e7:d9:45:30:ae:
d0:fc:52:49:8b:52:bf:90:b8:d3:5c:29:26:fc:19:dd:a7:70:
ba:be:2b:46:46:05:cc:a3:46:a7:05:eb:60:ae:58:d5:23:30:
63:59:9c:74:63:9f:58:e4:ec:11:99:0c:fa:e1:54:9e:db:e3:
88:fa:76:51:03:25:64:a3:24:6b:db:58:c4:a6:58:45:6f:e7:
86:61:82:d4:17:bf:8c:83:24:9d:53:11:87:0a:1c:2e:d7:cd:
55:61:f0:cb:c7:b2:29:56:e0:03:f4:c9:72:f4:a1:f5:b2:4b:
a5:03:53:f0:7a:05:9b:d3:f3:a6:db:b8:86:e3:2d:fe:0d:81:
e6:11:6e:c0:a7:5f:a3:f9:8e:7e:68:9f:23:d6:a3:4d:26:30:
c2:cd:15:28:28:a4:8c:b9:39:6f:32:23:2f:50:7a:10:b8:2c:
c9:f4:cf:80:0c:fb:ba:c3:0c:45:19:0e:40:fe:e0:df:1e:69:
9c:7a:f7:37:83:b4:01:87:b7:ad:41:3d:45:b7:b4:08:de:51:
bc:60:a1:a6:7c:88:23:5c:b7:28:cc:89:0e:27:9d:b3:12:1f:
8f:ca:79:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:03 2025 by rpki-client