Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2453/GvkCrWYhGIHqBAxf9yA9m8yH_8U.mft
File: GvkCrWYhGIHqBAxf9yA9m8yH_8U.mft (raw, json)
Hash identifier: duf9+6eLnqptuxjRNIa20IeXGLveKOW8ZHN1seJua7Y=
Subject key identifier: EE:83:F8:CB:C1:FF:8A:1A:AA:97:BE:05:8C:10:0D:8C:C5:DA:F6:58
Authority key identifier: 1A:F9:02:AD:66:21:18:81:EA:04:0C:5F:F7:20:3D:9B:CC:87:FF:C5
Certificate issuer: /CN=1AF902AD66211881EA040C5FF7203D9BCC87FFC5
Certificate serial: 4F2A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GvkCrWYhGIHqBAxf9yA9m8yH_8U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2453/GvkCrWYhGIHqBAxf9yA9m8yH_8U.mft
Manifest number: 4F2A
Signing time: Sat 29 Mar 2025 10:31:54 +0000
Manifest this update: Sat 29 Mar 2025 10:31:54 +0000
Manifest next update: Sat 29 Mar 2025 16:31:54 +0000
Files and hashes: 1: GvkCrWYhGIHqBAxf9yA9m8yH_8U.crl (hash: 47R4YWx7PcfCHWDYd9Ge0safcctcACsdSP8XTrB39Qc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20266 (0x4f2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AF902AD66211881EA040C5FF7203D9BCC87FFC5
Validity
Not Before: Mar 29 10:31:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=EE83F8CBC1FF8A1AAA97BE058C100D8CC5DAF658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:ae:bf:8d:92:9a:81:0c:82:6e:94:28:0f:
37:d4:ac:27:d2:32:4a:81:1a:6f:c5:2c:3e:17:1a:
1c:86:02:1c:06:bc:7f:20:09:a4:30:80:cd:17:43:
b8:77:b1:b5:f0:34:41:95:e6:06:da:ca:62:4c:e3:
61:5f:41:e3:d3:6e:59:cc:89:7d:f1:3e:73:8c:c3:
82:1a:25:9f:9f:f6:27:f4:1d:9a:31:58:e1:d8:4a:
aa:57:b1:1b:16:b5:cc:19:47:8c:8b:b7:84:63:14:
96:b0:c3:ad:b2:40:50:12:0f:1e:b2:6c:16:09:20:
6e:00:cc:54:48:77:72:a3:61:c3:ca:67:be:8c:16:
c8:72:e2:78:91:f5:41:08:5a:1b:67:d0:91:05:94:
ba:07:e0:b0:7d:92:bd:c8:5d:3c:81:cd:95:d3:e7:
dd:12:1c:d7:9a:2a:80:f5:62:4b:71:3d:95:ae:01:
2e:89:e1:c3:d8:5f:61:80:5b:1c:27:75:fc:eb:27:
77:77:27:f5:a4:79:1a:82:90:f3:a2:16:bc:e9:88:
00:5d:99:63:86:a0:fe:45:3b:a0:56:39:40:90:fc:
a8:6e:e2:25:61:05:fb:4c:a8:fd:5f:ae:a6:4d:8f:
79:64:f7:85:67:f6:15:3b:2e:d4:63:a9:d5:5a:6f:
0d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:83:F8:CB:C1:FF:8A:1A:AA:97:BE:05:8C:10:0D:8C:C5:DA:F6:58
X509v3 Authority Key Identifier:
keyid:1A:F9:02:AD:66:21:18:81:EA:04:0C:5F:F7:20:3D:9B:CC:87:FF:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2453/GvkCrWYhGIHqBAxf9yA9m8yH_8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GvkCrWYhGIHqBAxf9yA9m8yH_8U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2453/GvkCrWYhGIHqBAxf9yA9m8yH_8U.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d3:9a:fe:52:33:b1:1f:fc:5f:d2:78:76:c7:4c:c4:38:b6:
d8:88:0f:de:ea:93:d4:e3:5c:5f:bb:09:e0:51:9e:12:6d:df:
47:75:2f:21:60:7e:f9:45:24:cd:66:f6:98:e0:3c:02:92:89:
a7:47:95:eb:b3:32:c6:7c:f3:12:82:3e:89:72:fc:9b:63:27:
e2:cd:2c:fb:2f:90:26:eb:ca:f2:67:db:88:07:c0:a1:79:ca:
e6:4a:a5:84:5d:1c:d7:c7:04:b8:52:66:f4:c5:f1:74:ce:18:
77:1d:1b:42:a0:52:29:e0:51:45:b3:7b:08:ce:6e:c9:04:e7:
ff:6b:7f:f4:5b:d6:6f:be:d8:18:c1:d7:4f:66:bb:aa:bd:4b:
0f:50:3a:d6:0f:96:4a:3c:8a:a7:02:c4:b9:92:36:7f:d6:3e:
fd:13:b9:a4:fd:79:ca:ed:a0:bd:a5:18:db:88:4e:22:e9:80:
54:f5:d9:cb:24:99:0c:99:14:bf:db:9c:25:ce:05:c6:0d:1e:
6b:6a:eb:2b:32:ac:71:15:5e:e5:cb:23:47:a4:4a:6d:18:e4:
1f:5a:15:c4:e7:00:4f:b8:87:58:f0:9b:c3:82:c1:ac:4b:31:
7f:88:c6:f8:90:27:7f:d2:1a:08:23:d2:c5:84:49:52:4e:2e:
df:3f:9b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:47:04 2025 by rpki-client