Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2694/j3yfJPFqzfopGAszfzITYCfMNNc.mft
File: j3yfJPFqzfopGAszfzITYCfMNNc.mft (raw, json)
Hash identifier: UVTbgaPoojd1zbP+UdtJE/kcPE1VEjPWM6cBiBMxq8M=
Subject key identifier: C4:A8:B3:49:D0:33:B6:14:30:EC:AD:A5:F6:4B:C3:6D:0A:E9:9B:30
Authority key identifier: 8F:7C:9F:24:F1:6A:CD:FA:29:18:0B:33:7F:32:13:60:27:CC:34:D7
Certificate issuer: /CN=8F7C9F24F16ACDFA29180B337F32136027CC34D7
Certificate serial: 2EE8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j3yfJPFqzfopGAszfzITYCfMNNc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/j3yfJPFqzfopGAszfzITYCfMNNc.mft
Manifest number: 2EE2
Signing time: Sat 29 Mar 2025 10:30:19 +0000
Manifest this update: Sat 29 Mar 2025 10:30:19 +0000
Manifest next update: Sat 29 Mar 2025 16:30:19 +0000
Files and hashes: 1: VXLZLi9c1FG1cRRh68YMOp2EfY0.roa (hash: 79ksCyH2dak2muL6vZIz4biyRKpbNXUDuc4GQNSxIAQ=)
2: j3yfJPFqzfopGAszfzITYCfMNNc.crl (hash: hkrsMnU+ni3zlZNfvbuP7HNBIZWPrWrzdIMx6SPt+R8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12008 (0x2ee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F7C9F24F16ACDFA29180B337F32136027CC34D7
Validity
Not Before: Mar 29 10:30:19 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C4A8B349D033B61430ECADA5F64BC36D0AE99B30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:ab:9c:e1:fd:aa:a3:d3:c6:48:74:77:2c:
5c:7b:9f:1e:6d:2a:4e:75:90:40:99:b2:55:3c:68:
45:7b:0d:85:da:5f:6d:b0:f6:c7:d0:1a:3e:77:b9:
ac:71:8c:3b:8b:97:b2:4b:3f:35:b3:fc:6d:54:ec:
08:d7:f2:1e:a1:7a:fe:34:5d:5a:74:e9:b0:ff:31:
e5:dd:cd:9b:e3:0a:03:ad:4b:4b:30:cb:9a:1e:5b:
fa:ae:77:fd:43:d4:86:59:96:36:fa:1e:ec:ef:57:
48:1c:e7:04:e6:73:ed:b8:0c:f7:46:9c:e7:99:fd:
29:f2:82:9e:78:cc:8c:21:a9:b5:c2:f3:f5:1e:1f:
e7:e7:fd:2a:f0:ab:64:4e:63:cc:6a:11:7e:72:c2:
69:bd:f2:2c:38:04:44:5d:6f:63:69:85:4e:c3:28:
68:69:10:ea:a5:60:f9:a4:5b:f0:76:76:4e:ec:c6:
51:b9:4f:24:46:03:3d:68:02:15:6f:9c:b1:1d:2a:
69:ec:d0:93:c3:4c:7b:0d:db:f7:08:50:6e:12:01:
9a:5c:6a:cb:c1:28:31:ae:d1:be:4e:28:ed:30:b7:
da:bb:27:2a:97:33:12:11:d3:3a:3e:a9:ce:e3:dd:
68:6c:b1:d2:b9:a0:79:4c:8f:4d:1a:6f:13:b8:33:
f7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A8:B3:49:D0:33:B6:14:30:EC:AD:A5:F6:4B:C3:6D:0A:E9:9B:30
X509v3 Authority Key Identifier:
keyid:8F:7C:9F:24:F1:6A:CD:FA:29:18:0B:33:7F:32:13:60:27:CC:34:D7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/j3yfJPFqzfopGAszfzITYCfMNNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j3yfJPFqzfopGAszfzITYCfMNNc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/j3yfJPFqzfopGAszfzITYCfMNNc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:26:bb:6c:4e:b8:4d:ed:43:29:67:12:db:ce:6e:30:78:93:
5f:e4:3f:cc:b5:8b:6b:29:2c:8c:20:37:1f:44:dd:88:df:d9:
f4:94:e8:9e:14:c9:80:7a:1c:2f:b9:fe:93:57:26:98:be:56:
22:bb:ce:1a:f1:4c:7f:5b:d4:27:65:04:1e:92:d2:e6:28:a7:
58:94:c5:95:66:51:03:33:24:08:6e:58:a8:d5:55:e8:59:c1:
41:bc:cc:e7:f2:48:d7:82:9f:b9:6f:ed:e9:1a:60:5f:7c:60:
67:a0:a6:9a:d7:d4:5d:3d:9f:f1:ae:ef:7e:90:6b:78:0d:38:
e4:22:a9:f4:30:49:02:e6:8b:9c:46:5e:3a:24:ca:f9:ff:aa:
ad:08:cd:9b:55:71:14:b9:35:2d:8e:7a:cf:77:95:de:54:fd:
1a:50:72:64:9d:a7:f1:74:f7:c8:d9:4e:ff:b1:72:04:12:1c:
4a:7e:8a:73:f3:f6:6c:2a:8a:17:48:ba:c6:30:d8:6e:7b:6c:
39:ed:3a:e4:33:58:88:4a:55:90:d2:6b:78:69:ae:50:2a:48:
0e:84:be:0f:1d:fc:52:23:91:46:0e:aa:5b:94:c6:e4:0d:31:
e9:a5:0b:f4:a2:95:70:b7:18:2d:a7:2e:4b:2d:69:49:78:a6:
c3:a8:28:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:22:00 2025 by rpki-client