Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft
File: zfv2KGSEFu4dmdMuX5yWhae-K7w.mft (raw, json)
Hash identifier: Ha7qPOFEL9nA5E7mqMBzCdW9tV8OqiTbZ9yGYiqyPqE=
Subject key identifier: 3C:66:EB:21:CE:74:12:47:CB:2A:93:20:E2:5E:8C:EF:32:4D:46:7B
Authority key identifier: CD:FB:F6:28:64:84:16:EE:1D:99:D3:2E:5F:9C:96:85:A7:BE:2B:BC
Certificate issuer: /CN=CDFBF628648416EE1D99D32E5F9C9685A7BE2BBC
Certificate serial: 1C7E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft
Manifest number: 1C7E
Signing time: Fri 04 Apr 2025 19:09:37 +0000
Manifest this update: Fri 04 Apr 2025 19:09:37 +0000
Manifest next update: Sat 05 Apr 2025 01:09:37 +0000
Files and hashes: 1: zfv2KGSEFu4dmdMuX5yWhae-K7w.crl (hash: gLbM1izGyEyezJWJd7JZChOS105mxHqQzMyIz8bDVnU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7294 (0x1c7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDFBF628648416EE1D99D32E5F9C9685A7BE2BBC
Validity
Not Before: Apr 4 19:09:37 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=3C66EB21CE741247CB2A9320E25E8CEF324D467B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:49:8e:33:ee:b4:d8:a8:76:b4:9d:5b:cc:42:
2f:9f:47:62:a7:e1:8e:d7:07:e1:e0:5d:02:81:a9:
d0:22:bd:24:a3:6e:9b:de:62:be:2a:40:6e:38:19:
d3:66:28:57:3b:99:53:71:f2:5c:d4:ea:c3:bd:6c:
63:37:85:6b:ef:18:36:68:30:95:90:1a:8b:ee:0e:
89:8c:5e:43:ee:c6:df:15:16:3c:34:7e:46:5f:06:
ec:d9:86:c9:7c:a8:28:9c:34:56:48:c9:b3:e5:a2:
6c:90:33:29:c8:8c:e9:57:34:c6:f6:45:37:f6:71:
00:2f:1b:b8:9e:8b:f3:92:5f:88:93:ed:a9:3d:ef:
3b:61:74:ad:7b:bf:e7:3e:27:63:a2:88:49:0a:a3:
1f:63:11:40:d4:86:24:0f:5a:73:f0:17:3d:33:25:
61:42:8f:5f:6e:85:46:f6:90:98:fd:ae:43:2b:02:
e5:09:fd:c9:44:df:58:94:36:c2:a7:05:a9:60:18:
20:49:44:c6:b4:5a:20:a1:24:05:fa:5a:7e:e4:47:
fe:e9:51:73:9b:c1:59:2e:be:3e:9a:84:64:52:8f:
c3:c7:31:32:1f:f0:53:4d:4e:9c:81:0a:f0:13:99:
d8:61:bf:3b:c8:1d:59:92:30:46:36:2a:ab:87:d8:
08:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:66:EB:21:CE:74:12:47:CB:2A:93:20:E2:5E:8C:EF:32:4D:46:7B
X509v3 Authority Key Identifier:
keyid:CD:FB:F6:28:64:84:16:EE:1D:99:D3:2E:5F:9C:96:85:A7:BE:2B:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:84:b3:d7:18:37:ee:0f:83:82:11:35:d6:27:b0:fb:82:f6:
24:cb:a2:97:23:78:5c:e4:ed:5c:ba:1a:ab:f9:c5:bd:11:11:
bd:02:11:d8:5d:f5:df:6f:e6:42:a9:ff:c1:89:50:9a:c9:2f:
dd:40:f0:64:6d:81:a4:80:34:5c:30:0f:82:53:de:cb:2e:03:
3f:c9:5e:f0:fc:5a:7c:ce:2d:d8:b6:4a:cb:1a:bf:a4:9f:7b:
97:52:57:f4:83:42:f5:5d:60:6e:b3:51:4f:69:fc:1a:6d:ed:
08:31:7d:eb:bc:78:54:44:fc:48:56:4e:cf:7e:58:9e:a1:aa:
a8:79:84:d0:45:18:d9:ae:e3:19:bd:a6:b3:09:9e:77:49:3b:
33:5b:9d:f1:28:dc:e1:3b:73:9b:48:a3:d3:de:2a:98:0e:44:
c1:1a:e9:27:f6:e0:ad:e2:ca:bc:c2:07:32:a0:8e:43:49:f6:
0e:5f:33:3c:c5:3a:94:6b:9d:8d:15:13:80:d7:21:68:6a:d2:
97:bf:06:b3:d1:0d:e6:5f:cc:3d:7c:82:e3:96:54:64:74:6a:
bb:49:80:99:68:a4:e5:98:6b:69:52:c5:95:bb:05:cd:52:df:
8c:a8:e3:1a:27:ee:87:74:c2:2b:d9:d3:4a:53:1d:c4:51:fa:
33:4a:4e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:27 2025 by rpki-client