Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2787/j0qlxHJa6rdOv6pPzq8d5mC1lQU.mft
File: j0qlxHJa6rdOv6pPzq8d5mC1lQU.mft (raw, json)
Hash identifier: K51wyvCdFsOlgp5YIQWVZfByKEgZcOPTBaRpZNZxeW0=
Subject key identifier: 9A:A0:75:E6:08:52:AF:1E:4C:C0:07:87:13:A9:C0:F1:94:2F:E3:83
Authority key identifier: 8F:4A:A5:C4:72:5A:EA:B7:4E:BF:AA:4F:CE:AF:1D:E6:60:B5:95:05
Certificate issuer: /CN=8F4AA5C4725AEAB74EBFAA4FCEAF1DE660B59505
Certificate serial: 13DE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j0qlxHJa6rdOv6pPzq8d5mC1lQU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/j0qlxHJa6rdOv6pPzq8d5mC1lQU.mft
Manifest number: 13DE
Signing time: Fri 21 Mar 2025 00:32:35 +0000
Manifest this update: Fri 21 Mar 2025 00:32:35 +0000
Manifest next update: Fri 21 Mar 2025 06:32:35 +0000
Files and hashes: 1: j0qlxHJa6rdOv6pPzq8d5mC1lQU.crl (hash: HeLMu1SkHNPlNnUrj6ChQzTmPtl6/yigzKGS/t4Zols=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5086 (0x13de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F4AA5C4725AEAB74EBFAA4FCEAF1DE660B59505
Validity
Not Before: Mar 21 00:32:35 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9AA075E60852AF1E4CC0078713A9C0F1942FE383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:fd:e0:3c:e8:6d:dc:49:d9:37:09:96:bc:
16:01:60:9c:c4:0e:7e:1a:c6:a1:6a:ba:ea:17:2e:
14:02:ef:ea:9f:0c:70:0f:a3:34:97:fe:3e:64:fc:
76:02:06:0f:de:6c:70:bd:60:d8:2c:0e:2d:7a:0a:
56:76:aa:1f:31:ed:4a:cc:09:a1:5a:15:82:93:38:
49:d9:6d:f7:0a:70:8b:6c:23:2a:12:cc:ec:a5:d7:
6f:b6:1e:8e:f2:56:5f:0d:3f:80:4b:7b:3b:6e:85:
50:21:b9:16:05:a4:70:16:70:59:c4:66:46:8a:97:
a4:4f:86:64:a7:15:6e:1b:de:b5:07:9f:b4:05:49:
64:08:46:7b:cc:58:6e:62:ff:7d:76:8c:00:f3:39:
b0:5b:1d:84:12:c4:dc:69:47:9d:b6:7d:e8:42:50:
f2:c5:71:84:2c:4e:9d:b2:31:53:62:c9:54:74:b1:
fa:53:11:4c:99:23:92:3a:e0:30:3c:62:e5:ab:3a:
9a:f9:d7:7e:07:37:b8:98:88:bc:15:59:4c:de:02:
89:14:b4:85:08:ee:99:2d:41:38:52:f3:bd:92:7a:
41:7c:fe:d8:6e:fd:03:04:d7:98:88:7b:44:a3:bf:
97:ec:7f:f3:51:5d:f3:c6:46:04:a9:a9:ee:63:8d:
98:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A0:75:E6:08:52:AF:1E:4C:C0:07:87:13:A9:C0:F1:94:2F:E3:83
X509v3 Authority Key Identifier:
keyid:8F:4A:A5:C4:72:5A:EA:B7:4E:BF:AA:4F:CE:AF:1D:E6:60:B5:95:05
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/j0qlxHJa6rdOv6pPzq8d5mC1lQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j0qlxHJa6rdOv6pPzq8d5mC1lQU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/j0qlxHJa6rdOv6pPzq8d5mC1lQU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:79:8e:01:69:eb:c9:85:f2:44:4b:b5:04:c5:b2:7a:60:e4:
f2:29:fe:89:21:c9:07:5f:fe:0b:90:61:f4:8b:9e:8d:75:09:
5b:8b:b1:2f:e0:28:ec:e3:ff:d3:05:20:ee:b6:6f:cf:7b:5c:
c5:c1:15:bd:bf:02:4e:47:25:29:fa:bd:ce:06:6d:9f:5a:80:
5a:56:a5:5e:a3:7c:f6:d8:e9:c7:28:e8:01:65:2b:e2:f5:f9:
7d:a1:59:46:b5:02:44:9b:0b:61:99:60:04:1a:3c:f6:15:5f:
da:bc:43:46:09:81:8f:5c:04:2e:84:7b:1e:39:3d:b9:5a:ac:
98:f5:3f:cd:c2:5d:f3:24:3a:0b:48:a5:93:ee:cb:4f:6b:47:
0e:61:04:3d:84:49:89:f0:93:9f:1b:42:0a:c3:9e:d8:57:88:
39:5c:09:f0:70:f4:12:c4:a0:33:31:55:93:56:91:f5:44:f3:
1b:f8:0e:ed:06:ac:5d:9a:77:44:a9:d5:87:f4:ed:e9:25:ce:
31:d0:15:01:c6:a0:0a:75:72:24:ab:53:0f:4a:70:b6:e8:c7:
92:ed:c2:ba:37:2a:ec:dd:ca:ca:fb:d3:e7:06:44:8f:ba:2c:
2e:db:0a:b1:58:15:fc:89:b2:c7:eb:52:ad:24:d3:f1:58:dd:
ab:f9:94:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:06 2025 by rpki-client