Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2897/KKY-9HFn8eZudn8uDEqFADvLlAA.mft
File: KKY-9HFn8eZudn8uDEqFADvLlAA.mft (raw, json)
Hash identifier: ol0bB7zYRc/3OwKQTolAkcX05glVq+5Fb4HRDt7YEJQ=
Subject key identifier: 73:FD:CC:BD:47:6E:FB:4A:6A:C8:82:41:66:25:43:D0:FB:B7:B0:73
Authority key identifier: 28:A6:3E:F4:71:67:F1:E6:6E:76:7F:2E:0C:4A:85:00:3B:CB:94:00
Certificate issuer: /CN=28A63EF47167F1E66E767F2E0C4A85003BCB9400
Certificate serial: 2547
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KKY-9HFn8eZudn8uDEqFADvLlAA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/KKY-9HFn8eZudn8uDEqFADvLlAA.mft
Manifest number: 2547
Signing time: Fri 21 Mar 2025 01:26:54 +0000
Manifest this update: Fri 21 Mar 2025 01:26:54 +0000
Manifest next update: Fri 21 Mar 2025 07:26:54 +0000
Files and hashes: 1: KKY-9HFn8eZudn8uDEqFADvLlAA.crl (hash: 9+m8n/o5PMpLUvpwgRfWda7eZQarK3XX6LwoaeYoCLc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9543 (0x2547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28A63EF47167F1E66E767F2E0C4A85003BCB9400
Validity
Not Before: Mar 21 01:26:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=73FDCCBD476EFB4A6AC88241662543D0FBB7B073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:da:e1:89:8e:76:94:a0:20:11:88:8c:47:
d4:e9:31:d3:40:30:11:b0:f9:e6:1c:4b:fe:2c:54:
0c:b8:72:76:f8:78:2a:33:0e:15:5d:e4:c9:21:c3:
09:8c:8d:37:e8:f3:b9:78:5c:e1:e5:84:32:bb:df:
cc:d3:22:71:6f:5c:8e:05:10:f8:4d:fc:04:09:80:
17:34:fd:20:34:b1:25:07:fb:43:be:3d:ed:29:e9:
60:da:74:f2:ae:ed:de:20:5a:bd:02:ba:4e:1b:1f:
3a:6e:36:13:6f:d4:5a:ca:75:f6:1c:91:7a:88:6c:
4a:d2:3d:ce:9c:71:35:39:4a:28:4c:e6:2b:2b:29:
33:34:c8:32:da:ba:5d:34:05:66:02:38:eb:c0:37:
f8:ae:d0:7b:45:b5:aa:6b:bf:cc:d4:77:80:4a:45:
25:96:e5:62:7e:39:69:e0:ab:31:f7:d1:95:38:77:
e0:e9:fa:e3:47:c5:56:24:96:ea:4d:2b:d3:b8:be:
70:74:14:d0:00:44:17:c3:2e:b2:14:17:8c:d8:a7:
c0:4c:f3:04:4f:3a:2d:99:a6:c9:bb:12:84:60:6e:
ad:55:24:3e:2a:1a:7a:df:3f:e3:ff:fd:dd:64:fc:
fb:ea:ce:99:27:dd:98:90:a2:c1:7b:0d:a8:14:c3:
c5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FD:CC:BD:47:6E:FB:4A:6A:C8:82:41:66:25:43:D0:FB:B7:B0:73
X509v3 Authority Key Identifier:
keyid:28:A6:3E:F4:71:67:F1:E6:6E:76:7F:2E:0C:4A:85:00:3B:CB:94:00
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/KKY-9HFn8eZudn8uDEqFADvLlAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KKY-9HFn8eZudn8uDEqFADvLlAA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/KKY-9HFn8eZudn8uDEqFADvLlAA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c0:b4:b2:a7:45:0f:7b:6c:22:b3:d5:04:f6:55:c8:7b:41:
8b:68:f1:a7:91:b0:20:61:07:b8:88:c5:52:04:37:ab:c3:56:
11:c4:fc:b3:31:3c:d5:c4:5d:7c:ad:02:7f:ca:03:2a:6f:bf:
90:8d:64:79:40:6d:ee:99:d8:12:1a:3f:df:fe:88:6a:3f:1f:
3d:90:8c:bd:40:09:b2:35:2b:6c:36:aa:38:fd:fa:77:e6:88:
2b:44:4e:04:98:c1:a0:b6:29:44:75:01:1a:cb:d5:d4:4b:65:
d3:a0:a4:12:3d:82:8a:c5:41:63:4b:15:e2:18:97:76:31:fe:
16:8f:f9:a9:b1:e8:d3:f5:67:22:67:7a:eb:49:f7:78:1b:41:
a5:c2:86:a2:26:18:9b:c9:4c:52:a2:51:17:47:a6:00:a3:4a:
bd:46:cd:2c:38:00:aa:dc:e3:29:be:a5:ab:73:26:88:0a:4e:
d7:56:21:34:08:09:87:d5:88:6b:d6:19:5a:01:00:de:b0:68:
4d:5a:c6:cb:16:3e:40:3f:91:90:95:07:7b:7c:13:d2:62:ca:
c1:8e:66:59:bf:ac:34:69:fd:37:3f:37:ce:26:aa:1a:44:8c:
ac:3b:27:02:13:da:aa:f8:27:b5:9a:ea:91:e4:93:33:44:0c:
9c:e5:dc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:49 2025 by rpki-client