Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2968/YrhXdd8vWVzJGkcf9zGcpHi3mkY.mft
File: YrhXdd8vWVzJGkcf9zGcpHi3mkY.mft (raw, json)
Hash identifier: Y+u3LZpVKdZAEwpIOCnWXhH2oxrbmQpaCARrjouNqXU=
Subject key identifier: 40:55:24:F8:A4:98:A0:EB:82:AF:0D:63:81:60:15:AF:66:D9:34:BD
Authority key identifier: 62:B8:57:75:DF:2F:59:5C:C9:1A:47:1F:F7:31:9C:A4:78:B7:9A:46
Certificate issuer: /CN=62B85775DF2F595CC91A471FF7319CA478B79A46
Certificate serial: 1770
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YrhXdd8vWVzJGkcf9zGcpHi3mkY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2968/YrhXdd8vWVzJGkcf9zGcpHi3mkY.mft
Manifest number: 1770
Signing time: Sat 29 Mar 2025 08:27:39 +0000
Manifest this update: Sat 29 Mar 2025 08:27:39 +0000
Manifest next update: Sat 29 Mar 2025 14:27:39 +0000
Files and hashes: 1: YrhXdd8vWVzJGkcf9zGcpHi3mkY.crl (hash: njB0+WZKwDSsA59Xj31lfMwjuK9VqEImz/sEbLcTpdw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6000 (0x1770)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62B85775DF2F595CC91A471FF7319CA478B79A46
Validity
Not Before: Mar 29 08:27:39 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=405524F8A498A0EB82AF0D63816015AF66D934BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:32:76:69:91:27:34:3b:02:9d:50:ff:63:f5:
fd:6d:e7:7e:30:eb:26:cc:d5:5e:95:f7:ee:9a:54:
cd:40:31:f0:a4:48:57:10:dc:4b:c4:9b:26:7e:02:
ba:38:5d:35:00:e7:41:b2:2d:7e:7f:6f:a3:ea:0d:
f0:e4:11:33:b1:ed:1d:7c:d1:64:ef:bf:92:2a:c7:
b9:95:3e:f5:5b:5d:95:b7:06:85:87:42:76:2a:49:
42:64:83:54:af:56:62:ce:7e:72:91:bc:fb:74:8b:
ce:ea:82:45:d8:e6:9e:c7:80:9d:7f:be:3c:ef:98:
30:4b:f0:24:5f:71:4a:1b:22:8b:0c:91:74:2a:83:
da:84:56:4a:f7:e5:70:7d:2f:70:48:b1:c8:f0:70:
07:3a:5a:e3:31:c7:05:5d:a0:b8:42:db:46:cc:5a:
d6:7d:2f:fd:31:75:56:c7:d6:e5:33:71:b9:f0:f6:
70:5a:6b:66:ff:36:aa:3b:6f:32:4e:d2:60:0d:f0:
ba:c6:22:22:11:55:83:96:c0:ec:f1:2b:d5:8d:a1:
97:ae:69:fd:a7:1f:c4:10:a8:36:83:e4:c7:41:3b:
fc:c7:6d:8a:8c:8d:e0:c8:0d:7a:de:5f:ac:5f:78:
ff:87:3c:0b:3d:99:83:28:6f:26:d2:6b:2f:4a:9d:
4d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:55:24:F8:A4:98:A0:EB:82:AF:0D:63:81:60:15:AF:66:D9:34:BD
X509v3 Authority Key Identifier:
keyid:62:B8:57:75:DF:2F:59:5C:C9:1A:47:1F:F7:31:9C:A4:78:B7:9A:46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2968/YrhXdd8vWVzJGkcf9zGcpHi3mkY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YrhXdd8vWVzJGkcf9zGcpHi3mkY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2968/YrhXdd8vWVzJGkcf9zGcpHi3mkY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:37:31:44:d6:d1:cd:5d:86:84:97:3f:4c:dc:ed:cc:de:a5:
ba:6a:99:09:c7:05:82:ed:97:eb:97:23:f6:e6:b1:36:ae:91:
59:82:c0:c8:12:11:56:bd:dd:d7:e9:76:15:38:8b:21:28:12:
aa:23:46:9d:ab:c5:fe:f9:1e:4e:2c:5d:cc:ec:c2:27:37:0b:
e6:8c:54:67:4e:37:88:70:5a:b6:1d:3f:62:1a:10:7c:11:e9:
90:59:db:cf:a5:e3:1d:31:de:62:00:d4:42:9e:37:96:b0:89:
03:75:b5:0c:0e:cc:5f:86:14:0d:d7:83:3c:93:6c:63:10:1b:
eb:3a:88:6a:72:4b:d8:64:30:7f:7a:dd:84:54:b3:e7:f9:de:
71:cf:cc:9d:6a:53:c9:b1:fc:e0:c2:ca:78:d4:71:34:52:89:
16:52:97:5e:cb:9e:35:14:a9:8f:34:9a:fe:1c:a7:aa:f2:78:
83:bb:20:86:53:32:b4:77:94:29:c9:08:31:ef:d2:dd:73:06:
fe:b5:23:5a:aa:e8:ce:5d:cc:6a:0f:2c:1c:44:b8:bc:a6:85:
84:32:c0:dc:59:5c:9c:3b:26:95:1b:bd:ed:82:6c:23:9c:39:
56:ae:04:cc:f7:c0:57:97:aa:ca:be:52:dc:ff:94:1d:42:3f:
8d:56:05:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:59:36 2025 by rpki-client