Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2991/ndo_saueLKtRkuiQnryzPkC2JkE.mft
File: ndo_saueLKtRkuiQnryzPkC2JkE.mft (raw, json)
Hash identifier: Q48GieBMH7HQcsapMlEcTX/X5LlIcstGpPKZBi2oGAk=
Subject key identifier: 6F:79:5B:1E:77:D8:E3:54:96:BE:0F:B2:C5:1B:9D:17:D6:80:B4:F7
Authority key identifier: 9D:DA:3F:B1:AB:9E:2C:AB:51:92:E8:90:9E:BC:B3:3E:40:B6:26:41
Certificate issuer: /CN=9DDA3FB1AB9E2CAB5192E8909EBCB33E40B62641
Certificate serial: 13D2
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ndo_saueLKtRkuiQnryzPkC2JkE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/ndo_saueLKtRkuiQnryzPkC2JkE.mft
Manifest number: 13D2
Signing time: Fri 21 Mar 2025 00:31:23 +0000
Manifest this update: Fri 21 Mar 2025 00:31:23 +0000
Manifest next update: Fri 21 Mar 2025 06:31:23 +0000
Files and hashes: 1: ndo_saueLKtRkuiQnryzPkC2JkE.crl (hash: lZE6M9UOdPfnEMYCEnPRLzn1at4PinFIt4AZdFL8jE0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5074 (0x13d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DDA3FB1AB9E2CAB5192E8909EBCB33E40B62641
Validity
Not Before: Mar 21 00:31:23 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6F795B1E77D8E35496BE0FB2C51B9D17D680B4F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:61:f2:ca:4d:77:a1:f1:b3:bb:e9:57:92:
91:66:42:c3:10:3f:9a:6b:63:86:01:0a:83:68:0d:
1e:44:e5:6c:34:af:2f:29:1d:0b:70:a9:4e:26:2d:
c5:af:82:20:dc:b0:bd:a4:8f:cd:4b:6b:a2:62:5f:
2d:98:ab:77:79:e0:4b:ec:07:f9:54:20:c3:93:6a:
53:aa:c4:86:bf:e9:36:91:f7:6e:a5:95:0d:16:79:
c2:ad:de:34:b4:5b:77:55:46:9c:45:2b:b1:58:2c:
97:da:80:ed:ac:b5:6b:13:ca:85:a4:74:b1:dc:dd:
23:ac:1d:e4:2a:e0:0b:b3:bd:f6:81:4b:e6:bb:6d:
b8:87:8c:b6:bc:15:9d:dc:7d:88:ea:02:1d:ce:3b:
92:fb:6f:9f:77:72:a5:94:c8:7f:5a:59:a8:92:2a:
b1:75:4e:b9:3f:11:6b:9e:a2:39:cf:b6:0f:2c:d1:
56:53:ac:b4:92:c9:b7:99:ad:c2:f5:18:d5:90:1d:
75:c6:6b:c9:69:51:8b:fc:3f:df:f3:93:bb:38:fb:
18:a2:dc:a9:4c:60:47:7f:c4:ca:2e:87:9b:12:11:
c7:12:2e:c3:a7:5a:f2:dc:9e:e0:40:f2:76:67:06:
00:09:fb:39:87:50:81:3b:51:33:b3:70:09:9f:3e:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:79:5B:1E:77:D8:E3:54:96:BE:0F:B2:C5:1B:9D:17:D6:80:B4:F7
X509v3 Authority Key Identifier:
keyid:9D:DA:3F:B1:AB:9E:2C:AB:51:92:E8:90:9E:BC:B3:3E:40:B6:26:41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/ndo_saueLKtRkuiQnryzPkC2JkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ndo_saueLKtRkuiQnryzPkC2JkE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/ndo_saueLKtRkuiQnryzPkC2JkE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2e:57:72:ff:55:d1:fa:6b:cf:7c:19:7f:e2:5d:dc:b3:cc:
61:a3:8c:14:15:0b:88:74:89:65:9f:91:33:59:17:42:68:e9:
33:65:4f:7e:62:18:ab:57:69:4c:29:5e:8e:38:d8:82:21:b0:
00:51:b4:e3:63:af:46:05:dc:96:7b:f0:dd:84:44:b7:3f:d2:
02:54:26:6a:e6:48:72:ce:08:43:cf:7c:16:9f:80:d9:53:f5:
3e:67:35:0f:9d:f8:1d:44:48:29:9a:21:72:0b:38:0e:16:57:
4b:9b:56:44:dc:7c:ba:73:43:31:29:ca:65:00:e2:30:04:f6:
e9:74:22:ad:a8:81:f7:79:0f:90:1c:7f:b3:79:e1:9d:3b:20:
da:bf:e8:e3:12:8a:55:4e:d8:29:df:7f:c3:c4:de:51:c8:07:
49:6b:57:40:2c:f0:cf:8a:70:98:37:f9:53:67:7d:33:5e:06:
1e:9e:b0:70:9c:ff:d6:4c:4c:0f:20:67:08:a1:6e:bb:e2:e1:
64:85:94:38:74:74:1a:a5:34:bd:3a:1a:08:e2:9a:6c:db:09:
9c:28:df:cb:8c:75:33:15:85:8c:c3:72:40:82:43:40:52:d7:
83:36:56:8e:85:2c:ca:7e:4b:7b:b4:0d:29:e3:3d:cb:fa:0a:
e6:fe:b4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:16 2025 by rpki-client