Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3076/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.mft
File: FRA62aFdfkF8Zwh3k9UUzyOK8lQ.mft (raw, json)
Hash identifier: L5WX2DIZYThw+At/Wau9wdb48j8uIfAQqc7+bfdmS2I=
Subject key identifier: CD:2D:B1:69:8A:A7:CE:87:2C:F3:60:B9:61:66:02:87:70:95:1A:AF
Authority key identifier: 15:10:3A:D9:A1:5D:7E:41:7C:67:08:77:93:D5:14:CF:23:8A:F2:54
Certificate issuer: /CN=15103AD9A15D7E417C67087793D514CF238AF254
Certificate serial: 1DE1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3076/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.mft
Manifest number: 1DE1
Signing time: Sat 29 Mar 2025 10:31:55 +0000
Manifest this update: Sat 29 Mar 2025 10:31:54 +0000
Manifest next update: Sat 29 Mar 2025 16:31:54 +0000
Files and hashes: 1: FRA62aFdfkF8Zwh3k9UUzyOK8lQ.crl (hash: WLgc6aOCC6AQp4BDgEAqGvI1hjIp/88qDQOBPOSIeJQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7649 (0x1de1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15103AD9A15D7E417C67087793D514CF238AF254
Validity
Not Before: Mar 29 10:31:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CD2DB1698AA7CE872CF360B96166028770951AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:ec:f9:af:8a:22:c4:92:f5:1c:91:c2:26:
73:74:c4:fb:fc:37:b8:ac:9d:5b:d0:75:9a:f1:af:
70:91:6f:f0:f2:1e:17:06:38:39:14:86:1c:44:b8:
83:cc:a9:8a:12:30:54:a9:f0:0a:0e:47:e0:a3:a7:
8d:22:12:4d:4f:32:7b:6f:20:f0:fe:9e:8a:90:b9:
ee:b8:52:2d:ea:a0:1f:c8:60:db:c3:ad:e7:5a:50:
f6:65:f6:e3:69:7b:43:d0:36:9c:f8:d5:db:80:c2:
9e:1b:97:86:ee:b0:6b:c3:2b:af:d9:22:04:e3:2e:
bc:e8:50:39:48:fe:58:f0:75:92:f5:b5:8b:cb:6c:
65:f1:ac:d7:c8:00:33:6f:37:40:70:fa:6a:5b:6a:
3c:e0:ea:5b:80:0e:7f:03:5f:b2:2e:95:d0:d2:43:
a7:3d:84:75:94:27:64:7b:82:6e:33:ab:a7:c8:88:
03:3e:51:86:f8:d2:62:51:10:08:cf:a0:ee:7c:a9:
6d:11:86:bd:1c:6b:42:62:02:41:5b:80:88:ef:c1:
9a:b8:cb:fe:88:09:a4:0a:9c:9a:34:ad:b4:ea:8f:
8d:08:de:f5:86:4f:01:d4:71:54:a7:36:a8:d4:10:
05:13:2c:fc:42:d7:e2:22:3e:c8:2e:a4:5b:d6:26:
b4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2D:B1:69:8A:A7:CE:87:2C:F3:60:B9:61:66:02:87:70:95:1A:AF
X509v3 Authority Key Identifier:
keyid:15:10:3A:D9:A1:5D:7E:41:7C:67:08:77:93:D5:14:CF:23:8A:F2:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3076/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3076/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:99:79:a5:da:94:4c:57:34:a5:96:05:42:13:73:d7:b2:7e:
10:32:ef:e0:93:8e:80:a2:f6:2f:37:28:cf:21:90:1e:f4:71:
78:40:1d:77:01:24:0e:5d:ce:d9:b6:be:46:ea:1e:53:c5:e6:
c8:e5:b7:55:69:32:d2:68:df:ec:65:ca:37:8b:14:61:04:37:
ca:88:45:1b:bd:05:99:2c:84:d4:fa:1b:f2:cf:60:83:06:64:
ce:06:8c:43:d5:d5:bf:c8:4e:ed:27:c3:60:d5:1a:61:04:7c:
75:e6:98:60:f7:2f:46:25:0e:bc:1d:85:dc:12:98:c1:77:eb:
2c:53:2a:03:dc:2c:3d:d7:22:90:6d:91:3e:36:71:94:40:3a:
52:c1:7c:d8:87:fa:31:f9:d4:3c:f6:3b:c4:a2:10:c5:11:d8:
64:51:1d:03:41:6e:64:59:f8:5c:87:f1:a0:fc:8a:d6:ac:60:
04:fc:db:9f:94:0e:31:e7:40:37:24:0e:fe:2e:7d:5f:40:02:
98:f1:66:95:1d:0d:7e:c3:ec:eb:9a:0f:d8:41:c9:3d:57:f6:
95:aa:0f:0c:a2:28:53:bb:bc:dd:90:a1:82:e4:d9:03:3a:0b:
d7:1c:d1:45:17:5b:95:21:15:7a:45:80:41:d8:24:f8:15:c1:
c1:a4:ea:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:29 2025 by rpki-client