Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3143/_i1c0c9OKHJuJ3MPCnRmYEf68K4.mft
File: _i1c0c9OKHJuJ3MPCnRmYEf68K4.mft (raw, json)
Hash identifier: cabQ2WJ/wn/pulwOPLhrzZlyTgb/B+E9fO+gIzT6q/Q=
Subject key identifier: B7:CE:2D:7E:26:04:C0:FF:C0:15:9C:7A:64:A4:87:EB:FA:67:27:12
Authority key identifier: FE:2D:5C:D1:CF:4E:28:72:6E:27:73:0F:0A:74:66:60:47:FA:F0:AE
Certificate issuer: /CN=FE2D5CD1CF4E28726E27730F0A74666047FAF0AE
Certificate serial: 14EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_i1c0c9OKHJuJ3MPCnRmYEf68K4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/_i1c0c9OKHJuJ3MPCnRmYEf68K4.mft
Manifest number: 14EE
Signing time: Fri 21 Mar 2025 00:27:52 +0000
Manifest this update: Fri 21 Mar 2025 00:27:52 +0000
Manifest next update: Fri 21 Mar 2025 06:27:52 +0000
Files and hashes: 1: _i1c0c9OKHJuJ3MPCnRmYEf68K4.crl (hash: hTyPOm3Bl+QcawdINLpQWcyTvPaZ0C8XWlacbCEmdkg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5358 (0x14ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE2D5CD1CF4E28726E27730F0A74666047FAF0AE
Validity
Not Before: Mar 21 00:27:52 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B7CE2D7E2604C0FFC0159C7A64A487EBFA672712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9e:c7:94:47:ec:31:e1:d2:10:1c:2f:b4:af:
f6:7b:17:75:e2:ab:22:52:e1:c8:d0:73:95:f5:5a:
c3:e1:37:fd:69:4e:cc:22:30:97:5b:20:27:fa:74:
4b:52:27:51:35:bb:40:90:fd:18:fd:9f:8b:ea:73:
ec:bb:0d:ee:a9:73:51:e5:2d:16:d8:6c:12:51:a2:
c8:b1:89:a5:23:9b:6a:74:06:0d:44:dc:f8:68:33:
d4:ab:2a:80:ac:0c:ae:33:41:bd:e8:c6:5e:42:c0:
d2:c3:b8:22:59:a4:32:55:d7:78:47:b3:17:ff:68:
72:12:76:4a:27:9b:8b:15:d1:07:cb:a7:01:64:62:
eb:ed:89:b7:cb:d8:bc:45:c5:de:f1:2e:f8:87:5e:
60:98:1b:dc:3e:48:23:26:67:82:71:8c:f9:ff:10:
29:a0:3e:93:f9:13:67:ff:35:99:f9:af:4d:f7:99:
72:4e:c9:e6:f9:eb:ee:1a:3c:87:4d:64:0b:6f:b2:
2a:53:81:2f:00:24:a3:ab:dc:10:a3:26:d0:3b:eb:
c2:84:6b:20:09:4c:4b:c5:76:1e:4d:24:14:f4:59:
94:5c:70:93:f4:3f:44:b5:20:5c:8e:bb:52:7c:6f:
f6:90:65:db:01:04:06:d2:c8:50:b2:e8:a2:cb:a0:
52:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CE:2D:7E:26:04:C0:FF:C0:15:9C:7A:64:A4:87:EB:FA:67:27:12
X509v3 Authority Key Identifier:
keyid:FE:2D:5C:D1:CF:4E:28:72:6E:27:73:0F:0A:74:66:60:47:FA:F0:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/_i1c0c9OKHJuJ3MPCnRmYEf68K4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_i1c0c9OKHJuJ3MPCnRmYEf68K4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/_i1c0c9OKHJuJ3MPCnRmYEf68K4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e8:02:b1:1f:33:bf:1b:fc:cf:0e:77:75:c9:86:29:43:90:
71:0b:d3:3a:49:3e:8d:a3:e3:81:e7:5f:ff:ce:5b:9c:6a:47:
27:c2:10:1a:16:dc:f4:9a:bf:16:07:4d:14:9f:04:42:ed:f1:
65:4c:d0:98:b9:13:a6:4d:be:49:54:79:a0:d9:1b:d9:54:94:
69:6f:92:5d:d2:e9:9d:e4:4d:52:03:19:ea:fa:3e:3d:72:01:
ee:8a:8c:03:54:c7:05:9f:29:77:4c:2f:8b:05:b1:c8:b3:03:
64:f0:90:bf:51:90:34:3d:f4:38:09:82:df:6d:e2:df:e8:56:
84:72:b6:13:f1:f8:c5:3c:f7:07:c9:f6:13:02:05:71:a7:59:
59:df:6d:99:c0:29:ce:06:fa:6a:52:25:59:00:51:b9:0d:3e:
d5:0f:9d:06:90:01:e8:ad:c7:77:50:1b:6a:7d:32:d6:3f:d5:
a9:73:12:5f:c3:2c:5a:4e:8b:7c:ee:9a:3e:fc:81:4b:cc:03:
5c:17:23:5d:04:f5:17:82:91:9d:75:f5:b8:bf:0e:a2:fb:40:
bf:5a:d8:11:37:d2:25:31:f3:b0:7a:47:79:0c:ec:4c:ce:ff:
37:70:18:17:ae:60:63:17:33:04:7b:bc:cc:07:a1:39:67:5d:
a8:fd:9c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:40 2025 by rpki-client