Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3213/YLPIasbP0CN84cnspVtYB15oi9A.mft
File: YLPIasbP0CN84cnspVtYB15oi9A.mft (raw, json)
Hash identifier: P8WUFQrIPolUR+joDb/b5DAPw227+BouLVnERz8PStc=
Subject key identifier: 5B:2A:6B:40:7B:CA:5C:5D:C8:A5:61:5C:9A:79:75:49:2E:45:E4:3E
Authority key identifier: 60:B3:C8:6A:C6:CF:D0:23:7C:E1:C9:EC:A5:5B:58:07:5E:68:8B:D0
Certificate issuer: /CN=60B3C86AC6CFD0237CE1C9ECA55B58075E688BD0
Certificate serial: 0D7D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLPIasbP0CN84cnspVtYB15oi9A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/YLPIasbP0CN84cnspVtYB15oi9A.mft
Manifest number: 0D7D
Signing time: Fri 21 Mar 2025 00:30:54 +0000
Manifest this update: Fri 21 Mar 2025 00:30:54 +0000
Manifest next update: Fri 21 Mar 2025 06:30:54 +0000
Files and hashes: 1: YLPIasbP0CN84cnspVtYB15oi9A.crl (hash: UenUnCLKWWgQZmZrMh39Xm+A+wht4ifIojx0da5nNy8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3453 (0xd7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60B3C86AC6CFD0237CE1C9ECA55B58075E688BD0
Validity
Not Before: Mar 21 00:30:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5B2A6B407BCA5C5DC8A5615C9A7975492E45E43E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:78:f4:08:03:c9:cf:c2:00:39:bb:8d:be:03:
5f:85:6c:c8:04:b2:b2:42:a8:34:11:d4:d8:4b:73:
3b:ac:e4:77:23:b5:be:c5:50:f1:07:6f:8e:05:9d:
14:b0:db:4e:11:1f:a2:d2:78:31:58:14:ea:c1:b0:
95:77:68:cb:94:c1:0b:dc:f9:e0:aa:21:27:20:c9:
8a:b6:44:2d:ed:40:c6:25:e0:be:23:0b:e6:7a:fd:
da:f8:02:1c:8e:62:8f:62:01:56:ca:74:40:c8:7f:
cf:2d:7a:87:0f:3b:a4:29:58:76:63:a7:3f:98:4b:
b2:00:2d:01:ba:81:a2:0e:95:72:80:81:c8:4d:ee:
de:be:63:5c:5e:5e:fd:ba:62:75:a2:6e:80:86:8a:
bf:29:99:81:f2:80:c1:cf:5b:be:4c:86:0c:5d:b8:
b4:50:5e:8f:0b:84:b9:23:4e:02:17:94:7b:93:7e:
64:4a:68:bd:35:ff:38:97:20:5b:8d:3b:fa:56:08:
52:9b:ad:cc:04:fc:2c:95:5a:f2:f1:25:39:7e:3f:
78:cf:92:25:c3:73:98:db:51:26:28:bb:83:dc:e9:
fa:37:28:42:5f:7f:ff:db:1f:d4:28:5f:3c:a7:8d:
5c:7a:d9:aa:8a:84:b0:7c:53:cb:71:20:3f:a0:60:
a2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2A:6B:40:7B:CA:5C:5D:C8:A5:61:5C:9A:79:75:49:2E:45:E4:3E
X509v3 Authority Key Identifier:
keyid:60:B3:C8:6A:C6:CF:D0:23:7C:E1:C9:EC:A5:5B:58:07:5E:68:8B:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/YLPIasbP0CN84cnspVtYB15oi9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLPIasbP0CN84cnspVtYB15oi9A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/YLPIasbP0CN84cnspVtYB15oi9A.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3e:cb:fa:12:e3:08:79:11:2f:af:88:39:35:02:2c:62:34:
a2:1b:de:36:6d:d4:30:ea:50:78:63:dd:42:60:69:3d:d0:6a:
67:db:88:e2:73:a7:61:94:c7:bf:60:36:b8:de:2e:72:47:3e:
c8:a9:d5:48:0e:a3:57:c7:ff:eb:88:d9:87:35:06:b7:52:ca:
93:4f:00:fe:b5:8c:4d:63:13:96:79:d1:43:63:5c:11:c7:1b:
a1:ab:ff:f3:b2:6b:3d:d9:12:f7:41:6e:12:b6:5d:66:c8:e1:
31:09:53:60:49:d6:f9:92:35:23:ad:33:ad:b0:10:3a:e6:26:
1c:19:0c:dd:44:87:57:db:e5:2e:54:ff:39:cd:1b:73:83:78:
0f:6e:c8:62:d5:36:e4:12:c4:45:4d:b0:33:59:ae:aa:ef:6e:
f5:b4:84:8e:e7:c3:f9:6e:dd:d0:df:0a:f8:d8:fa:4f:e9:08:
e0:4a:10:73:74:ef:21:7b:52:65:f9:dd:20:3d:ca:68:93:f8:
18:ca:83:61:de:20:48:7b:a8:08:e6:59:2e:fc:93:5c:b7:b9:
b4:b1:0f:c4:fe:a1:eb:8d:9d:b1:a3:9c:49:c2:76:6a:a2:cd:
84:32:4e:70:af:25:75:98:2f:18:c3:9e:b4:fa:d2:5a:14:2f:
cd:a7:3d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:50 2025 by rpki-client