Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft
File: RHMR0DbVD1TEQW-41oIgp8uWgZk.mft (raw, json)
Hash identifier: 7zP+00or0/L5fkrdL6PE47SZ4pVc4m2S/U0Hz13IJjY=
Subject key identifier: E8:7A:E6:88:BD:C7:A1:0F:DD:5E:9B:37:06:E0:50:B1:F5:AC:AB:CD
Authority key identifier: 44:73:11:D0:36:D5:0F:54:C4:41:6F:B8:D6:82:20:A7:CB:96:81:99
Certificate issuer: /CN=447311D036D50F54C4416FB8D68220A7CB968199
Certificate serial: 0D21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RHMR0DbVD1TEQW-41oIgp8uWgZk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft
Manifest number: 0D21
Signing time: Sat 29 Mar 2025 09:27:18 +0000
Manifest this update: Sat 29 Mar 2025 09:27:18 +0000
Manifest next update: Sat 29 Mar 2025 15:27:18 +0000
Files and hashes: 1: RHMR0DbVD1TEQW-41oIgp8uWgZk.crl (hash: E9JlkjmC6spggKqfsE7xbKBM3VTC3wlWd+Z1KrsSkNQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3361 (0xd21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447311D036D50F54C4416FB8D68220A7CB968199
Validity
Not Before: Mar 29 09:27:18 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E87AE688BDC7A10FDD5E9B3706E050B1F5ACABCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:50:b5:20:11:08:e9:94:a4:b3:1b:10:e3:3b:
8c:9b:f3:3c:66:be:c4:8c:4c:8f:32:3d:75:bf:40:
7b:bf:65:97:b4:a5:fe:86:a0:df:27:cd:91:ff:04:
80:9d:7b:92:1a:d2:53:3d:27:c4:5d:a3:5c:c3:5c:
09:da:07:ba:5a:0d:d5:1e:a4:6c:fd:17:f2:a3:54:
d7:10:0c:f5:45:bd:d6:fd:89:c3:14:99:b0:96:26:
bc:f2:71:99:3c:9a:25:fd:6e:3a:9f:15:5b:01:e4:
f7:2c:71:0b:3b:9c:a5:e1:28:15:63:3d:3f:61:bd:
99:0c:65:f7:ea:a6:2c:32:c6:9d:ab:8c:6c:12:6b:
77:72:c5:92:9e:23:aa:85:b5:09:6f:7d:e2:b6:66:
82:64:e6:c8:d5:71:b8:db:e6:7a:ee:92:72:48:cc:
75:03:dc:86:79:a6:05:67:84:18:21:37:5e:9e:c6:
fa:3b:a9:a0:c7:79:33:d5:c7:75:d6:11:4c:2e:45:
14:55:6e:95:9f:eb:2f:c8:99:ec:42:7b:89:51:79:
b9:4c:8b:46:ff:73:f2:d0:7f:f8:9b:b8:2c:17:2d:
19:62:83:96:ac:c5:0c:ea:5b:04:bd:e1:b1:b2:7c:
6d:82:3a:c6:23:3d:6e:4f:20:11:17:4f:05:e1:7a:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7A:E6:88:BD:C7:A1:0F:DD:5E:9B:37:06:E0:50:B1:F5:AC:AB:CD
X509v3 Authority Key Identifier:
keyid:44:73:11:D0:36:D5:0F:54:C4:41:6F:B8:D6:82:20:A7:CB:96:81:99
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RHMR0DbVD1TEQW-41oIgp8uWgZk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f1:ed:14:3d:6a:21:72:aa:d0:28:22:0b:0a:aa:48:94:85:
5c:4d:a4:05:fa:a3:6f:a7:4a:6f:58:95:0d:3d:f7:21:da:f3:
ae:92:d0:48:24:fd:f7:50:05:45:6f:94:ea:8c:04:9d:8e:b7:
3f:f5:61:95:23:4b:71:af:2f:eb:07:7c:38:4c:8b:e0:25:8f:
df:49:8a:53:ee:96:c6:8e:df:0b:ee:a5:3b:b1:3b:f9:8a:18:
36:2d:77:ea:64:2a:cd:67:f2:79:0f:ba:21:8a:cf:d1:d3:9d:
09:4b:45:19:a2:f2:6a:50:5a:2a:ed:fe:32:8b:a4:7d:64:9a:
2f:c4:c8:c9:78:d3:3f:12:ba:0a:7c:b4:f7:99:4e:ab:8c:34:
4c:72:1f:34:d8:18:28:78:16:be:e5:66:d0:58:74:4e:73:02:
dc:39:42:00:b2:ee:54:40:05:38:bc:ea:13:b7:3b:2e:7a:85:
c0:90:93:27:8f:3b:84:36:1e:7d:30:79:b1:e5:9d:4d:47:55:
bd:69:fd:46:6b:f3:e9:06:a3:73:15:a8:25:ef:91:a8:ef:21:
ba:01:2f:49:6b:39:3b:3e:85:34:92:7b:b1:42:d0:14:7b:95:
71:c1:70:ea:68:0b:3d:0f:37:75:4a:29:40:f5:2f:17:54:3d:
e8:f7:54:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:53 2025 by rpki-client