Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.mft
File: xMVT2QII7y67l2ljJf_-xcD_FW8.mft (raw, json)
Hash identifier: kR+WNTJ+emPJpHbVteOZAZLs7rPbIsbzjkcWElgNXnc=
Subject key identifier: 8C:B7:3A:32:E9:8E:0A:72:70:9F:7C:20:B4:6C:46:D4:AF:F2:54:30
Authority key identifier: C4:C5:53:D9:02:08:EF:2E:BB:97:69:63:25:FF:FE:C5:C0:FF:15:6F
Certificate issuer: /CN=C4C553D90208EF2EBB97696325FFFEC5C0FF156F
Certificate serial: 0E4C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xMVT2QII7y67l2ljJf_-xcD_FW8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.mft
Manifest number: 0E4C
Signing time: Sat 29 Mar 2025 10:30:42 +0000
Manifest this update: Sat 29 Mar 2025 10:30:42 +0000
Manifest next update: Sat 29 Mar 2025 16:30:42 +0000
Files and hashes: 1: xMVT2QII7y67l2ljJf_-xcD_FW8.crl (hash: xHTIRf+aMmKenRFxbJOsBmSZxiIKoBf5bcAbt33521c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3660 (0xe4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4C553D90208EF2EBB97696325FFFEC5C0FF156F
Validity
Not Before: Mar 29 10:30:42 2025 GMT
Not After : Sep 27 02:44:52 2025 GMT
Subject: CN=8CB73A32E98E0A72709F7C20B46C46D4AFF25430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:95:d3:f0:dc:d7:0c:1c:8c:19:02:4b:2c:
52:1f:78:c1:a0:af:a0:00:6d:29:f9:3d:52:4f:6e:
17:92:ea:c7:d6:43:7e:51:b5:ab:23:f2:93:2d:45:
ab:61:9c:8e:0a:7b:1e:02:1b:47:ad:cf:b2:05:9f:
7f:90:e1:d4:04:cb:34:85:5a:91:84:f8:c2:9e:35:
5e:58:1f:5d:2b:d3:85:f9:f1:aa:47:1d:d5:ea:e0:
5f:f0:97:7f:21:96:dc:54:17:40:0d:5b:3c:1b:cb:
64:f3:56:e4:26:9f:a9:41:f1:35:fb:ad:95:9f:c7:
e8:68:60:2f:1d:83:f7:5f:20:b7:7e:e2:e4:32:14:
fb:58:e2:08:c2:4f:9f:89:71:36:b5:ff:4b:a5:b8:
76:ae:77:14:74:ae:ed:ad:06:ce:c4:4e:67:34:79:
de:9d:6e:5c:10:a9:31:38:00:e7:19:60:97:f9:b7:
7c:d1:a9:46:fc:7f:79:31:9c:07:1a:20:4b:72:c5:
58:f2:56:58:16:d9:00:0d:9a:43:9a:3e:14:40:0c:
18:63:61:86:a5:bb:08:64:58:f7:df:a1:d5:98:ba:
72:27:77:20:e2:c0:8c:c7:1c:85:1c:88:3d:6f:87:
bd:b3:76:76:1b:85:2c:94:f7:f9:4c:84:ce:44:5b:
6d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B7:3A:32:E9:8E:0A:72:70:9F:7C:20:B4:6C:46:D4:AF:F2:54:30
X509v3 Authority Key Identifier:
keyid:C4:C5:53:D9:02:08:EF:2E:BB:97:69:63:25:FF:FE:C5:C0:FF:15:6F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xMVT2QII7y67l2ljJf_-xcD_FW8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:59:37:dc:ba:1e:2b:4c:49:94:1a:6c:ea:d7:1e:37:45:92:
f3:c0:cd:00:e9:26:6e:53:e4:c1:72:08:b1:01:7d:56:8d:b1:
56:60:57:07:d9:55:b0:6a:7b:09:b0:54:63:38:79:3c:10:47:
4d:fd:b5:37:59:b6:83:d8:45:44:49:7d:8c:b2:34:98:49:b7:
24:e2:dd:56:ff:57:3e:e1:be:39:ba:23:f6:5c:3e:36:37:8b:
b0:dc:34:ff:42:db:61:5c:f6:28:c1:b6:40:20:37:9a:55:9c:
8b:74:a2:8c:bc:aa:4e:49:8f:26:8e:88:f7:c6:a9:ee:e1:f8:
b3:40:59:96:b6:24:8c:ff:de:8f:fd:44:a1:b2:4c:03:c8:be:
a5:e7:33:59:c6:86:a9:6b:6b:4b:79:20:9d:8e:5b:bc:fe:3e:
c0:61:d0:d4:3c:45:08:13:25:5b:b7:94:79:48:39:f4:7c:ba:
aa:b0:51:01:58:73:8d:c9:c4:49:43:3c:03:90:c6:21:ef:57:
00:21:71:6c:6c:b4:f4:ef:12:e3:6d:0f:7e:e3:ef:3d:cb:bf:
ed:97:f7:3c:f1:cc:29:f7:2b:ea:60:c8:51:e6:fe:d1:f3:be:
69:8a:19:54:fa:c2:95:6c:df:46:41:31:2d:89:11:9a:2e:01:
89:0f:dd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:34:56 2025 by rpki-client