Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft
File: Nd6o5bEoW5KyERchGKNBqy3bdrU.mft (raw, json)
Hash identifier: jFTTTjYTNY6eBeh6AnxznV29/w3MUiYNVJ1gAB/WXUs=
Subject key identifier: 5B:F9:11:87:43:5E:01:A8:42:77:63:55:A2:D3:F3:D0:C6:B7:54:47
Authority key identifier: 35:DE:A8:E5:B1:28:5B:92:B2:11:17:21:18:A3:41:AB:2D:DB:76:B5
Certificate issuer: /CN=35DEA8E5B1285B92B211172118A341AB2DDB76B5
Certificate serial: 0BFD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft
Manifest number: 0BFD
Signing time: Fri 04 Apr 2025 19:10:30 +0000
Manifest this update: Fri 04 Apr 2025 19:10:30 +0000
Manifest next update: Sat 05 Apr 2025 01:10:30 +0000
Files and hashes: 1: Nd6o5bEoW5KyERchGKNBqy3bdrU.crl (hash: iOcjDEKX1k8jviHlnenwn/0Zgb+czDYZU9xqZ3+lV1M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3069 (0xbfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35DEA8E5B1285B92B211172118A341AB2DDB76B5
Validity
Not Before: Apr 4 19:10:30 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5BF91187435E01A842776355A2D3F3D0C6B75447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d6:4a:2e:e3:69:8c:36:a2:0f:c6:e1:ab:fa:
a2:b8:c7:c6:f4:4f:0b:69:37:bd:7d:e9:b1:d2:d7:
a3:24:85:7c:76:27:64:4d:ed:80:85:14:bb:3e:13:
65:f5:c8:27:33:60:41:5b:7d:61:d2:af:4a:c4:5d:
f4:20:d5:b9:95:1d:43:95:d1:fd:ba:e7:ac:b9:6d:
c7:8a:31:7c:c2:5a:43:2a:f4:7f:da:3a:06:61:59:
60:45:5f:ca:e3:dd:ac:ce:be:b3:ed:35:c9:6f:89:
0c:e8:2a:a0:99:f3:54:27:86:81:eb:1b:88:e5:55:
6e:b7:ef:a2:91:aa:4e:87:b5:be:43:4e:36:dc:d8:
aa:30:14:03:f4:1e:2b:ae:1c:1a:26:0c:5d:39:e6:
68:eb:10:a7:ea:b1:6f:b0:b3:e9:f9:89:a2:8e:68:
0a:20:19:9a:91:27:df:a5:27:05:f8:79:1a:16:80:
a1:0d:16:dc:2b:9c:ac:0f:8a:6b:cc:b3:3f:8d:00:
8e:5e:3f:3e:f5:77:80:e4:fc:9e:57:18:23:25:bf:
4b:c0:f7:23:72:90:43:d5:75:78:21:d0:87:e4:b2:
b2:fb:d8:27:55:99:82:8e:68:53:18:f8:1a:88:95:
97:73:d4:5c:33:89:56:99:70:1a:bf:13:72:db:07:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F9:11:87:43:5E:01:A8:42:77:63:55:A2:D3:F3:D0:C6:B7:54:47
X509v3 Authority Key Identifier:
keyid:35:DE:A8:E5:B1:28:5B:92:B2:11:17:21:18:A3:41:AB:2D:DB:76:B5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:e7:ca:4e:a7:3e:87:76:d4:a0:1d:d4:28:7f:f9:1b:d1:60:
57:43:8a:84:07:bd:de:dd:8a:1a:46:2b:bb:f1:1d:b8:78:08:
fc:a4:7d:e1:c8:31:e1:c9:f1:f0:f7:1f:6d:a0:e1:24:25:cb:
64:e6:d2:41:12:e5:c6:a1:7f:89:65:74:bf:c2:40:c7:e2:35:
58:8d:0f:70:c2:e7:c2:65:8d:88:25:a2:0e:86:93:94:85:e6:
33:ee:1c:5c:a2:2e:29:83:bf:c2:d8:2d:82:37:ab:c2:44:2b:
54:ca:23:c8:5e:28:96:8d:18:a9:db:b5:03:69:6f:af:e9:0e:
06:12:6f:9f:ee:4e:83:d0:c8:b7:9f:f8:05:ab:ee:1a:eb:85:
83:7a:1a:df:50:ab:96:71:f1:e9:68:2e:3f:40:5f:83:90:0f:
ab:3e:92:ce:b2:b2:ee:fc:76:4d:7d:d7:2a:f0:9d:a2:81:6e:
13:21:0b:84:27:79:bb:c8:2d:66:d9:9f:0a:05:94:57:1c:2a:
4c:e8:28:9f:ee:8b:7f:e7:0a:33:95:f0:b8:c6:bf:d6:49:9f:
84:3f:49:c4:8d:2b:a2:a4:a7:21:e3:ff:78:64:3c:7d:89:c6:
51:c1:2f:04:5e:9d:3c:69:12:71:8a:df:fc:0d:cc:92:1e:ab:
ea:2c:99:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:29 2025 by rpki-client