Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft
File: jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft (raw, json)
Hash identifier: qb4V6KDEAqhrlxHkgvcZybUcgGvAnt9MxkolZvDD7D0=
Subject key identifier: CD:E3:96:20:23:2D:34:93:A8:08:C6:61:D8:F0:44:1D:B9:B4:9F:67
Authority key identifier: 8E:8D:A5:9C:81:0F:13:2F:12:06:E4:F7:2C:E6:86:FD:E3:05:4E:6D
Certificate issuer: /CN=8E8DA59C810F132F1206E4F72CE686FDE3054E6D
Certificate serial: 0B3A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jo2lnIEPEy8SBuT3LOaG_eMFTm0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft
Manifest number: 0B3A
Signing time: Sat 29 Mar 2025 10:32:00 +0000
Manifest this update: Sat 29 Mar 2025 10:32:00 +0000
Manifest next update: Sat 29 Mar 2025 16:32:00 +0000
Files and hashes: 1: jo2lnIEPEy8SBuT3LOaG_eMFTm0.crl (hash: X34Y2u5vJ/pn1O6AsluaQ5esstYsoVEZ3+fp93zBRJw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2874 (0xb3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E8DA59C810F132F1206E4F72CE686FDE3054E6D
Validity
Not Before: Mar 29 10:32:00 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CDE39620232D3493A808C661D8F0441DB9B49F67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:c5:81:52:c3:c3:16:cf:5d:20:16:5c:99:
ba:5a:3b:ed:cf:8f:ac:8d:c7:ff:66:e4:12:18:ec:
3c:ab:b3:91:ce:a2:b7:d0:2f:6c:aa:94:d1:25:fe:
ff:2b:20:8e:52:f3:c0:7c:6b:ca:6e:58:0e:5d:85:
d3:ec:77:53:3d:d5:30:b5:b4:f8:30:c2:5b:88:95:
2d:4c:ac:21:8f:9d:bf:39:3a:78:56:33:3c:62:dc:
ad:30:f6:a4:9f:2f:9e:f7:5a:11:33:f4:fe:0f:cd:
f1:7d:d4:a2:b3:49:95:c2:26:91:79:7f:ec:cb:7f:
d2:1d:1f:f9:4a:ff:f1:4d:32:93:ab:3c:a2:a6:92:
00:b6:36:a1:2f:ad:5c:c2:b5:bb:a2:56:be:b2:03:
87:29:36:1b:a1:d1:e4:b4:5d:82:b6:6b:34:ef:b1:
7b:4b:db:b8:a9:8f:e2:c0:7c:91:cb:67:4c:ae:56:
e2:42:6a:cd:8d:e3:e2:97:ae:93:81:f9:3c:9d:77:
32:81:6e:16:76:a3:2f:9e:fc:6f:61:e1:2c:ed:cb:
1b:ae:52:d7:9a:e8:ae:cd:d5:50:91:57:98:0b:2b:
28:4a:2e:63:2b:cd:12:ca:2f:0a:88:c6:e8:c5:72:
4f:55:d4:ae:56:f4:8d:7e:40:f5:e0:89:06:34:fa:
c2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E3:96:20:23:2D:34:93:A8:08:C6:61:D8:F0:44:1D:B9:B4:9F:67
X509v3 Authority Key Identifier:
keyid:8E:8D:A5:9C:81:0F:13:2F:12:06:E4:F7:2C:E6:86:FD:E3:05:4E:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jo2lnIEPEy8SBuT3LOaG_eMFTm0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f7:da:32:5c:bb:b4:bf:3b:6f:07:4e:59:71:61:34:0e:aa:
56:13:86:04:8e:7b:2b:69:4b:5b:7b:90:59:b1:ce:08:ff:17:
7f:01:ec:9b:36:2c:b2:fc:3b:d0:d0:ad:e3:d4:97:b4:6c:21:
f1:d8:e4:b4:65:ed:97:e7:9c:ff:14:7d:65:8b:b9:0c:78:8f:
c0:46:a9:d7:eb:5e:7b:2e:94:48:ec:8b:47:86:5d:44:09:db:
61:75:d7:96:b6:78:b3:46:9b:9a:c0:58:62:42:82:06:25:0d:
c8:56:71:b4:8f:07:70:6b:c5:58:46:cf:c2:9e:29:3f:de:96:
21:ac:9b:f6:1a:52:24:48:0e:63:bc:ea:f1:0b:d7:7b:ae:42:
52:66:f0:96:15:21:65:a2:5f:f1:31:ad:b0:63:62:2b:a1:4a:
a9:ff:53:d4:b2:f6:c1:50:a3:49:ea:89:65:6b:3e:60:6b:1d:
d5:d8:10:91:ce:40:22:ec:8a:b3:6d:0a:9f:b2:6f:ee:ca:e1:
36:2a:bf:e3:55:37:b4:64:14:c9:c4:99:98:76:3e:0b:bc:91:
76:d0:5a:cd:59:6b:9c:23:42:98:4e:e4:ca:84:6b:af:0f:1d:
41:a0:59:17:b7:fd:87:73:5e:be:dd:26:2d:da:07:f0:71:04:
d7:2f:7e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:51:30 2025 by rpki-client