Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3239/K_-tbb6GgEycV_BdDDuGxFNO9xg.mft
File: K_-tbb6GgEycV_BdDDuGxFNO9xg.mft (raw, json)
Hash identifier: WeFztuMYmlKaijQhvHrPiNC0b6Qsg6vwqusE/a4FGPw=
Subject key identifier: 17:8D:4B:51:69:CD:A2:4E:9A:65:E8:CA:42:C3:9D:0F:BD:F7:1C:62
Authority key identifier: 2B:FF:AD:6D:BE:86:80:4C:9C:57:F0:5D:0C:3B:86:C4:53:4E:F7:18
Certificate issuer: /CN=2BFFAD6DBE86804C9C57F05D0C3B86C4534EF718
Certificate serial: 0B19
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K_-tbb6GgEycV_BdDDuGxFNO9xg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3239/K_-tbb6GgEycV_BdDDuGxFNO9xg.mft
Manifest number: 0B19
Signing time: Sat 29 Mar 2025 10:30:17 +0000
Manifest this update: Sat 29 Mar 2025 10:30:17 +0000
Manifest next update: Sat 29 Mar 2025 16:30:17 +0000
Files and hashes: 1: K_-tbb6GgEycV_BdDDuGxFNO9xg.crl (hash: f+8WFUxYXTwR6d/zcc0svX93PXbqFECk/A2RS3fbnBE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2841 (0xb19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BFFAD6DBE86804C9C57F05D0C3B86C4534EF718
Validity
Not Before: Mar 29 10:30:17 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=178D4B5169CDA24E9A65E8CA42C39D0FBDF71C62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3b:93:54:95:aa:c3:53:d8:6c:da:56:3d:b5:
35:8c:0e:5c:19:d3:2b:cd:70:77:75:b0:a3:69:d8:
30:6d:23:94:3d:85:aa:3e:2e:9f:6e:a5:ee:4a:6d:
66:dd:46:42:ce:45:38:e7:f5:e6:2d:19:43:8b:cf:
4e:20:96:5c:4c:a9:48:59:6f:5e:c3:c3:c7:fe:14:
3d:27:bc:1b:6d:ad:28:6c:af:c5:19:8e:ac:44:27:
93:52:76:e5:58:16:b9:b3:1e:a3:ea:cf:1d:a3:ad:
72:b2:fe:ab:30:20:0a:4e:61:b0:a2:b9:1d:d8:9e:
55:bd:25:2a:04:74:81:4f:fd:8c:cc:22:44:4d:2e:
da:88:b8:38:65:0a:03:7a:7e:c7:1f:b1:9a:be:b7:
52:85:b4:ed:6a:78:93:d7:a5:8e:f8:9c:85:c5:7a:
77:48:2a:6e:b9:97:05:ff:29:92:28:90:f1:80:0b:
d8:7c:bc:db:09:40:d1:ed:8e:1c:01:c4:54:7e:08:
4a:b9:21:73:73:3f:83:0b:f0:ee:3a:43:eb:69:67:
b4:c2:e7:a4:35:44:96:5a:66:bc:cc:b2:fe:a2:c8:
8d:58:70:a6:20:e3:ff:9e:b7:bb:ff:9e:f3:18:bf:
c8:da:56:a4:07:87:cc:fc:06:a3:a4:e5:1c:a7:eb:
21:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8D:4B:51:69:CD:A2:4E:9A:65:E8:CA:42:C3:9D:0F:BD:F7:1C:62
X509v3 Authority Key Identifier:
keyid:2B:FF:AD:6D:BE:86:80:4C:9C:57:F0:5D:0C:3B:86:C4:53:4E:F7:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3239/K_-tbb6GgEycV_BdDDuGxFNO9xg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K_-tbb6GgEycV_BdDDuGxFNO9xg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3239/K_-tbb6GgEycV_BdDDuGxFNO9xg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:1d:03:c8:c7:a3:3d:d1:1b:1e:0a:3e:a6:19:32:41:a7:c4:
98:f0:d1:0b:4f:d5:49:65:19:55:e7:7f:fa:54:f4:fe:e7:a9:
3f:8e:66:0c:95:bb:bd:aa:99:0c:ee:82:c8:6a:fd:f5:57:ac:
c3:47:95:64:8b:19:a3:89:29:85:b4:9b:d2:5f:3c:19:d7:d3:
ef:17:e6:e0:b8:43:1d:13:bb:a8:8d:a4:af:1d:15:62:b2:f2:
1c:b3:b8:4c:a9:ed:92:11:35:78:de:5f:64:58:7a:ed:cb:dc:
d2:7c:50:4e:93:05:1e:e7:e9:62:ca:fd:30:f4:2a:48:83:c5:
00:4c:f3:b8:26:0f:76:fe:81:b4:13:e8:5a:8f:d4:a6:64:e4:
b8:14:e3:31:6d:86:7c:25:3f:df:11:fb:2c:76:b8:be:9d:34:
d5:45:4e:2d:6f:ed:d3:a2:06:ab:99:2e:16:74:bf:45:8f:eb:
ba:0e:47:15:33:09:57:16:22:4e:30:95:53:46:0f:bd:e6:67:
76:51:87:1b:f0:c7:77:e4:52:76:bb:96:bf:c7:43:2c:c9:7a:
32:30:fa:f3:b9:61:09:d4:8d:17:fd:d4:63:02:50:2e:86:f4:
99:aa:38:cb:6c:2a:95:ff:c2:e3:91:33:84:40:5e:3e:bd:06:
65:38:f9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:13 2025 by rpki-client