Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3243/VYfZQrIadek6XDTl3374TyZsNnk.mft
File: VYfZQrIadek6XDTl3374TyZsNnk.mft (raw, json)
Hash identifier: kZNGrUJkZRp5F0hZKrJjH81wurzbeGpynvBNS3cWgkE=
Subject key identifier: 76:22:F0:78:F3:A0:62:53:2B:9B:90:39:4C:F0:FB:CD:5C:C4:38:30
Authority key identifier: 55:87:D9:42:B2:1A:75:E9:3A:5C:34:E5:DF:7E:F8:4F:26:6C:36:79
Certificate issuer: /CN=5587D942B21A75E93A5C34E5DF7EF84F266C3679
Certificate serial: 0A58
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VYfZQrIadek6XDTl3374TyZsNnk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3243/VYfZQrIadek6XDTl3374TyZsNnk.mft
Manifest number: 0A58
Signing time: Sat 29 Mar 2025 08:30:44 +0000
Manifest this update: Sat 29 Mar 2025 08:30:44 +0000
Manifest next update: Sat 29 Mar 2025 14:30:44 +0000
Files and hashes: 1: VYfZQrIadek6XDTl3374TyZsNnk.crl (hash: yH0N+ZfeIdxjxL7jIh40s4E959EaZA8YFtSoGBg3M6Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2648 (0xa58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5587D942B21A75E93A5C34E5DF7EF84F266C3679
Validity
Not Before: Mar 29 08:30:44 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7622F078F3A062532B9B90394CF0FBCD5CC43830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:1b:0d:14:29:ca:ce:90:1f:6c:67:08:9b:
89:ae:95:65:70:52:a1:02:c9:dc:85:1f:cd:bb:18:
6d:bc:4e:b5:c9:86:cf:b2:b9:10:6b:60:51:50:55:
4c:46:21:56:a3:10:0e:43:9e:25:20:55:55:50:31:
0f:21:77:a8:53:5c:22:24:31:29:f9:07:3e:f9:6a:
57:58:f9:4b:e9:c0:32:e3:5f:71:3c:ce:88:0a:79:
73:ec:fa:84:85:d2:16:88:0c:d0:ca:45:c6:a7:e2:
f9:8b:38:9a:71:d4:9a:6e:99:94:06:fa:77:80:52:
18:84:4b:04:1c:e0:de:95:30:67:d5:fa:86:a0:dc:
99:8b:ef:11:af:84:61:ab:bd:4b:81:52:fd:2e:83:
f5:46:60:c6:56:9c:cf:18:88:b8:91:10:21:51:05:
70:ba:53:4a:e9:f8:3e:10:ae:36:56:4e:97:ed:de:
15:84:74:2d:11:ad:b4:2a:86:cd:e0:7b:21:10:04:
83:3e:d8:63:6d:8d:02:d2:f9:10:3d:85:bf:a9:ff:
df:6b:56:be:3f:f1:3d:05:23:2d:a6:ba:91:0a:83:
55:dc:53:3b:01:e9:72:45:fb:e7:8a:4c:7f:20:12:
55:af:78:13:ba:f3:dd:5a:5f:38:d5:7f:35:19:8e:
ae:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:22:F0:78:F3:A0:62:53:2B:9B:90:39:4C:F0:FB:CD:5C:C4:38:30
X509v3 Authority Key Identifier:
keyid:55:87:D9:42:B2:1A:75:E9:3A:5C:34:E5:DF:7E:F8:4F:26:6C:36:79
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3243/VYfZQrIadek6XDTl3374TyZsNnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VYfZQrIadek6XDTl3374TyZsNnk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3243/VYfZQrIadek6XDTl3374TyZsNnk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a7:0d:64:b3:47:15:60:c1:7c:fe:02:a7:f4:51:24:24:a5:
8d:bc:44:54:5b:94:b4:91:d2:6d:28:b8:ed:5d:c4:2a:25:64:
00:10:7e:46:31:a5:7b:69:40:11:fb:3f:43:69:a1:5a:0d:03:
c1:48:e9:de:1a:12:ea:03:8a:33:60:26:cb:61:c8:57:59:65:
de:ed:78:74:85:39:ca:3a:66:9a:de:ba:aa:98:11:39:52:61:
3b:3a:9d:a1:89:88:64:37:0c:0e:01:5c:02:98:56:06:22:d2:
c5:1a:d6:c6:99:b4:bc:64:11:40:76:41:68:d2:b0:71:06:7c:
7f:14:42:0f:f2:ed:e6:6f:73:73:2c:ed:bc:b6:bd:27:07:50:
a1:9e:31:71:84:a9:4c:6b:2c:a4:53:e1:60:d8:26:c6:46:09:
4c:9f:ed:72:eb:19:4a:e2:7f:61:c1:5b:1a:e4:17:98:df:b1:
f6:00:94:ec:28:a3:81:a7:ee:e1:7d:c8:da:9c:6a:52:af:e8:
a5:84:24:9d:2a:55:b6:02:98:2d:b3:f2:c9:34:76:42:b5:0e:
a6:3d:20:0c:8d:43:c0:6e:18:4e:64:e4:02:f8:81:63:81:a8:
eb:7b:77:96:09:c5:11:d8:31:5a:56:5d:6a:ba:36:ec:f4:7b:
0a:d6:55:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:33 2025 by rpki-client