Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3243/VYfZQrIadek6XDTl3374TyZsNnk.mft
File: VYfZQrIadek6XDTl3374TyZsNnk.mft (raw, json)
Hash identifier: srzBWTe+cTV+QFZUnZP6YJ7dvHruQSPUM6y4rJfu1Qg=
Subject key identifier: 76:22:F0:78:F3:A0:62:53:2B:9B:90:39:4C:F0:FB:CD:5C:C4:38:30
Authority key identifier: 55:87:D9:42:B2:1A:75:E9:3A:5C:34:E5:DF:7E:F8:4F:26:6C:36:79
Certificate issuer: /CN=5587D942B21A75E93A5C34E5DF7EF84F266C3679
Certificate serial: 0BA9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VYfZQrIadek6XDTl3374TyZsNnk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3243/VYfZQrIadek6XDTl3374TyZsNnk.mft
Manifest number: 0BA9
Signing time: Thu 05 Jun 2025 16:45:27 +0000
Manifest this update: Thu 05 Jun 2025 16:45:27 +0000
Manifest next update: Thu 05 Jun 2025 22:45:27 +0000
Files and hashes: 1: VYfZQrIadek6XDTl3374TyZsNnk.crl (hash: 2SWYialTjPxEX3VeOyNTR+bkD2qvzcKUlvEdnNMxzXU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2985 (0xba9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5587D942B21A75E93A5C34E5DF7EF84F266C3679
Validity
Not Before: Jun 5 16:45:27 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=7622F078F3A062532B9B90394CF0FBCD5CC43830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:1b:0d:14:29:ca:ce:90:1f:6c:67:08:9b:
89:ae:95:65:70:52:a1:02:c9:dc:85:1f:cd:bb:18:
6d:bc:4e:b5:c9:86:cf:b2:b9:10:6b:60:51:50:55:
4c:46:21:56:a3:10:0e:43:9e:25:20:55:55:50:31:
0f:21:77:a8:53:5c:22:24:31:29:f9:07:3e:f9:6a:
57:58:f9:4b:e9:c0:32:e3:5f:71:3c:ce:88:0a:79:
73:ec:fa:84:85:d2:16:88:0c:d0:ca:45:c6:a7:e2:
f9:8b:38:9a:71:d4:9a:6e:99:94:06:fa:77:80:52:
18:84:4b:04:1c:e0:de:95:30:67:d5:fa:86:a0:dc:
99:8b:ef:11:af:84:61:ab:bd:4b:81:52:fd:2e:83:
f5:46:60:c6:56:9c:cf:18:88:b8:91:10:21:51:05:
70:ba:53:4a:e9:f8:3e:10:ae:36:56:4e:97:ed:de:
15:84:74:2d:11:ad:b4:2a:86:cd:e0:7b:21:10:04:
83:3e:d8:63:6d:8d:02:d2:f9:10:3d:85:bf:a9:ff:
df:6b:56:be:3f:f1:3d:05:23:2d:a6:ba:91:0a:83:
55:dc:53:3b:01:e9:72:45:fb:e7:8a:4c:7f:20:12:
55:af:78:13:ba:f3:dd:5a:5f:38:d5:7f:35:19:8e:
ae:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:22:F0:78:F3:A0:62:53:2B:9B:90:39:4C:F0:FB:CD:5C:C4:38:30
X509v3 Authority Key Identifier:
keyid:55:87:D9:42:B2:1A:75:E9:3A:5C:34:E5:DF:7E:F8:4F:26:6C:36:79
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3243/VYfZQrIadek6XDTl3374TyZsNnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VYfZQrIadek6XDTl3374TyZsNnk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3243/VYfZQrIadek6XDTl3374TyZsNnk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:29:64:3b:63:ed:ce:08:72:fd:61:05:e9:01:bf:c5:48:fd:
c7:7c:3e:50:b5:8f:0c:86:dd:0f:f5:aa:8d:1d:9c:44:46:69:
b1:90:9b:ce:22:a0:dd:0d:98:ea:7f:cf:e9:b0:2a:35:0d:ce:
44:99:25:45:02:7c:8f:8c:b9:ff:58:08:5c:05:3a:ec:7e:69:
71:92:79:cb:d5:3f:1a:8a:2e:bd:20:6c:a4:14:ee:c1:f3:d7:
96:1b:41:d5:a1:a2:76:ed:41:81:43:a7:1f:5a:77:db:94:99:
7b:a7:0b:2f:21:1c:0e:4f:30:25:c4:5b:26:02:00:26:33:f5:
8c:76:aa:8d:e5:7d:7a:f0:a5:51:dd:ab:a7:9c:f0:56:89:42:
de:9a:75:47:fb:05:c9:69:44:ec:ce:81:6f:c5:24:a8:9b:71:
5b:89:2e:5a:3a:30:d4:ef:28:6b:7e:0d:4c:97:1a:2e:31:38:
67:11:46:91:d3:63:f4:43:02:dc:f2:53:48:23:5e:a1:61:0c:
dc:a9:2d:d2:d9:82:82:ae:e7:77:82:59:45:2d:3b:10:ff:c3:
41:ca:7a:6e:92:48:9e:23:08:05:fc:b9:4c:69:4c:02:55:08:
5d:32:e5:1d:dd:3a:be:07:1f:0a:7a:0d:ec:77:02:69:35:90:
92:ee:e7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:17:50 2025 by rpki-client