Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3259/8eEYZjFmXucC71BAp9J-rFDMXf0.mft
File: 8eEYZjFmXucC71BAp9J-rFDMXf0.mft (raw, json)
Hash identifier: 8ZkZi51UC8XR8JJXIYlMKaskCLksp5U7O7DZ9rn592g=
Subject key identifier: 44:1D:06:ED:58:98:E6:7B:A8:50:97:32:05:8F:AA:61:00:17:59:E6
Authority key identifier: F1:E1:18:66:31:66:5E:E7:02:EF:50:40:A7:D2:7E:AC:50:CC:5D:FD
Certificate issuer: /CN=F1E1186631665EE702EF5040A7D27EAC50CC5DFD
Certificate serial: 0839
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8eEYZjFmXucC71BAp9J-rFDMXf0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/8eEYZjFmXucC71BAp9J-rFDMXf0.mft
Manifest number: 0839
Signing time: Fri 21 Mar 2025 00:27:59 +0000
Manifest this update: Fri 21 Mar 2025 00:27:59 +0000
Manifest next update: Fri 21 Mar 2025 06:27:59 +0000
Files and hashes: 1: 8eEYZjFmXucC71BAp9J-rFDMXf0.crl (hash: gM+9pENIpvK5gKO8dpdHkDZ1JyijV+aljxiMxvdl5hk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2105 (0x839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1E1186631665EE702EF5040A7D27EAC50CC5DFD
Validity
Not Before: Mar 21 00:27:59 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=441D06ED5898E67BA8509732058FAA61001759E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6e:69:f8:34:1d:a0:6b:4c:31:03:bd:7c:9e:
18:b4:a9:5b:c1:53:e1:54:37:f8:f4:5e:7c:b0:10:
8b:7a:a1:a8:d2:f9:31:f1:1b:c6:dd:36:cf:fe:04:
bb:d5:7f:cd:39:84:c9:f8:58:a4:4b:d1:06:45:84:
82:3a:b8:e6:d0:6f:9b:d1:3c:f4:46:ed:8f:5a:90:
6c:5e:c5:20:22:23:a2:e7:4e:fc:3b:1a:da:7b:20:
10:9f:b2:d9:92:c0:8c:49:21:63:43:fc:7a:d3:97:
4c:68:ea:b9:5f:53:eb:71:fd:ce:9c:a1:ac:57:3c:
ad:46:37:74:57:32:a8:38:d7:de:52:05:cf:20:c2:
88:72:cb:4b:3a:85:96:5d:e9:49:fe:d8:eb:4c:19:
b9:0b:68:d5:d9:03:6a:e9:d8:b0:6f:de:7b:7c:77:
db:2c:aa:49:b3:b1:1a:46:e5:e9:de:89:5c:26:4c:
dd:12:cd:f4:22:d5:17:30:88:99:6d:c0:8c:d5:6d:
88:c0:1a:21:f2:b5:24:29:b6:4b:8e:92:0d:6e:91:
98:0e:40:42:78:da:77:02:5f:a8:93:8c:31:71:7b:
1a:3a:fb:df:f6:42:ba:95:66:9c:2c:82:65:d5:8c:
a8:2a:92:35:d7:f2:2d:a9:50:a2:30:1a:90:88:a9:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1D:06:ED:58:98:E6:7B:A8:50:97:32:05:8F:AA:61:00:17:59:E6
X509v3 Authority Key Identifier:
keyid:F1:E1:18:66:31:66:5E:E7:02:EF:50:40:A7:D2:7E:AC:50:CC:5D:FD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/8eEYZjFmXucC71BAp9J-rFDMXf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8eEYZjFmXucC71BAp9J-rFDMXf0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/8eEYZjFmXucC71BAp9J-rFDMXf0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:c6:d3:65:97:2e:e5:0e:28:bc:4f:e7:53:51:1a:23:32:c4:
5d:e8:9e:73:96:cb:2f:12:b8:9e:bb:62:8c:3d:b1:63:57:5e:
93:61:7a:52:e8:28:32:ba:4b:90:27:e0:e9:63:e0:6e:73:0e:
f5:38:e9:33:aa:99:8c:c6:68:01:a8:2c:f2:1f:4c:16:ef:dc:
72:dc:48:ff:1a:4d:cc:7a:4a:69:de:f2:a6:e2:1f:dc:54:01:
f0:5a:79:90:62:a0:4a:8e:42:9e:18:eb:79:bb:59:b7:6e:ab:
0d:1c:ac:18:1b:dd:4d:42:d5:5e:76:7e:83:b5:14:a8:61:85:
fa:cc:d4:77:f8:89:25:5d:0e:4c:7e:d9:18:c1:95:8e:73:63:
8c:05:63:57:ba:a7:c7:0f:d0:bb:f7:58:10:3d:e2:1e:6f:1a:
1b:c5:6b:27:d5:23:b7:23:d4:3f:59:5c:04:8a:c8:a8:b2:0e:
ba:63:05:f0:19:82:2a:8e:8e:88:f7:74:87:02:12:2c:01:b1:
2c:3c:0d:5f:04:cb:64:0d:6c:83:b1:d7:1c:40:d0:41:b2:b4:
0e:b7:97:9f:f2:02:89:4d:3b:20:0e:c2:21:f2:b4:89:b9:80:
8f:1a:ed:d7:e0:3a:04:31:a2:b0:1e:46:6e:16:5f:dc:23:c8:
31:39:84:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:11:13 2025 by rpki-client