Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3262/XTqAkIy6pPTbBrykx87XLMcmN7o.mft
File: XTqAkIy6pPTbBrykx87XLMcmN7o.mft (raw, json)
Hash identifier: q5h14Mrv0f0t7bcbyIA1gvAVV6ewew3bFJG/rUkVRAs=
Subject key identifier: F6:FC:D7:55:B5:12:EC:99:04:3E:E1:14:15:FF:4A:BB:E5:63:EB:3E
Authority key identifier: 5D:3A:80:90:8C:BA:A4:F4:DB:06:BC:A4:C7:CE:D7:2C:C7:26:37:BA
Certificate issuer: /CN=5D3A80908CBAA4F4DB06BCA4C7CED72CC72637BA
Certificate serial: 083D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XTqAkIy6pPTbBrykx87XLMcmN7o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/XTqAkIy6pPTbBrykx87XLMcmN7o.mft
Manifest number: 083D
Signing time: Sat 29 Mar 2025 09:27:15 +0000
Manifest this update: Sat 29 Mar 2025 09:27:15 +0000
Manifest next update: Sat 29 Mar 2025 15:27:15 +0000
Files and hashes: 1: XTqAkIy6pPTbBrykx87XLMcmN7o.crl (hash: YLMKb/bCBTDVO75E5yVbIlssbre8fE+OkIPCHq+czOM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2109 (0x83d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D3A80908CBAA4F4DB06BCA4C7CED72CC72637BA
Validity
Not Before: Mar 29 09:27:15 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F6FCD755B512EC99043EE11415FF4ABBE563EB3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:19:da:92:43:10:d7:c4:a1:4f:73:90:c9:
44:db:f6:7a:0a:fb:24:93:95:00:85:95:26:34:24:
47:56:82:4b:a3:30:a8:16:ce:3b:18:f3:48:f2:d9:
20:90:3c:0b:75:a9:8e:cf:10:0c:8f:fc:03:d1:29:
96:63:fa:61:a6:d9:ac:f0:8b:d2:6d:92:ab:51:22:
91:bc:bf:0f:67:e6:74:6b:ee:aa:b4:e8:8a:45:29:
8d:a0:e8:2d:97:0a:19:78:be:c9:40:57:3d:e8:b6:
ea:23:dd:9e:87:54:e9:a3:3c:ff:d3:59:9f:ab:f1:
50:47:97:34:f2:a0:b9:b4:83:b4:e1:0f:22:cb:1c:
2a:1e:f0:93:2e:e1:af:26:b1:32:7a:b9:89:bb:6a:
a6:22:98:d2:f3:bd:3c:2d:ee:0d:d3:5e:2c:1a:b7:
fa:e1:1c:ab:af:58:05:f6:70:fc:9f:bb:b1:73:70:
b7:4c:21:fc:c2:9a:77:ab:86:7d:44:61:90:5c:7c:
86:30:34:ed:93:02:e6:7e:b0:ec:b8:85:4a:47:1f:
77:1b:67:76:b9:f4:59:5f:a9:4d:8a:06:10:14:b6:
19:7b:65:3d:f7:0b:00:85:90:ac:2a:d7:b3:13:14:
28:5c:b8:e1:9b:73:cb:65:dd:5c:95:5e:ad:ae:50:
95:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FC:D7:55:B5:12:EC:99:04:3E:E1:14:15:FF:4A:BB:E5:63:EB:3E
X509v3 Authority Key Identifier:
keyid:5D:3A:80:90:8C:BA:A4:F4:DB:06:BC:A4:C7:CE:D7:2C:C7:26:37:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/XTqAkIy6pPTbBrykx87XLMcmN7o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XTqAkIy6pPTbBrykx87XLMcmN7o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/XTqAkIy6pPTbBrykx87XLMcmN7o.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:78:29:5f:d4:e6:6b:83:dc:f0:88:37:69:0a:57:e1:14:56:
be:8b:6e:e9:7b:56:ff:2d:c7:00:77:89:47:d3:8c:11:ef:01:
8c:40:06:2b:5e:ef:27:8f:2b:1d:40:f3:dd:0a:cb:a1:8e:54:
76:18:2c:bc:11:b7:81:c6:a2:c5:1d:45:41:11:1a:e7:97:b6:
c6:b7:98:ec:58:bc:5d:3c:65:5e:89:2e:30:01:f4:88:40:02:
45:37:f5:fc:52:52:1c:ca:4f:ac:37:a5:d0:17:07:5b:68:84:
e9:66:49:1c:22:e8:09:19:b0:05:79:5c:12:c6:ae:21:1f:fe:
ed:2a:1c:6c:e5:7f:5d:11:82:34:31:97:39:b6:44:0e:ff:6a:
32:85:a6:3d:42:91:18:fc:9c:d4:36:c5:bf:cf:96:25:07:48:
0f:c9:3e:c4:b3:9a:0a:fe:da:bc:70:e8:d5:1f:4f:f0:be:55:
d7:ad:ca:d1:13:64:dd:27:2a:04:4f:b3:15:58:10:fa:71:6b:
8d:a9:23:e7:6b:62:dc:68:5e:01:05:24:48:18:f3:41:fe:c3:
08:f1:43:00:8e:f3:21:47:36:8b:e3:e8:1f:8b:3e:0b:b0:37:
8c:11:70:9e:f0:a1:83:35:d3:1d:d7:39:ab:46:f2:c2:92:b5:
e9:97:0d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:20 2025 by rpki-client