Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3263/jKUFZzApbEGdb3sKeKTpEenwOXY.mft
File: jKUFZzApbEGdb3sKeKTpEenwOXY.mft (raw, json)
Hash identifier: Krj9GfQdInXWM+8ffaHT5ZLkq0NBhXqYaogaoEZtuXo=
Subject key identifier: 53:88:12:A4:94:9E:01:F7:D5:AA:7F:6B:68:BC:C7:FF:E2:06:8F:97
Authority key identifier: 8C:A5:05:67:30:29:6C:41:9D:6F:7B:0A:78:A4:E9:11:E9:F0:39:76
Certificate issuer: /CN=8CA5056730296C419D6F7B0A78A4E911E9F03976
Certificate serial: 07FF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jKUFZzApbEGdb3sKeKTpEenwOXY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/jKUFZzApbEGdb3sKeKTpEenwOXY.mft
Manifest number: 07FF
Signing time: Fri 21 Mar 2025 00:28:09 +0000
Manifest this update: Fri 21 Mar 2025 00:28:09 +0000
Manifest next update: Fri 21 Mar 2025 06:28:09 +0000
Files and hashes: 1: jKUFZzApbEGdb3sKeKTpEenwOXY.crl (hash: ifL/VCxoUb4UOiej8TmlmPwmr1xQrlskZJ4SzQbCmaA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2047 (0x7ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CA5056730296C419D6F7B0A78A4E911E9F03976
Validity
Not Before: Mar 21 00:28:09 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=538812A4949E01F7D5AA7F6B68BCC7FFE2068F97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:b9:e2:92:e1:2f:2a:32:f0:dd:c6:89:d8:
91:11:c7:e2:d3:50:b0:c3:30:ce:8b:48:ce:1f:36:
6c:19:5d:85:a8:8a:c7:e6:1e:ee:26:04:a0:e4:1e:
62:d8:07:02:1c:53:e0:9a:ad:01:93:06:94:88:c9:
58:e6:b7:1b:5d:b8:aa:3a:1e:e4:03:7d:c7:cf:fd:
3b:30:bc:d6:ef:95:68:d6:e4:13:cb:8e:c7:1b:08:
dd:88:b5:13:11:5a:f0:6e:3d:b8:70:43:cf:ec:1c:
94:f3:25:ba:f6:92:f9:dc:dd:09:17:78:e2:f3:67:
12:94:e3:80:cf:63:57:5c:c1:87:4f:cf:ef:67:ea:
75:15:85:17:79:05:40:f8:24:f1:f5:f3:a0:5d:25:
0d:88:99:0c:24:41:01:15:9f:8f:ca:ef:f5:5a:b8:
b9:ef:d9:70:d5:27:67:b4:aa:a7:f8:29:59:49:fb:
c2:9e:31:b7:10:cc:c3:8c:8b:80:b5:62:09:2d:32:
e7:7a:ec:b4:b9:32:7e:7a:2d:85:6d:e3:7f:8a:54:
cd:b4:ea:72:28:3a:3f:ec:b1:11:04:73:36:b3:83:
53:5e:fe:e9:f6:53:eb:83:06:7b:01:d0:2b:cc:8f:
8d:03:23:8d:f4:33:19:52:f4:61:a1:fb:48:83:93:
5d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:88:12:A4:94:9E:01:F7:D5:AA:7F:6B:68:BC:C7:FF:E2:06:8F:97
X509v3 Authority Key Identifier:
keyid:8C:A5:05:67:30:29:6C:41:9D:6F:7B:0A:78:A4:E9:11:E9:F0:39:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/jKUFZzApbEGdb3sKeKTpEenwOXY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jKUFZzApbEGdb3sKeKTpEenwOXY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/jKUFZzApbEGdb3sKeKTpEenwOXY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:7c:46:9f:23:5f:a7:09:a0:0d:41:0e:58:d3:66:9e:bd:d6:
d9:08:3a:ed:69:a5:bc:5f:4d:6e:6f:bc:6e:0c:9b:b0:ff:be:
eb:9d:8e:9f:c1:01:a2:19:d3:9f:0e:b6:90:7d:01:3f:48:8d:
82:fb:6b:a1:3b:e1:2b:7b:a8:8e:dc:4b:36:48:0b:8c:f4:56:
fb:5f:a1:a6:df:9f:f0:9d:dc:d4:1d:ba:9e:b6:3c:d2:8c:72:
b9:e9:40:bb:c8:43:17:43:ec:5d:01:44:26:ec:ea:d7:89:0b:
1f:86:13:af:f9:49:74:c4:2e:99:2a:ee:a5:e1:12:7e:8c:e0:
96:f7:c4:4d:e3:ef:53:b3:ce:9e:55:6c:85:6f:3e:1e:86:8c:
56:ab:b0:67:30:ff:08:91:e9:97:7e:51:77:e3:7b:5e:3b:93:
9f:69:77:f5:80:39:ee:1d:21:71:11:a0:9b:b5:44:18:16:55:
11:23:ea:99:58:76:63:bd:51:86:aa:49:73:5c:a7:cc:62:2a:
87:4b:ba:fb:6e:e5:b4:03:b3:94:b3:53:96:e8:9c:32:2b:46:
d9:11:18:ff:9a:87:e2:f0:50:e4:98:eb:1a:68:7a:94:99:09:
d7:d5:4a:b0:68:08:30:e7:c4:d8:ff:27:6c:b2:f2:3d:ba:c1:
47:70:2d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:55 2025 by rpki-client