Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft
File: DqwT6V7p4IXk3eST4sWV7hZQy5E.mft (raw, json)
Hash identifier: OiLAQgSZUY1cOz/AQznNDVL6tZW0uffqT9h8ASzHpjM=
Subject key identifier: C1:30:BB:42:76:1C:DC:64:A0:C4:FD:8C:24:85:7C:4C:71:BC:9E:FA
Authority key identifier: 0E:AC:13:E9:5E:E9:E0:85:E4:DD:E4:93:E2:C5:95:EE:16:50:CB:91
Certificate issuer: /CN=0EAC13E95EE9E085E4DDE493E2C595EE1650CB91
Certificate serial: 076D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DqwT6V7p4IXk3eST4sWV7hZQy5E.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft
Manifest number: 076D
Signing time: Sat 29 Mar 2025 10:29:59 +0000
Manifest this update: Sat 29 Mar 2025 10:29:58 +0000
Manifest next update: Sat 29 Mar 2025 16:29:58 +0000
Files and hashes: 1: DqwT6V7p4IXk3eST4sWV7hZQy5E.crl (hash: OxPGBdEg3iDQO6B3J9oZ9dE4DkPCnuieBJ2QnPT1670=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1901 (0x76d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EAC13E95EE9E085E4DDE493E2C595EE1650CB91
Validity
Not Before: Mar 29 10:29:58 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C130BB42761CDC64A0C4FD8C24857C4C71BC9EFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:65:ae:fa:dc:ed:29:cc:7f:ec:48:ba:c1:
9d:87:25:fe:64:4b:9c:6c:2a:24:71:70:03:66:73:
7c:55:a3:90:51:c8:1f:fd:d8:a0:24:ab:d1:6c:30:
a3:ab:ca:97:29:6b:2c:87:0b:ef:8c:13:16:78:86:
05:6c:15:00:bf:76:66:55:9d:e9:6a:a9:c4:ce:73:
b3:8a:23:7b:5c:bf:6d:33:d8:86:94:09:27:ab:0b:
23:46:a7:f4:a6:ab:c1:9c:40:1c:bc:e0:21:ec:c4:
c7:3b:97:aa:98:a3:8d:c1:e0:ba:6a:5a:63:41:7b:
36:75:55:d4:4e:5a:bb:2f:a5:c4:f2:c0:82:ad:dc:
eb:9f:cc:37:c8:e4:35:3f:21:f2:c9:7d:d0:17:6f:
fa:90:b4:c8:e1:44:ca:f3:2e:81:50:a4:38:41:ef:
7b:fd:c1:d9:35:86:ee:92:bc:0a:ca:8c:51:b4:17:
af:58:74:38:84:04:93:c8:82:e5:b6:51:a8:48:a9:
75:ed:af:75:02:37:20:62:4e:e7:95:2c:fa:62:4e:
53:ee:cc:ad:8a:d9:27:6e:64:fb:04:0c:8f:b2:fa:
24:c5:b0:91:c2:83:21:79:98:c5:3f:b5:87:43:96:
ec:95:18:f5:40:8a:43:51:02:fb:f0:b4:0e:88:59:
75:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:30:BB:42:76:1C:DC:64:A0:C4:FD:8C:24:85:7C:4C:71:BC:9E:FA
X509v3 Authority Key Identifier:
keyid:0E:AC:13:E9:5E:E9:E0:85:E4:DD:E4:93:E2:C5:95:EE:16:50:CB:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DqwT6V7p4IXk3eST4sWV7hZQy5E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:8f:37:67:53:f6:1d:6e:58:f9:f0:c2:c8:84:cc:9c:d5:7b:
4c:97:d5:09:11:c8:8c:02:5e:95:3d:fe:cd:46:7c:d8:d7:c9:
da:77:79:3f:c1:6f:8d:33:e9:46:ee:90:b5:22:19:c9:d7:41:
84:cd:b7:37:df:05:5a:97:61:9a:a6:94:2e:36:e7:e8:5b:e3:
05:b5:d5:50:02:dd:51:eb:20:8e:34:1d:4b:2d:c2:7b:04:f8:
16:51:c4:bb:69:05:21:49:bd:56:b0:9a:31:9a:7d:25:b4:c8:
66:16:4f:3e:b0:8c:9d:8e:40:74:bf:c3:ff:47:2c:a4:7d:c1:
f8:2e:78:b0:5f:e8:82:c3:52:4d:b1:bc:e9:0b:be:50:c0:78:
d6:59:ed:68:87:36:3e:e2:27:4b:06:b9:f6:a2:3f:62:1a:55:
ca:54:41:c7:c6:d3:d4:e3:12:11:27:88:04:18:ca:fe:22:22:
2e:75:16:cd:c4:3e:e5:a5:3a:37:15:f4:b4:d2:c7:ba:d3:0a:
99:5f:2d:76:ec:fe:7e:8f:9e:14:d5:a9:cf:36:66:35:a6:91:
d1:c9:12:f2:83:c2:10:fb:a6:9f:11:16:5b:a6:1e:f3:cf:da:
a5:6a:42:e6:a4:33:e9:d1:86:ae:27:36:a4:c3:c0:68:c0:61:
aa:25:b9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:48 2025 by rpki-client