Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3271/5odkXtr0lXS_3oajcUhO5DBK3n4.mft
File: 5odkXtr0lXS_3oajcUhO5DBK3n4.mft (raw, json)
Hash identifier: DnUVz5sakXiITEtHKMWqYVuP+1nGw0Uchay4H5C5iJ0=
Subject key identifier: C4:87:01:43:26:D8:A3:CC:22:13:70:31:93:98:79:39:6F:AD:37:0A
Authority key identifier: E6:87:64:5E:DA:F4:95:74:BF:DE:86:A3:71:48:4E:E4:30:4A:DE:7E
Certificate issuer: /CN=E687645EDAF49574BFDE86A371484EE4304ADE7E
Certificate serial: 0732
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5odkXtr0lXS_3oajcUhO5DBK3n4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/5odkXtr0lXS_3oajcUhO5DBK3n4.mft
Manifest number: 0732
Signing time: Sat 29 Mar 2025 08:29:41 +0000
Manifest this update: Sat 29 Mar 2025 08:29:41 +0000
Manifest next update: Sat 29 Mar 2025 14:29:41 +0000
Files and hashes: 1: 5odkXtr0lXS_3oajcUhO5DBK3n4.crl (hash: f4mKsIIfU27CzccPFMGkifFctRI1yRnH2leQ1XWPQvE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1842 (0x732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E687645EDAF49574BFDE86A371484EE4304ADE7E
Validity
Not Before: Mar 29 08:29:41 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C487014326D8A3CC22137031939879396FAD370A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bd:95:22:d4:0b:59:32:63:74:40:f9:ee:30:
d0:c7:54:11:e5:a7:b8:55:c1:9f:77:7f:1d:5c:8f:
dc:48:ae:b3:31:9b:d3:8c:3f:49:9c:14:09:9a:c2:
26:46:21:6c:e0:a9:5b:54:1f:8d:a0:b8:ba:55:d9:
5a:b0:bd:69:50:25:ef:73:f8:92:53:8e:58:67:48:
27:87:02:72:8d:49:43:02:2d:ce:40:a3:d6:7b:43:
3d:a9:ed:f2:ec:e6:ee:73:cc:fc:89:91:ea:4b:93:
07:4f:3a:e4:66:e7:a3:a1:16:ed:16:c0:c0:b6:32:
e6:b3:d7:88:88:73:92:e0:e9:f7:64:92:d1:dc:7b:
14:80:08:e6:5a:93:9b:f0:f2:03:2b:2a:74:f5:53:
75:5c:c2:0b:f3:8f:f6:5f:40:2a:98:35:c1:63:0e:
07:4b:9f:ab:94:11:e5:d5:bb:a2:74:ae:6b:f2:60:
28:fe:8f:57:aa:57:d9:92:fc:ee:ec:d1:bc:38:7c:
8c:74:7f:24:e7:e5:1e:eb:ab:4c:a9:97:c9:0b:39:
82:1a:14:cb:da:b3:14:09:d6:d1:ac:a8:d1:1a:11:
a3:5b:5a:be:63:f5:b8:2a:27:b4:69:74:1b:36:97:
23:a8:1a:af:d4:0d:8a:85:db:fc:33:39:65:ad:33:
56:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:87:01:43:26:D8:A3:CC:22:13:70:31:93:98:79:39:6F:AD:37:0A
X509v3 Authority Key Identifier:
keyid:E6:87:64:5E:DA:F4:95:74:BF:DE:86:A3:71:48:4E:E4:30:4A:DE:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/5odkXtr0lXS_3oajcUhO5DBK3n4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5odkXtr0lXS_3oajcUhO5DBK3n4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/5odkXtr0lXS_3oajcUhO5DBK3n4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b7:f4:be:a3:db:3d:48:39:46:00:84:2c:52:c1:a7:5c:fb:
9a:ef:b4:45:3d:3b:07:c4:ec:15:64:43:b5:13:4f:0a:14:87:
56:c1:b7:1c:c0:5f:36:4d:37:86:65:d4:c9:37:39:05:e5:7b:
49:63:04:59:73:06:e3:d2:bd:19:92:9d:3e:13:c6:54:6f:9c:
41:9d:05:b8:15:07:a7:fb:8d:1e:34:1a:c1:38:d8:bb:11:aa:
30:b7:9f:da:2f:79:d1:b2:97:dd:4f:10:e6:43:66:63:0c:a9:
01:bc:bc:df:e2:e7:6f:c4:e8:d5:aa:42:55:b2:cb:a7:f2:75:
7c:21:63:3d:3f:91:cc:91:bc:50:6c:a4:b6:6e:8b:47:bb:75:
5a:7c:ec:70:17:cc:29:8f:00:03:83:6a:13:9a:8b:7a:56:f6:
95:ce:51:3e:4e:29:84:9d:3a:63:ff:b9:58:3e:fe:56:b4:00:
79:04:5a:31:40:91:04:78:a3:c5:63:0f:fb:08:f6:ae:7a:04:
e2:5e:f6:3b:57:c0:2a:d9:47:5a:09:19:72:21:fd:f3:97:18:
c8:cf:7e:b9:59:e6:d2:4f:b5:7b:d0:96:60:81:76:20:23:de:
9a:a9:c6:2c:82:1e:3e:f6:fa:cd:83:db:0f:9d:00:0a:a8:8a:
00:76:03:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:29 2025 by rpki-client