Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft
File: U8kE5DbkCUsscVNNs_Vzviozvjk.mft (raw, json)
Hash identifier: BHeDwBCJQ8fsg2yJ6Y4+go0DMa86G23lUl/vJa0E4oM=
Subject key identifier: CC:48:57:86:D4:AD:BC:DB:FD:16:72:90:5D:D4:3C:F8:45:F2:44:40
Authority key identifier: 53:C9:04:E4:36:E4:09:4B:2C:71:53:4D:B3:F5:73:BE:2A:33:BE:39
Certificate issuer: /CN=53C904E436E4094B2C71534DB3F573BE2A33BE39
Certificate serial: 068B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U8kE5DbkCUsscVNNs_Vzviozvjk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft
Manifest number: 068B
Signing time: Sat 29 Mar 2025 10:28:16 +0000
Manifest this update: Sat 29 Mar 2025 10:28:16 +0000
Manifest next update: Sat 29 Mar 2025 16:28:16 +0000
Files and hashes: 1: U8kE5DbkCUsscVNNs_Vzviozvjk.crl (hash: g/GBSwp2uEWoGxDFi4YAZLLp+E6R9YVO5lgiyj0BYUQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1675 (0x68b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53C904E436E4094B2C71534DB3F573BE2A33BE39
Validity
Not Before: Mar 29 10:28:16 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CC485786D4ADBCDBFD1672905DD43CF845F24440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5a:58:66:c3:97:42:5c:cf:b5:79:44:d3:e4:
72:f0:d7:db:1b:f8:1b:67:1c:16:1b:5f:8c:e6:2e:
5f:ba:fc:6a:2a:74:3c:8a:c5:54:cd:c8:6a:08:3d:
16:e0:6d:dd:d0:6c:66:0f:60:b6:dc:f1:47:69:c0:
6e:15:28:f5:76:ee:8c:43:00:fd:97:f9:8b:a1:ce:
e6:06:8d:cc:23:7f:f2:4c:33:0a:92:ec:57:52:5f:
f0:51:ea:3b:4c:bb:9e:fb:27:0a:47:1e:91:31:df:
9f:e4:6e:a8:58:6b:ef:9c:7d:cb:71:ea:4e:5b:e4:
aa:e2:7f:5f:da:d5:f6:64:71:80:44:b5:30:ef:2b:
9e:5b:bd:37:4b:5e:88:a7:91:98:f7:d5:a0:37:ef:
42:da:ca:cd:0d:2c:01:7c:9e:93:3b:e0:ab:27:de:
14:76:f2:bc:67:62:5b:12:a2:c7:d4:d4:26:b6:dc:
bf:64:c8:0a:c3:14:07:39:82:fb:45:5b:9b:8b:d6:
b3:9a:22:e2:03:d2:3c:19:19:70:1a:3e:7c:4a:12:
56:a1:0e:b9:53:5a:98:6c:eb:43:3a:c3:ef:b0:34:
22:84:aa:47:6f:a4:0b:18:53:15:a7:73:a3:17:57:
d3:79:45:b7:28:98:6f:6e:cf:3f:86:bd:e7:39:f0:
e6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:48:57:86:D4:AD:BC:DB:FD:16:72:90:5D:D4:3C:F8:45:F2:44:40
X509v3 Authority Key Identifier:
keyid:53:C9:04:E4:36:E4:09:4B:2C:71:53:4D:B3:F5:73:BE:2A:33:BE:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U8kE5DbkCUsscVNNs_Vzviozvjk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:13:ae:fc:0a:fd:e8:a9:a3:63:bf:fa:28:44:04:a0:55:d7:
55:dd:0a:0a:9e:a5:6f:d6:3c:42:a5:9c:c6:f7:67:00:60:9d:
b4:63:dc:11:22:32:97:a2:ec:36:e9:b2:e1:fd:d2:f5:79:48:
8c:c3:67:77:6c:bd:20:c3:1e:d1:05:6e:7b:3b:25:26:cd:be:
66:8d:85:44:20:e7:ef:32:c0:17:8a:fd:a1:4b:68:30:31:d2:
2a:d5:af:bf:32:84:db:09:ed:12:0e:8e:66:9c:64:da:43:5b:
80:99:93:20:29:85:f5:40:c3:ab:b1:46:ad:cf:5a:d1:53:85:
84:f3:1d:63:29:53:8e:23:41:10:7b:be:fd:da:87:f9:84:38:
51:ea:74:6d:62:4d:00:ee:0c:c0:f7:f0:e8:57:5b:ff:ef:80:
c0:d9:61:91:93:fd:6f:2e:96:78:4d:39:19:73:b5:a2:c9:0a:
5b:59:af:3b:b4:fd:d2:21:a8:8c:d6:86:b6:7d:75:75:34:fd:
6c:d3:c6:d5:b5:61:55:ef:70:7a:ab:bf:79:35:41:53:0a:aa:
fb:ec:94:67:c8:14:8f:38:95:f4:0d:ae:fb:b0:94:5b:2d:ba:
0e:f5:fd:5c:50:be:22:6c:f3:4a:7d:21:37:ca:21:1d:db:70:
16:cf:5f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:26 2025 by rpki-client