Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3280/LTxBkfus18zT0-oZXlR0KTGatwI.mft
File: LTxBkfus18zT0-oZXlR0KTGatwI.mft (raw, json)
Hash identifier: XbPzSQtTgBh92zqu/ECNuACWlt35wjAadsEqXy2GEwU=
Subject key identifier: 70:EA:A8:FD:E2:77:50:A0:42:DD:C5:50:D2:1D:A8:E2:7B:82:85:16
Authority key identifier: 2D:3C:41:91:FB:AC:D7:CC:D3:D3:EA:19:5E:54:74:29:31:9A:B7:02
Certificate issuer: /CN=2D3C4191FBACD7CCD3D3EA195E547429319AB702
Certificate serial: 0614
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LTxBkfus18zT0-oZXlR0KTGatwI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/LTxBkfus18zT0-oZXlR0KTGatwI.mft
Manifest number: 0614
Signing time: Fri 21 Mar 2025 00:30:45 +0000
Manifest this update: Fri 21 Mar 2025 00:30:45 +0000
Manifest next update: Fri 21 Mar 2025 06:30:45 +0000
Files and hashes: 1: LTxBkfus18zT0-oZXlR0KTGatwI.crl (hash: q2Gw/DN8/DWAZ6HJAuXb1p9th5vd+Gq268SiQP6rc8s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1556 (0x614)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D3C4191FBACD7CCD3D3EA195E547429319AB702
Validity
Not Before: Mar 21 00:30:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=70EAA8FDE27750A042DDC550D21DA8E27B828516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:ee:6c:0f:99:bd:6a:d5:75:3d:2a:f0:dd:
f8:51:59:4e:77:8f:47:21:f2:0f:5e:39:cd:f2:37:
9d:fe:49:6d:8a:87:df:0b:10:94:d2:c5:89:67:94:
da:1f:93:a3:ba:e8:8f:84:79:07:0f:6d:b3:50:e7:
16:91:3f:6c:9a:45:ac:99:70:15:11:7c:2e:29:e9:
7a:7d:84:70:df:e9:35:8c:2a:6a:24:17:b6:64:12:
db:02:3e:93:db:2b:91:76:a2:2e:c1:79:d7:3b:6a:
4e:6c:9c:ce:68:03:ea:9d:b3:cb:f7:5b:07:aa:bb:
4f:e9:f5:44:83:2e:92:ed:8f:94:79:4b:82:0a:a0:
4f:7a:6d:2f:37:8d:2b:39:aa:0a:c8:cd:e3:1d:de:
07:6d:f0:9d:05:be:28:a0:e8:0b:c6:3a:a3:56:b1:
f3:58:bc:0b:4e:b4:f4:3d:95:ab:b0:f8:7b:df:9a:
37:84:72:19:1c:bb:da:1f:f9:12:c7:70:44:26:27:
c8:2f:b3:70:ba:28:60:a3:32:34:59:12:7c:cb:b4:
4b:a7:9f:60:0c:28:44:fd:9a:18:3a:6b:86:50:ae:
5e:fd:70:01:3b:52:d8:9d:12:4f:03:b6:a3:c9:3f:
fb:15:0c:ef:80:c7:d1:41:59:45:3e:36:a9:6d:3c:
05:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EA:A8:FD:E2:77:50:A0:42:DD:C5:50:D2:1D:A8:E2:7B:82:85:16
X509v3 Authority Key Identifier:
keyid:2D:3C:41:91:FB:AC:D7:CC:D3:D3:EA:19:5E:54:74:29:31:9A:B7:02
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/LTxBkfus18zT0-oZXlR0KTGatwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LTxBkfus18zT0-oZXlR0KTGatwI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/LTxBkfus18zT0-oZXlR0KTGatwI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:27:f1:31:51:5b:c6:69:1f:84:c9:22:00:cc:e2:8e:8f:8a:
96:5c:ea:cf:10:e1:7e:13:e8:4c:2e:da:c6:ad:70:54:55:e3:
7f:af:05:6f:04:00:23:e4:e9:22:c8:a7:09:bf:13:3c:a8:95:
74:42:21:3e:59:b6:90:fd:84:42:e0:70:95:55:aa:e1:f7:3a:
ff:cd:ca:f7:5d:92:f8:95:d7:50:4b:2e:12:87:ad:e9:05:b8:
e0:42:1d:0f:74:1c:92:cb:10:d8:41:81:50:32:68:2a:46:cc:
2f:41:3f:a7:a5:d8:96:6e:ce:58:e2:2a:e7:3e:5c:47:c1:91:
d1:a5:2c:50:a7:33:26:6d:b0:a5:be:55:d4:8b:81:32:e2:61:
e7:21:24:31:33:db:ef:09:bf:fe:1b:47:4d:f6:5c:49:fe:53:
0f:88:d6:7d:d7:34:56:5b:e0:bd:6e:13:e0:c6:6b:97:cf:0b:
0c:4c:16:83:3f:5d:35:45:c8:df:d5:57:73:78:22:6c:1c:c2:
f9:f3:3b:07:ce:cc:b8:93:97:9c:6d:14:79:bf:cf:06:2e:27:
86:a9:86:80:72:5e:28:52:e3:b3:75:f3:67:3f:e9:96:d3:7f:
89:be:20:68:d2:a7:cf:e8:9e:8f:ca:41:74:e5:fc:27:f1:62:
4e:81:43:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:56 2025 by rpki-client