Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft
File: c_jFHpB2aR787kYX7QQw9Xy8gB0.mft (raw, json)
Hash identifier: 6kgSXu0+CrbnXQTAdTmmh8NocOkUU5K7+P+Xa3a3Tus=
Subject key identifier: 1A:96:67:3E:80:78:64:04:FE:29:6B:91:E5:82:5F:A1:96:60:4F:17
Authority key identifier: 73:F8:C5:1E:90:76:69:1E:FC:EE:46:17:ED:04:30:F5:7C:BC:80:1D
Certificate issuer: /CN=73F8C51E9076691EFCEE4617ED0430F57CBC801D
Certificate serial: 0644
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c_jFHpB2aR787kYX7QQw9Xy8gB0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft
Manifest number: 0644
Signing time: Sat 29 Mar 2025 06:27:19 +0000
Manifest this update: Sat 29 Mar 2025 06:27:19 +0000
Manifest next update: Sat 29 Mar 2025 12:27:19 +0000
Files and hashes: 1: c_jFHpB2aR787kYX7QQw9Xy8gB0.crl (hash: KBIIiGCeDJF8+N51JBNLPpL3hMrxY7p0Z2ohUXdYC04=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1604 (0x644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73F8C51E9076691EFCEE4617ED0430F57CBC801D
Validity
Not Before: Mar 29 06:27:19 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1A96673E80786404FE296B91E5825FA196604F17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:78:3d:60:00:57:d1:46:10:20:61:9e:95:
b0:49:1e:0d:5c:52:0b:c8:7a:1c:81:d0:ed:72:56:
ee:19:51:41:e0:24:b0:4d:06:1a:5d:3b:2c:8c:fb:
3d:11:d0:0c:29:ef:27:77:69:b8:2b:11:aa:83:4a:
a1:2b:ad:60:3b:f0:c1:4b:77:9c:38:cb:c6:39:9d:
80:df:69:73:ae:95:5e:ba:25:2d:b2:5d:27:67:74:
3a:d9:ec:52:fe:af:0b:9c:5f:9b:dd:00:ca:95:5d:
dc:5f:ad:55:3a:07:58:79:a2:39:2e:61:35:3b:80:
69:6c:60:58:d7:6a:11:2a:5e:86:a3:c5:1d:e6:08:
09:f7:5e:cb:6c:37:a0:c7:db:43:07:8e:40:b0:f5:
af:5d:89:94:f4:99:d8:ad:a3:4f:e6:94:9a:6d:36:
71:00:29:8e:2e:a4:3b:3e:04:a7:9f:57:16:e8:0b:
4a:6d:56:61:3f:85:74:d0:1a:4d:75:87:34:24:81:
3d:82:dc:41:54:70:cb:fa:58:69:2d:c9:fd:b4:94:
06:71:fe:be:99:8e:74:40:10:ab:98:00:cb:83:d9:
23:24:b9:23:b9:51:d8:51:6c:fd:14:59:7b:a4:37:
2a:54:8d:96:54:08:95:f7:8b:75:9e:40:9f:eb:5a:
8b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:96:67:3E:80:78:64:04:FE:29:6B:91:E5:82:5F:A1:96:60:4F:17
X509v3 Authority Key Identifier:
keyid:73:F8:C5:1E:90:76:69:1E:FC:EE:46:17:ED:04:30:F5:7C:BC:80:1D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c_jFHpB2aR787kYX7QQw9Xy8gB0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5a:7c:3a:24:15:fe:1f:a8:2a:b4:be:93:42:e1:94:4f:44:
6e:a3:a4:3c:c4:00:5d:cb:8a:a8:45:40:03:b0:35:49:a8:00:
27:10:4e:12:dc:82:3e:38:96:9c:aa:53:a0:66:ee:d0:4c:55:
43:e1:d4:fd:82:15:ac:7a:05:ac:fc:68:2f:76:e4:8a:fa:9e:
87:8c:e5:04:38:b7:82:96:20:1b:49:2d:57:74:1b:08:1e:94:
d2:f5:45:9e:b5:6b:e9:22:b5:65:2d:9e:25:df:b8:8b:3c:d9:
c8:32:97:e6:16:d0:fb:1b:b3:47:6f:ec:c0:79:e4:32:6d:eb:
60:ad:d0:1f:60:e5:12:af:5e:8a:3b:f2:52:1f:5e:ef:1b:be:
0b:87:bc:8e:d5:c7:c1:16:c1:8a:9c:03:e9:72:f1:80:ce:d5:
b2:28:94:3a:86:3f:62:d7:b1:9e:03:0a:07:4c:21:bb:2b:71:
06:10:e5:8b:3d:87:22:4d:7a:a7:33:7a:0f:c4:f8:ca:b2:82:
74:21:19:ae:59:7e:95:cb:67:9a:fa:c9:16:6f:bf:19:0c:48:
f8:a7:b5:31:44:85:96:74:44:03:12:56:c2:6b:53:0f:70:b5:
52:41:9d:f9:55:84:42:6e:5d:45:f6:55:84:71:07:21:01:f0:
1c:91:77:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:27 2025 by rpki-client