Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3283/R9n8VhrefVa8dc2H8ZXcoOSg0M8.mft
File: R9n8VhrefVa8dc2H8ZXcoOSg0M8.mft (raw, json)
Hash identifier: 34TSkiiECvvIA0KU53zlEBoAOjIg3INTyl+bI+eTsZg=
Subject key identifier: 0E:56:4F:28:ED:01:76:81:E6:4A:0D:DC:DA:66:E1:14:5B:B7:B9:81
Authority key identifier: 47:D9:FC:56:1A:DE:7D:56:BC:75:CD:87:F1:95:DC:A0:E4:A0:D0:CF
Certificate issuer: /CN=47D9FC561ADE7D56BC75CD87F195DCA0E4A0D0CF
Certificate serial: 05F7
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/R9n8VhrefVa8dc2H8ZXcoOSg0M8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/R9n8VhrefVa8dc2H8ZXcoOSg0M8.mft
Manifest number: 05F7
Signing time: Fri 21 Mar 2025 00:30:53 +0000
Manifest this update: Fri 21 Mar 2025 00:30:53 +0000
Manifest next update: Fri 21 Mar 2025 06:30:53 +0000
Files and hashes: 1: R9n8VhrefVa8dc2H8ZXcoOSg0M8.crl (hash: okSCtgkGksLhXs50dF94WvGftjzM1+YqVbGbZOvb7Ok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1527 (0x5f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47D9FC561ADE7D56BC75CD87F195DCA0E4A0D0CF
Validity
Not Before: Mar 21 00:30:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0E564F28ED017681E64A0DDCDA66E1145BB7B981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d3:22:71:1f:e4:ef:11:08:8b:68:36:ce:86:
e7:46:7f:34:cc:5e:dc:0c:28:90:f0:12:8d:89:e5:
62:48:04:7c:9c:ac:14:c3:27:17:f5:17:3b:3a:ee:
23:d9:fe:0e:99:61:ca:34:cd:1e:74:db:7a:51:94:
29:4e:6f:d2:66:2f:6a:48:ca:32:d9:ce:fe:db:17:
20:05:53:94:50:1c:06:41:70:78:7d:4f:53:e9:5d:
21:6b:f5:ff:77:76:05:60:60:69:0c:c6:07:b2:8b:
f8:3a:6c:fb:da:47:73:81:38:a2:85:ce:de:31:c3:
62:a2:42:69:f2:d3:99:e0:d9:26:78:cb:12:1f:f3:
56:48:b3:1c:9f:5d:8d:d2:e2:43:eb:b0:77:b5:a3:
33:b9:71:74:d6:ba:a8:bb:11:be:90:5c:c8:68:ed:
f5:1e:4e:8f:7e:ae:da:59:e3:ee:97:bd:c3:76:79:
79:25:ce:dc:2f:93:8f:6a:4f:66:fb:32:e7:81:c1:
c3:09:27:73:0a:19:50:fd:ef:93:a5:2b:ef:9b:a0:
c0:2d:d0:2f:05:a9:ec:b2:e5:06:d1:90:b7:7a:2f:
5f:58:ae:bd:78:1c:c7:af:58:7b:f7:e0:9d:8b:fe:
7a:41:8f:91:14:6d:05:3e:f7:2e:3d:ca:dc:57:10:
0b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:56:4F:28:ED:01:76:81:E6:4A:0D:DC:DA:66:E1:14:5B:B7:B9:81
X509v3 Authority Key Identifier:
keyid:47:D9:FC:56:1A:DE:7D:56:BC:75:CD:87:F1:95:DC:A0:E4:A0:D0:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/R9n8VhrefVa8dc2H8ZXcoOSg0M8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/R9n8VhrefVa8dc2H8ZXcoOSg0M8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/R9n8VhrefVa8dc2H8ZXcoOSg0M8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:b6:9f:52:6e:a0:84:1c:7c:b4:69:62:97:83:96:f7:d4:56:
bb:50:76:35:1c:35:a7:7f:cc:dd:21:b3:a1:84:f3:b2:b9:ae:
7f:02:d3:e2:bd:68:45:e0:df:99:c1:38:29:53:d0:68:c7:c2:
3e:50:6d:bc:78:03:29:59:54:77:3f:9f:81:94:c2:d6:73:a1:
02:02:c5:b3:06:0b:b7:7c:24:2f:f9:5c:3d:68:d7:6f:6d:aa:
52:38:86:48:87:9e:2d:08:f7:77:10:eb:8b:b3:74:ee:99:8f:
55:d4:56:48:b0:d0:a8:c4:82:25:80:ca:5d:c3:4e:21:5c:0c:
fd:24:55:6b:09:fe:a2:e5:82:f6:40:7e:44:6a:79:6f:c4:85:
2f:10:d0:b0:c2:43:b6:3c:43:07:2d:74:c9:6a:0b:4c:be:80:
49:4e:d1:1f:fb:ff:1c:2d:cf:54:ad:8e:4a:be:d4:59:39:7a:
86:e6:c8:50:16:a9:94:84:e3:90:fd:75:be:a7:f7:e9:7d:e0:
fb:39:1d:54:78:42:64:b5:4b:cc:d9:11:d3:36:f5:5c:6d:49:
86:01:9c:81:57:67:56:d7:5c:f0:8b:fa:ae:01:bd:36:4c:34:
af:01:3a:90:5f:63:ac:e1:24:fa:c4:d4:dc:44:86:d6:2d:1e:
d0:3e:da:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:07:08 2025 by rpki-client