Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3284/2P0wEmBd2oDHj4k1lkjXtICZzc4.mft
File: 2P0wEmBd2oDHj4k1lkjXtICZzc4.mft (raw, json)
Hash identifier: dUDnTAyf2mFc6O4YBagwpviFyetUovWYfNToNcgRWck=
Subject key identifier: 51:3F:E2:43:95:62:FC:44:2E:73:87:27:B4:AC:8F:7A:27:88:F0:99
Authority key identifier: D8:FD:30:12:60:5D:DA:80:C7:8F:89:35:96:48:D7:B4:80:99:CD:CE
Certificate issuer: /CN=D8FD3012605DDA80C78F89359648D7B48099CDCE
Certificate serial: 05F9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2P0wEmBd2oDHj4k1lkjXtICZzc4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/2P0wEmBd2oDHj4k1lkjXtICZzc4.mft
Manifest number: 05F9
Signing time: Fri 21 Mar 2025 00:26:46 +0000
Manifest this update: Fri 21 Mar 2025 00:26:46 +0000
Manifest next update: Fri 21 Mar 2025 06:26:46 +0000
Files and hashes: 1: 2P0wEmBd2oDHj4k1lkjXtICZzc4.crl (hash: aVw2Vi2AInofZl4zuCvrQqSx889nGm0SrCe0uuFgSPU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1529 (0x5f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8FD3012605DDA80C78F89359648D7B48099CDCE
Validity
Not Before: Mar 21 00:26:46 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=513FE2439562FC442E738727B4AC8F7A2788F099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:40:83:c5:bc:c7:46:28:3c:7b:b5:44:b0:30:
ae:6f:b7:e1:af:2c:41:c0:34:11:57:ce:18:87:f5:
80:f4:5b:63:12:00:df:a3:9c:d9:8f:ac:9c:3f:4d:
05:0e:76:dc:9b:6f:c2:31:38:58:04:32:cd:85:f8:
5b:5b:4d:f9:8f:8e:6c:49:e4:77:b9:21:cd:93:dc:
5f:76:88:2d:ad:9b:bf:80:05:0d:86:b8:2a:b4:54:
45:b2:75:0a:70:de:3b:3f:f6:21:ae:e1:10:6c:62:
aa:44:51:8e:4d:07:0f:90:08:b6:36:49:f9:c3:9e:
38:8f:10:32:cf:e2:8d:a8:ea:69:af:f0:b6:f7:89:
be:f7:5f:50:65:44:0a:17:62:c8:29:d2:b2:30:fa:
98:a8:3e:da:62:71:74:c8:fa:76:73:26:07:43:29:
b9:e6:74:fb:bd:28:27:df:0f:d5:bc:b7:70:f7:8f:
27:93:ec:a9:1f:ad:5d:c8:2f:58:df:b2:37:6b:8c:
88:3c:ff:69:36:0d:48:8b:f5:a0:cb:23:11:e4:1e:
38:cf:df:f8:2e:40:85:5c:7e:ec:d5:e3:95:bd:64:
95:6c:7d:f6:31:e9:03:d0:1f:a0:d2:00:aa:16:a2:
74:bd:75:28:37:1a:af:5b:bf:81:a0:83:19:df:8d:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3F:E2:43:95:62:FC:44:2E:73:87:27:B4:AC:8F:7A:27:88:F0:99
X509v3 Authority Key Identifier:
keyid:D8:FD:30:12:60:5D:DA:80:C7:8F:89:35:96:48:D7:B4:80:99:CD:CE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/2P0wEmBd2oDHj4k1lkjXtICZzc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2P0wEmBd2oDHj4k1lkjXtICZzc4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/2P0wEmBd2oDHj4k1lkjXtICZzc4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:59:40:ee:7d:1e:8f:5a:3a:79:fa:be:e8:e4:a9:89:74:48:
63:df:c8:b1:5e:d8:e2:17:d9:c0:ff:f7:d3:17:99:35:7e:15:
d6:76:87:1a:69:42:98:2e:7f:d4:8a:4f:20:30:bc:b7:75:fe:
4b:03:7c:a3:cf:79:f3:ce:80:d0:18:44:9a:35:a7:a4:28:dd:
d0:47:3c:e5:59:7a:2b:7f:22:d6:4d:87:52:6c:fd:87:d4:0f:
e4:96:bc:7c:24:11:54:b1:de:e6:a7:fc:79:f4:b8:de:e2:18:
fc:ec:5e:91:13:30:9d:e8:f4:e5:44:30:02:a7:d6:9e:14:cd:
45:fd:a3:74:02:b8:e1:07:50:27:4f:0f:72:5d:c7:d0:c8:90:
b5:b4:36:26:e4:63:51:9b:67:6c:a9:15:cc:3d:c4:16:d8:c8:
18:16:6c:0d:7a:96:46:5d:31:5d:c0:17:8e:bb:72:a1:dd:5c:
5d:bf:2f:32:6e:a5:00:e5:61:5f:ab:24:72:9d:54:1a:bf:5f:
e6:d1:fb:93:96:d5:65:08:ce:fb:a5:5a:69:4d:65:2f:66:20:
ba:6a:34:d1:35:f0:0c:fe:51:5f:35:31:f5:be:c7:1c:7f:f2:
a9:24:ef:4b:14:2f:c8:77:1d:42:0e:88:a9:ce:ff:91:43:b3:
c6:82:68:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:13 2025 by rpki-client