Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.mft
File: kXok3C9fwHVc6sn-HMXExV183fo.mft (raw, json)
Hash identifier: umL0fTx3/V7MuzTSFJjmf6ftLgCqR9CCrcXJmYwFDzs=
Subject key identifier: 35:6B:69:02:74:63:F8:A7:68:3B:39:60:AD:61:9D:11:CA:B7:44:44
Authority key identifier: 91:7A:24:DC:2F:5F:C0:75:5C:EA:C9:FE:1C:C5:C4:C5:5D:7C:DD:FA
Certificate issuer: /CN=917A24DC2F5FC0755CEAC9FE1CC5C4C55D7CDDFA
Certificate serial: 0623
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kXok3C9fwHVc6sn-HMXExV183fo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.mft
Manifest number: 0623
Signing time: Sat 29 Mar 2025 10:29:34 +0000
Manifest this update: Sat 29 Mar 2025 10:29:34 +0000
Manifest next update: Sat 29 Mar 2025 16:29:34 +0000
Files and hashes: 1: kXok3C9fwHVc6sn-HMXExV183fo.crl (hash: FSzwd0wgIrqrBgnBZ9TYEfnmfzNOH7NY61d2aLFSQec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1571 (0x623)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917A24DC2F5FC0755CEAC9FE1CC5C4C55D7CDDFA
Validity
Not Before: Mar 29 10:29:34 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=356B69027463F8A7683B3960AD619D11CAB74444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4e:45:4c:b3:46:df:85:b4:aa:ff:bd:44:49:
ae:dc:9f:f2:13:71:46:0e:08:9b:42:64:81:38:a0:
3c:6c:13:19:02:51:5c:45:34:75:ca:8a:74:b0:f5:
ec:f9:8b:a6:7f:dd:78:c5:93:3d:5b:31:2c:d1:98:
22:f0:6e:7d:e6:42:15:97:11:7e:b3:da:11:e4:20:
c1:6e:64:fb:7a:05:49:2e:6a:20:56:05:a5:60:fd:
bd:ab:0d:d4:e2:9b:97:e7:f9:25:ea:f0:d5:18:3c:
5e:2e:e7:ed:f3:f8:ac:f2:0d:90:40:dc:31:12:a2:
e6:de:a0:e7:3b:55:1e:92:4d:17:37:df:53:18:21:
13:15:87:ab:bd:8d:c7:24:0a:f0:23:ee:c4:ea:03:
55:8a:6d:16:c3:13:86:61:e1:43:08:2f:8b:70:ff:
72:63:c7:a8:68:f4:a4:6f:09:7c:91:b6:9a:0a:b3:
b7:68:29:45:96:5d:17:8f:84:9f:19:05:78:d4:76:
0a:d8:9f:50:c9:5e:88:fc:e4:89:95:c1:33:b8:ec:
41:bf:55:53:b3:93:ce:b4:7b:b1:19:af:fa:d3:e7:
91:07:67:26:35:ce:74:70:27:ff:47:59:61:79:7e:
b6:8e:fb:c8:a1:9e:7d:5e:84:75:cd:cb:20:d5:98:
30:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6B:69:02:74:63:F8:A7:68:3B:39:60:AD:61:9D:11:CA:B7:44:44
X509v3 Authority Key Identifier:
keyid:91:7A:24:DC:2F:5F:C0:75:5C:EA:C9:FE:1C:C5:C4:C5:5D:7C:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kXok3C9fwHVc6sn-HMXExV183fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:30:02:05:81:77:20:27:f9:9a:4f:c8:6a:f3:ae:45:2f:99:
01:7d:a4:8c:45:7f:ff:ef:6f:7a:f7:00:11:d4:d4:47:6b:b7:
f0:b7:19:30:27:d6:93:d6:8a:37:8e:8b:3f:eb:8d:5a:ae:fe:
f6:97:65:b9:e2:b5:9f:9d:df:70:ef:a2:9b:72:b8:5a:36:4c:
80:c0:08:6e:54:fd:e0:fc:53:3f:0d:20:41:aa:f0:f7:5f:38:
04:65:62:61:e1:3a:a2:61:1b:5d:c3:e0:63:a3:49:4b:85:74:
19:a9:3b:39:ef:dc:2e:d2:a3:69:88:18:fa:ae:61:b7:57:51:
ff:5a:13:c8:0d:ef:85:f0:d9:73:c8:be:59:9f:82:56:08:f9:
4d:fb:3d:4d:ab:88:e8:a5:42:69:c5:1e:0d:d6:aa:2d:3e:f4:
f9:bf:f9:e7:e8:35:f8:3d:c8:73:0e:a3:94:98:71:9c:50:5d:
de:c5:bc:c5:b3:0b:05:c0:c1:c1:9e:e6:7a:63:ee:72:3d:df:
c0:2a:b2:6d:44:af:a9:2c:f5:08:82:54:95:1c:bc:02:21:2d:
36:72:55:76:80:53:22:3b:12:49:0a:a7:99:31:75:05:84:e2:
58:8a:b7:9d:14:b3:c2:d6:10:fa:5c:57:ef:a4:7c:01:b2:d9:
57:28:1f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:20:14 2025 by rpki-client