Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3285/qmXpFa-Nrt6rqnw2bEzO5KHBslA.mft
File: qmXpFa-Nrt6rqnw2bEzO5KHBslA.mft (raw, json)
Hash identifier: be//2tOclcZf/C6VcETxalmho9QG+k37GWdJhiS19vM=
Subject key identifier: FE:DB:A2:61:8B:07:11:BE:BA:19:8E:77:E5:CB:4B:8D:7D:50:54:CB
Authority key identifier: AA:65:E9:15:AF:8D:AE:DE:AB:AA:7C:36:6C:4C:CE:E4:A1:C1:B2:50
Certificate issuer: /CN=AA65E915AF8DAEDEABAA7C366C4CCEE4A1C1B250
Certificate serial: 05D3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qmXpFa-Nrt6rqnw2bEzO5KHBslA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/qmXpFa-Nrt6rqnw2bEzO5KHBslA.mft
Manifest number: 05D3
Signing time: Fri 21 Mar 2025 00:28:14 +0000
Manifest this update: Fri 21 Mar 2025 00:28:14 +0000
Manifest next update: Fri 21 Mar 2025 06:28:14 +0000
Files and hashes: 1: qmXpFa-Nrt6rqnw2bEzO5KHBslA.crl (hash: S3zgKI0PtS6SajqW/lfS67MehailF+x4EWvUjIi94YM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1491 (0x5d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA65E915AF8DAEDEABAA7C366C4CCEE4A1C1B250
Validity
Not Before: Mar 21 00:28:14 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FEDBA2618B0711BEBA198E77E5CB4B8D7D5054CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:4b:48:5e:48:2a:c8:f8:21:ab:d5:43:b2:
23:06:38:ca:a1:5f:19:7d:9f:4e:7b:43:85:be:b5:
16:0d:ed:a3:39:ec:94:66:15:4e:bc:7f:49:9c:28:
d0:a4:51:00:64:da:a9:f7:9d:c9:5e:a8:f4:58:61:
ca:d4:19:9b:6e:20:04:c6:87:d6:64:98:a1:b7:77:
78:a8:78:26:11:3a:e0:08:d1:83:a5:0e:92:7a:32:
a5:6e:2b:d5:9d:42:63:d4:12:a2:b1:dd:43:1a:a6:
f6:3f:63:6a:90:c2:a2:72:e5:16:da:7d:b3:94:45:
11:7f:81:f2:fd:ea:b6:d2:07:16:f1:c6:53:b9:a6:
a8:a2:08:1f:77:2b:d8:bc:51:42:fa:3e:50:78:ae:
d5:a0:75:9a:e6:5d:ae:cf:cf:d7:9e:bb:84:11:55:
86:b5:9d:f8:7f:61:00:af:11:69:78:85:8a:e8:a4:
1e:77:db:fa:3b:70:80:58:b9:48:c5:6b:67:be:6c:
db:04:b2:22:f5:fe:c4:f1:e2:ce:ff:0f:03:df:fb:
a8:8c:7b:8a:90:02:9f:b4:cb:59:30:59:07:36:b4:
30:68:0d:4e:84:9f:18:c5:f0:0d:96:61:cb:7a:ac:
e4:7f:b5:f2:7a:4f:a4:06:6f:9f:65:99:78:b8:e7:
98:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DB:A2:61:8B:07:11:BE:BA:19:8E:77:E5:CB:4B:8D:7D:50:54:CB
X509v3 Authority Key Identifier:
keyid:AA:65:E9:15:AF:8D:AE:DE:AB:AA:7C:36:6C:4C:CE:E4:A1:C1:B2:50
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/qmXpFa-Nrt6rqnw2bEzO5KHBslA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qmXpFa-Nrt6rqnw2bEzO5KHBslA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/qmXpFa-Nrt6rqnw2bEzO5KHBslA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:98:7c:55:df:ae:46:77:18:ef:4a:55:eb:41:46:b9:ff:43:
92:25:61:c2:d8:04:c4:cf:e0:4e:fc:7a:79:10:2e:dc:a2:45:
83:d9:95:aa:ab:92:f3:e2:27:8a:39:3f:8b:c8:2e:b8:b4:fe:
ea:7a:b8:67:e0:5a:a1:f0:45:94:08:8d:22:a3:8a:14:34:4b:
47:56:e4:0d:c7:f6:52:f2:04:2f:73:f4:e6:5d:d8:b6:87:b8:
8e:00:51:61:59:2c:09:46:7d:ee:a6:c4:79:c9:95:53:13:48:
4c:d4:43:26:75:0c:d5:1c:68:eb:39:f7:bd:f1:52:a2:36:8d:
80:7e:da:ba:2c:b8:29:eb:51:d9:48:45:9a:a7:fe:c6:4d:39:
a1:dc:11:30:bc:f0:bb:ed:77:90:32:5e:ce:ff:7c:6f:9d:1f:
88:dd:15:83:59:64:ce:d3:b4:e9:e3:3c:9e:46:63:a7:91:48:
a6:6a:7b:c5:ad:42:cb:e3:5b:32:42:0f:0d:9d:4e:a0:06:f9:
fa:0f:ac:dc:0d:55:c8:25:3c:1c:45:66:40:41:6b:94:6c:01:
a6:df:44:49:70:9e:f9:2d:f0:19:1f:47:5c:28:b4:ef:67:59:
c2:71:0e:5b:e7:39:69:04:27:79:7a:f6:f3:4a:d7:82:cf:e4:
54:79:5b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:06 2025 by rpki-client