Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft
File: REpvrwhyRfumTIvW5EyRKvs9IGY.mft (raw, json)
Hash identifier: V+OC/bI7JF+EM+09f02sDwYfTL24Qw4OyXDnH3YhWm0=
Subject key identifier: 1A:B8:61:E2:92:9A:89:AC:65:82:D3:5A:AD:01:A2:79:CA:42:63:92
Authority key identifier: 44:4A:6F:AF:08:72:45:FB:A6:4C:8B:D6:E4:4C:91:2A:FB:3D:20:66
Certificate issuer: /CN=444A6FAF087245FBA64C8BD6E44C912AFB3D2066
Certificate serial: 0308
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/REpvrwhyRfumTIvW5EyRKvs9IGY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft
Manifest number: 0308
Signing time: Sat 29 Mar 2025 10:30:15 +0000
Manifest this update: Sat 29 Mar 2025 10:30:15 +0000
Manifest next update: Sat 29 Mar 2025 16:30:15 +0000
Files and hashes: 1: REpvrwhyRfumTIvW5EyRKvs9IGY.crl (hash: AXtQu4/0ztVjDIOrYpTNGxUKjp+G6bDryk7D57rIX6M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 776 (0x308)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=444A6FAF087245FBA64C8BD6E44C912AFB3D2066
Validity
Not Before: Mar 29 10:30:15 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1AB861E2929A89AC6582D35AAD01A279CA426392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4d:79:8f:a0:8b:63:12:f9:e5:9d:c1:55:0a:
09:d9:71:50:88:eb:61:0a:93:7b:74:0e:80:b1:46:
0e:7a:1a:a5:2f:0b:0b:51:b7:6d:82:d7:3b:a1:1f:
8f:ce:71:78:39:27:2d:1a:42:61:ff:95:30:a5:d1:
f7:44:a2:ed:fc:cb:27:33:46:f1:b0:2f:b3:86:7c:
67:66:1d:d7:63:38:b0:51:25:b3:ba:d6:e0:42:43:
07:6e:68:b8:6c:b3:17:df:1c:ec:37:21:24:db:9d:
43:2e:91:ed:73:a6:8d:b2:85:dc:c1:74:cd:ea:ef:
77:2e:b6:30:94:85:c0:37:29:1d:b4:82:27:d5:9c:
63:c6:5c:2c:72:0a:e1:9c:51:d0:9a:69:ea:c3:3c:
44:9e:fc:b0:cf:25:c1:0d:dd:82:f2:67:a8:97:9e:
00:b0:83:1e:17:ac:2a:d0:c1:56:13:b0:d7:15:68:
17:9b:96:05:69:b6:ee:d6:48:56:ad:82:f1:0a:8f:
9b:27:c4:05:fa:5e:6e:95:26:f5:95:02:b1:73:19:
af:97:e7:8f:b0:63:69:9c:de:4e:8f:b3:fd:af:ec:
e4:5e:22:31:f3:fd:50:e7:6b:26:7a:16:a1:9c:06:
6d:b1:69:52:1d:6b:14:f6:3c:e9:17:bc:55:44:3e:
66:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B8:61:E2:92:9A:89:AC:65:82:D3:5A:AD:01:A2:79:CA:42:63:92
X509v3 Authority Key Identifier:
keyid:44:4A:6F:AF:08:72:45:FB:A6:4C:8B:D6:E4:4C:91:2A:FB:3D:20:66
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/REpvrwhyRfumTIvW5EyRKvs9IGY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9c:b5:4a:2f:42:f2:af:a4:fc:35:21:96:77:49:1c:5d:b8:
f7:e3:a4:28:db:50:22:cd:53:c8:5e:5a:c0:62:7b:f1:af:fd:
31:2b:06:93:a3:c0:80:28:09:7e:ee:fb:c7:3f:97:cb:6a:9b:
77:4f:75:06:a8:01:36:11:80:6b:fa:e6:b5:02:40:6b:7a:f7:
a1:ab:4b:02:b0:74:0c:50:8b:26:be:4d:59:d6:f7:d7:36:80:
71:a5:c7:4d:6b:b5:cf:5f:58:9e:76:4e:85:ce:88:9a:f9:8b:
17:5d:56:98:e8:03:1d:7b:b9:5a:a2:8a:2d:09:24:94:ad:18:
86:a1:ff:fb:55:bc:fb:d7:42:9e:dc:f8:5a:d2:35:72:08:e4:
fe:fb:25:9e:a4:25:3b:a0:3a:79:f5:a3:93:62:8f:15:fe:2b:
ef:1b:67:99:a3:76:cd:ad:0f:9d:6c:8f:80:05:17:5e:bf:9d:
4f:90:d2:ca:9b:0e:03:e1:6e:67:41:23:df:39:cd:07:b7:d2:
bf:b6:a2:5a:c2:d2:ae:a9:23:93:f7:7b:95:99:b6:65:ba:4e:
bc:b5:50:0a:9c:c3:88:20:8e:8d:27:48:98:2b:7f:28:ec:c9:
0a:80:a5:21:30:8a:25:41:d2:cc:88:30:36:ec:20:df:3e:b4:
d3:f0:2c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:50 2025 by rpki-client