Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3295/RP1LOAf8IJACd92fE6z8qnpaOCg.mft
File: RP1LOAf8IJACd92fE6z8qnpaOCg.mft (raw, json)
Hash identifier: p1TgiJK7tTG3oqFJmpElueXvSuIT+PlMKymVn2CCPQw=
Subject key identifier: 70:6B:01:9E:6D:A7:CA:14:73:DE:36:E6:B2:FE:28:1B:DB:4C:E1:4F
Authority key identifier: 44:FD:4B:38:07:FC:20:90:02:77:DD:9F:13:AC:FC:AA:7A:5A:38:28
Certificate issuer: /CN=44FD4B3807FC20900277DD9F13ACFCAA7A5A3828
Certificate serial: 02DE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RP1LOAf8IJACd92fE6z8qnpaOCg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/RP1LOAf8IJACd92fE6z8qnpaOCg.mft
Manifest number: 02DE
Signing time: Fri 21 Mar 2025 00:31:29 +0000
Manifest this update: Fri 21 Mar 2025 00:31:29 +0000
Manifest next update: Fri 21 Mar 2025 06:31:29 +0000
Files and hashes: 1: RP1LOAf8IJACd92fE6z8qnpaOCg.crl (hash: jxwXCR2AyMKd+1J8tBw0RVpovOOQxHBTdI3SBPRCNS4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 734 (0x2de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44FD4B3807FC20900277DD9F13ACFCAA7A5A3828
Validity
Not Before: Mar 21 00:31:29 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=706B019E6DA7CA1473DE36E6B2FE281BDB4CE14F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:8c:15:6f:b7:0c:20:33:cc:9d:26:47:19:
3c:31:48:e0:3a:88:f3:c0:32:10:3c:90:9b:f4:cd:
b8:00:54:fe:02:24:0e:74:98:09:52:5b:25:b2:43:
d3:30:eb:68:06:79:45:b1:d1:20:48:dd:de:18:d9:
4d:2f:ce:ae:1b:d9:d9:b9:34:66:1b:42:b9:f1:58:
24:08:1c:36:39:5a:11:99:10:dc:f4:2a:c2:d0:3b:
78:85:f1:94:fe:0b:d4:bb:24:2d:f9:ff:f4:95:d0:
f7:68:25:39:79:12:80:2b:39:5c:5a:7c:ef:64:03:
7c:b9:26:bc:67:72:85:0a:3c:d0:6e:70:a3:c5:19:
0f:bf:fa:3a:92:a4:2a:28:38:a1:5b:76:0d:68:f0:
ed:ca:84:d8:56:8f:fb:ae:7f:70:3d:d3:a9:53:6a:
6e:91:52:e4:0a:a5:f5:30:9b:43:4e:21:71:8a:ab:
15:e1:8c:f8:e7:84:74:29:d2:57:51:46:6c:2d:73:
2f:2b:23:f2:b8:d3:dd:03:31:a3:7f:01:71:3a:b6:
d3:86:23:b2:5b:34:60:d3:52:67:fc:53:5e:30:d0:
9a:89:59:f4:00:eb:5b:26:b8:64:4d:83:93:76:5d:
64:7d:4a:b5:37:7c:23:28:91:18:a3:16:80:9b:d0:
9e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6B:01:9E:6D:A7:CA:14:73:DE:36:E6:B2:FE:28:1B:DB:4C:E1:4F
X509v3 Authority Key Identifier:
keyid:44:FD:4B:38:07:FC:20:90:02:77:DD:9F:13:AC:FC:AA:7A:5A:38:28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/RP1LOAf8IJACd92fE6z8qnpaOCg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RP1LOAf8IJACd92fE6z8qnpaOCg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/RP1LOAf8IJACd92fE6z8qnpaOCg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:d7:61:bb:d6:37:12:a9:f6:f9:d0:2f:93:84:53:2a:87:99:
45:d7:d6:d2:71:e5:78:0c:55:c5:bb:88:08:1f:1d:05:f3:1e:
38:c3:f6:26:a3:3f:69:0d:b2:d1:20:f4:2e:71:e4:a8:2f:1b:
c0:70:55:53:84:44:20:b8:04:5c:b2:0b:f6:7e:07:34:c1:38:
97:68:c7:8d:4f:bf:46:dd:18:38:05:dc:43:17:66:1a:09:b4:
8b:be:d1:a7:55:38:f2:6a:df:8b:18:0d:2f:0e:2e:d8:44:52:
05:12:28:1c:95:c5:59:81:10:78:aa:d5:f3:7f:e7:10:39:47:
37:e1:87:d8:ef:1a:d0:63:85:75:48:44:1a:d9:75:89:0b:76:
a0:f6:b4:aa:e5:35:34:27:c8:aa:51:9e:e7:a7:fc:83:6e:de:
ae:ee:e2:64:03:6a:fa:11:49:8d:13:c3:a5:49:31:9c:ae:02:
d1:6d:a8:43:f9:65:f9:e7:13:03:8a:6e:71:91:14:3f:75:6a:
c6:ae:77:62:59:cd:ed:67:9d:57:6c:a5:a7:70:d9:7e:d3:0a:
7c:f1:d5:bf:8d:4f:3b:c5:15:1b:22:0c:39:41:08:4c:b3:5c:
90:33:c0:75:83:b5:c9:d7:7d:6a:0d:9d:59:9d:0f:a5:07:5a:
4b:3c:54:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:59 2025 by rpki-client