Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3298/xBzQhaMq5MKw6Gj_J_63FwzM9fs.mft
File: xBzQhaMq5MKw6Gj_J_63FwzM9fs.mft (raw, json)
Hash identifier: BSC7Ph4Q8+zN7Vf4DvgsgGpn26cuE7q2MXfC5CRO2tk=
Subject key identifier: AF:80:EB:9B:BD:42:83:E1:4C:EA:CB:DF:01:FA:D3:05:63:9E:A5:12
Authority key identifier: C4:1C:D0:85:A3:2A:E4:C2:B0:E8:68:FF:27:FE:B7:17:0C:CC:F5:FB
Certificate issuer: /CN=C41CD085A32AE4C2B0E868FF27FEB7170CCCF5FB
Certificate serial: 052A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xBzQhaMq5MKw6Gj_J_63FwzM9fs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/xBzQhaMq5MKw6Gj_J_63FwzM9fs.mft
Manifest number: 052A
Signing time: Thu 20 Mar 2025 23:56:39 +0000
Manifest this update: Thu 20 Mar 2025 23:56:39 +0000
Manifest next update: Fri 21 Mar 2025 05:56:39 +0000
Files and hashes: 1: xBzQhaMq5MKw6Gj_J_63FwzM9fs.crl (hash: i1CNQkYkNB11FJxiy+JdF6eTrs1Hd2V8YV6SuQwy4WE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1322 (0x52a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C41CD085A32AE4C2B0E868FF27FEB7170CCCF5FB
Validity
Not Before: Mar 20 23:56:39 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=AF80EB9BBD4283E14CEACBDF01FAD305639EA512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9f:2b:89:fc:19:80:68:80:1f:4e:30:e7:ff:
eb:49:76:9a:1e:ff:51:06:fb:ca:85:a3:99:1c:13:
8c:b3:d9:40:0f:96:31:28:b2:ec:04:19:65:0a:93:
c5:6c:64:1a:4e:8b:39:03:6c:90:fb:3b:49:2c:68:
cb:9e:bf:32:e5:f0:5f:5a:42:0d:4c:59:c9:fe:0c:
2b:4a:6a:3d:9c:5f:7b:91:62:4d:65:a4:26:6f:23:
c0:fc:8b:92:04:41:67:f2:f8:42:97:d3:93:6c:07:
86:28:c3:be:73:37:0e:08:b7:fa:cd:5d:2c:fd:08:
05:85:09:93:94:3a:62:fa:12:06:da:80:a2:f6:72:
3d:c4:99:dd:c6:4c:8a:98:80:85:ef:45:2e:6f:5b:
53:04:a7:f3:3c:8a:72:d3:0a:d6:e5:ea:ab:13:55:
1e:86:ca:d9:a5:53:c2:33:97:03:64:8d:16:f4:1f:
35:49:94:0b:65:23:cd:0d:75:68:06:dc:57:ff:3c:
4a:a9:b0:59:c7:66:31:f4:14:26:6e:ab:40:8c:b1:
41:7d:51:51:21:8e:42:7c:65:7b:81:90:cf:5f:57:
f7:0f:b4:c0:9e:77:28:16:23:31:cc:c8:09:cd:57:
13:c2:85:40:a7:04:06:14:60:7f:08:1f:3c:48:25:
1e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:80:EB:9B:BD:42:83:E1:4C:EA:CB:DF:01:FA:D3:05:63:9E:A5:12
X509v3 Authority Key Identifier:
keyid:C4:1C:D0:85:A3:2A:E4:C2:B0:E8:68:FF:27:FE:B7:17:0C:CC:F5:FB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/xBzQhaMq5MKw6Gj_J_63FwzM9fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xBzQhaMq5MKw6Gj_J_63FwzM9fs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/xBzQhaMq5MKw6Gj_J_63FwzM9fs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:4d:c4:a4:c0:23:fd:05:84:ae:88:59:62:e9:ca:76:64:3d:
01:3f:cf:30:5f:0a:e5:5d:f7:5a:32:1a:93:42:1b:e8:09:23:
50:44:2e:25:cd:b0:d0:52:57:3e:f4:66:8b:88:92:a5:73:e8:
dd:a0:a9:53:10:5b:42:7b:c8:11:87:6b:3c:77:a0:cc:06:8e:
71:17:a7:68:ed:55:58:51:0f:70:7e:90:97:de:06:37:d2:9f:
88:10:e6:fd:03:7a:49:a9:48:f5:75:62:41:ff:59:9c:0e:5f:
c7:90:e3:4a:90:59:89:0f:b6:fb:22:c8:01:2d:df:f0:03:4f:
50:82:d2:d6:3c:76:2a:34:d8:87:72:8d:61:3e:7c:20:37:5d:
b5:1c:c5:8a:0f:7d:8f:f4:70:7d:09:11:0e:a5:dc:8e:80:b7:
4a:b2:0a:ec:17:be:a7:df:d6:ad:b0:76:03:c4:6a:c1:7e:9c:
08:5e:1c:2a:cc:30:c4:29:9a:5c:cf:e8:58:0a:12:a4:bf:95:
9a:89:a6:cf:d5:b0:1a:ca:2a:59:5f:bf:b3:de:7e:4f:a0:f2:
59:a2:21:14:38:43:4c:d4:c8:d8:8d:3c:a2:31:26:6c:20:8c:
a3:49:9f:2b:d6:7f:46:61:6c:00:c5:ac:de:d7:e1:dd:d8:9c:
9a:a3:23:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:55 2025 by rpki-client