Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3300/UUn4HVgYqKIsQqn3Cfqc0VS91XA.mft
File: UUn4HVgYqKIsQqn3Cfqc0VS91XA.mft (raw, json)
Hash identifier: VActMmf/ESZfY14p8Pspv3fAgfm7SaNLP3VNP/YYmks=
Subject key identifier: CA:73:60:9C:B6:C5:E9:35:EB:2B:0F:D7:C6:5D:7F:E5:4E:D2:23:0F
Authority key identifier: 51:49:F8:1D:58:18:A8:A2:2C:42:A9:F7:09:FA:9C:D1:54:BD:D5:70
Certificate issuer: /CN=5149F81D5818A8A22C42A9F709FA9CD154BDD570
Certificate serial: 0528
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UUn4HVgYqKIsQqn3Cfqc0VS91XA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/UUn4HVgYqKIsQqn3Cfqc0VS91XA.mft
Manifest number: 0528
Signing time: Fri 21 Mar 2025 00:31:56 +0000
Manifest this update: Fri 21 Mar 2025 00:31:56 +0000
Manifest next update: Fri 21 Mar 2025 06:31:56 +0000
Files and hashes: 1: UUn4HVgYqKIsQqn3Cfqc0VS91XA.crl (hash: zYJGS/LYsCdxqr5gatY4oSBLd6XdEsKbMeRMlJJ6BuI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1320 (0x528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5149F81D5818A8A22C42A9F709FA9CD154BDD570
Validity
Not Before: Mar 21 00:31:56 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CA73609CB6C5E935EB2B0FD7C65D7FE54ED2230F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:94:61:3a:8c:48:d9:7a:84:79:ed:3d:ae:
a2:3f:d1:d9:ba:6f:99:98:b0:60:7e:45:4f:d6:81:
ff:49:9e:01:d2:14:f6:31:a1:f8:f7:ab:93:2c:69:
0b:48:26:40:85:32:58:ca:1d:33:83:54:fd:22:6e:
9c:0d:ef:f9:4a:e3:86:a9:f5:6d:f1:13:9a:7e:b2:
73:fe:7d:1e:e4:db:84:c8:d3:de:7d:24:0a:5e:6b:
05:77:23:05:20:37:49:b8:85:4f:96:31:e7:0a:25:
6a:c8:8e:f0:c2:a9:38:49:bd:cb:f8:fa:eb:92:e1:
a6:88:67:2b:f2:0e:0d:eb:80:2f:4b:eb:44:40:d4:
11:ec:3d:e4:1f:93:67:69:bf:87:54:56:25:b0:4a:
ed:49:f8:e9:33:89:fa:07:ef:ab:a2:63:1d:f8:b8:
e2:9d:5c:1f:ea:1c:4f:f8:50:27:8f:71:3a:31:cd:
86:68:f7:ab:a8:ec:15:85:a0:5d:92:43:da:ac:0a:
cf:3b:5a:49:08:69:ba:57:44:b2:89:26:2a:eb:27:
8d:3d:50:38:8b:c5:20:76:1c:c9:59:26:f7:98:e5:
70:02:d2:1b:0b:49:8e:0b:28:93:cd:2e:d2:d8:dc:
00:35:8c:cd:3b:cf:2e:2e:bb:53:5e:fc:ff:0e:ff:
61:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:73:60:9C:B6:C5:E9:35:EB:2B:0F:D7:C6:5D:7F:E5:4E:D2:23:0F
X509v3 Authority Key Identifier:
keyid:51:49:F8:1D:58:18:A8:A2:2C:42:A9:F7:09:FA:9C:D1:54:BD:D5:70
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/UUn4HVgYqKIsQqn3Cfqc0VS91XA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UUn4HVgYqKIsQqn3Cfqc0VS91XA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/UUn4HVgYqKIsQqn3Cfqc0VS91XA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:af:95:40:db:76:19:0e:0e:03:ef:29:31:32:10:0e:87:50:
9b:aa:02:59:b4:f0:56:e1:2d:27:42:d5:4b:6c:c7:e5:7a:14:
1d:6a:9b:41:22:8e:2f:69:fe:0e:a3:41:55:0c:37:eb:ea:40:
b6:24:63:0e:7d:24:d1:e4:2c:3b:61:41:b4:63:71:20:0b:67:
02:6c:c1:6f:47:2d:c6:b0:96:9c:f4:3b:07:77:1f:e8:68:dd:
7a:78:6f:18:1f:fd:aa:40:90:fe:8b:4c:c4:3a:b6:5d:b4:dd:
d1:30:df:51:cc:d5:db:e6:96:c7:ce:b9:ae:c3:9e:f6:09:14:
5c:9b:f8:6f:6f:c1:0f:21:68:06:c4:b3:38:7a:f2:c2:08:93:
a6:15:f8:9c:19:7d:e3:11:a2:18:f6:41:61:c2:95:9e:5f:37:
4f:bd:a9:6c:8a:f3:9c:b0:77:17:a0:de:46:e5:3d:26:73:3e:
bf:f3:e2:e7:88:28:8b:7c:12:8b:5c:66:33:e2:e2:49:98:ce:
b0:43:67:32:3b:75:a2:33:22:bb:dd:8a:79:21:f6:6d:a3:70:
c9:1a:b9:28:0a:c1:03:51:82:da:f1:1f:38:2d:ef:82:26:bc:
27:ad:e8:39:2f:cc:1f:00:31:ad:47:0b:cf:6b:87:79:51:0a:
b2:9b:65:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:42 2025 by rpki-client