Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3306/NFr5ZypcY4yBe6_vTb251zV1P08.mft
File: NFr5ZypcY4yBe6_vTb251zV1P08.mft (raw, json)
Hash identifier: 5dA9KIPCRTB6y605tojzOV8Ulw+cSBLLDKIte2F9ktc=
Subject key identifier: 55:3A:0F:78:47:27:75:D8:D1:98:A4:B1:E2:F4:D2:84:9F:34:9B:4E
Authority key identifier: 34:5A:F9:67:2A:5C:63:8C:81:7B:AF:EF:4D:BD:B9:D7:35:75:3F:4F
Certificate issuer: /CN=345AF9672A5C638C817BAFEF4DBDB9D735753F4F
Certificate serial: 04BB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NFr5ZypcY4yBe6_vTb251zV1P08.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/NFr5ZypcY4yBe6_vTb251zV1P08.mft
Manifest number: 04BB
Signing time: Fri 21 Mar 2025 00:28:27 +0000
Manifest this update: Fri 21 Mar 2025 00:28:27 +0000
Manifest next update: Fri 21 Mar 2025 06:28:27 +0000
Files and hashes: 1: NFr5ZypcY4yBe6_vTb251zV1P08.crl (hash: fGHJy3SBjul3Vl7H8UTEFvMR5sCp9jEFpGQEG1k1cDA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1211 (0x4bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345AF9672A5C638C817BAFEF4DBDB9D735753F4F
Validity
Not Before: Mar 21 00:28:27 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=553A0F78472775D8D198A4B1E2F4D2849F349B4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b0:76:c3:5a:82:84:e4:a3:05:d7:fa:db:53:
89:f1:9d:0f:10:f1:34:db:4b:92:0d:a8:2f:45:8d:
c7:4c:a8:1d:9a:72:66:aa:d1:61:2d:48:e9:3b:87:
12:70:9e:79:31:e4:0e:54:12:43:99:a9:b8:4a:69:
47:71:4f:51:21:dd:15:47:4a:10:f7:69:2a:27:bd:
9b:dc:9f:26:a8:a6:8f:40:50:3f:34:5e:df:15:c8:
42:ac:f6:63:79:39:b0:6f:de:92:d8:6b:f4:03:b4:
30:f3:ad:3f:29:15:b4:8c:0b:bf:15:f6:41:21:08:
13:0b:90:73:86:69:2f:23:d0:b4:af:3c:18:b5:b6:
33:56:d7:26:44:fe:9d:63:7a:4e:af:1d:f5:14:58:
8a:8e:d6:9f:79:40:ea:77:be:32:2a:35:de:ce:ed:
05:8d:9d:ca:4a:47:e7:c5:ba:80:b6:68:17:fd:78:
8b:d3:67:07:62:0c:c4:e7:a6:6d:06:40:da:46:d7:
8d:18:c9:67:74:1b:1a:f4:4c:d1:52:4b:d3:f9:9f:
d9:30:d5:bb:e6:ff:43:1a:2c:23:0a:33:20:26:b2:
b1:43:70:b0:76:4f:f0:11:f7:ee:a8:3a:b1:81:8c:
ad:bc:99:6e:a1:a3:32:1c:ad:2c:62:53:54:91:3f:
88:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3A:0F:78:47:27:75:D8:D1:98:A4:B1:E2:F4:D2:84:9F:34:9B:4E
X509v3 Authority Key Identifier:
keyid:34:5A:F9:67:2A:5C:63:8C:81:7B:AF:EF:4D:BD:B9:D7:35:75:3F:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/NFr5ZypcY4yBe6_vTb251zV1P08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NFr5ZypcY4yBe6_vTb251zV1P08.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/NFr5ZypcY4yBe6_vTb251zV1P08.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:12:41:82:77:56:a1:24:55:41:bf:20:9d:88:7a:02:28:af:
ef:4b:c0:ea:74:2a:3d:8e:5a:51:16:f5:94:ae:e9:0d:83:ae:
fa:5f:dd:c6:3b:ac:8b:42:21:d4:45:bc:57:c3:ba:8b:27:ad:
ee:ef:f7:eb:b0:a3:7d:12:5c:f7:99:b4:99:da:18:77:93:ea:
af:eb:7c:09:89:18:98:f2:07:43:03:4c:68:8f:b2:21:58:1c:
a6:9e:85:ea:5d:f5:3e:be:bd:c9:2a:2e:43:21:7d:7a:59:8f:
7b:34:36:c9:dd:20:06:84:58:6a:33:ac:a5:7c:42:7d:97:36:
82:89:7f:35:13:01:b9:77:a0:95:35:6f:53:a1:2a:f6:d7:9f:
9d:28:bb:27:d9:f0:8c:50:e7:76:06:b7:7a:6a:08:00:35:4f:
3d:4b:3c:bc:d0:b9:70:46:44:91:e9:f6:46:81:d9:8a:3f:68:
fa:d4:01:43:22:a9:7c:df:27:96:32:0a:94:85:eb:ee:20:1d:
97:d8:e4:d7:1e:8a:5f:69:50:77:d4:27:e3:f4:11:85:70:8c:
b3:2b:f1:0b:99:d5:20:d3:0a:34:01:d6:d7:4a:9c:c1:5c:3b:
85:be:4d:db:a9:35:cf:48:79:49:16:d3:55:f7:68:2d:3b:8d:
8b:56:a4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:00 2025 by rpki-client