Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3307/4D4PjKiQjhc6NwrDMIv3bA6iep0.mft
File: 4D4PjKiQjhc6NwrDMIv3bA6iep0.mft (raw, json)
Hash identifier: FFc3ALM4x3uTISGOjTy5lfJgft7sWYvBHjVdBD/P630=
Subject key identifier: 74:A7:94:06:07:38:05:A9:F4:45:68:1B:96:96:9F:04:F5:E1:F5:92
Authority key identifier: E0:3E:0F:8C:A8:90:8E:17:3A:37:0A:C3:30:8B:F7:6C:0E:A2:7A:9D
Certificate issuer: /CN=E03E0F8CA8908E173A370AC3308BF76C0EA27A9D
Certificate serial: 04FF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4D4PjKiQjhc6NwrDMIv3bA6iep0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/4D4PjKiQjhc6NwrDMIv3bA6iep0.mft
Manifest number: 04FF
Signing time: Fri 11 Apr 2025 16:36:21 +0000
Manifest this update: Fri 11 Apr 2025 16:36:21 +0000
Manifest next update: Fri 11 Apr 2025 22:36:21 +0000
Files and hashes: 1: 4D4PjKiQjhc6NwrDMIv3bA6iep0.crl (hash: BaNe4RXeem6+ET2YXz35BtMc+CZ/0xqqDqxl5eNpt6w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1279 (0x4ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E03E0F8CA8908E173A370AC3308BF76C0EA27A9D
Validity
Not Before: Apr 11 16:36:21 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=74A79406073805A9F445681B96969F04F5E1F592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f2:3a:9d:5e:bc:cb:a1:ee:ef:5f:8f:2a:0d:
5d:b2:d6:88:1a:ae:d6:12:50:ac:8b:44:0c:e8:ba:
42:2d:b8:55:49:0a:75:e9:f5:96:43:7c:08:01:cc:
23:41:32:00:d5:ca:81:29:88:0c:32:80:55:4b:f4:
54:b6:b7:1d:cf:cb:91:05:3f:ae:80:e8:9c:5b:e9:
55:81:f9:2c:73:99:d9:ba:20:43:ec:d0:b0:9d:f4:
16:f9:27:f3:1a:c4:03:0c:c2:3e:8e:fe:ff:22:d1:
8e:50:30:36:5e:3c:38:0c:48:3b:99:6c:35:3a:39:
bc:78:68:3f:c8:3d:a9:c4:77:01:79:21:0c:1f:ba:
e6:70:33:21:91:bb:a4:2a:30:10:82:a6:90:93:85:
84:9b:30:76:60:ec:31:e9:67:5d:51:7e:5a:f3:15:
e2:64:f8:ac:d8:02:86:b7:fc:40:be:3f:c3:bd:10:
3b:20:ea:76:27:4f:65:41:bd:a7:70:5a:ba:77:52:
bc:b6:cf:4f:f6:50:d6:cf:d6:2b:ce:0b:80:03:d8:
f8:aa:8c:02:0a:40:7a:03:89:e9:ba:be:a9:f6:85:
ff:45:d7:1a:b2:bf:89:54:5d:f0:7d:a3:a4:bc:8d:
4b:1a:6a:aa:62:5e:e6:90:11:0e:2a:9a:43:b6:a6:
44:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A7:94:06:07:38:05:A9:F4:45:68:1B:96:96:9F:04:F5:E1:F5:92
X509v3 Authority Key Identifier:
keyid:E0:3E:0F:8C:A8:90:8E:17:3A:37:0A:C3:30:8B:F7:6C:0E:A2:7A:9D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/4D4PjKiQjhc6NwrDMIv3bA6iep0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4D4PjKiQjhc6NwrDMIv3bA6iep0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/4D4PjKiQjhc6NwrDMIv3bA6iep0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:4e:4e:6f:fd:b2:22:13:e3:4a:a0:f6:0d:8f:94:0e:7f:36:
a9:48:00:fa:ed:1b:8f:33:56:86:35:80:5f:85:8f:e3:1f:ad:
52:64:69:db:61:1e:5d:37:53:11:c9:55:ff:be:cf:32:b5:32:
04:10:bc:df:5a:43:b4:44:05:32:a3:65:aa:56:85:57:e3:c9:
4f:07:7f:c0:76:a5:bb:13:2b:60:7b:3e:1d:e9:b8:b7:b7:76:
d0:99:98:e7:84:e0:70:fa:5c:19:13:a9:19:6a:84:12:23:78:
ba:36:c6:84:88:58:2c:90:9e:d3:f1:95:d1:fe:e9:bd:50:fc:
45:2e:f7:37:76:9c:43:4d:cd:4a:a0:38:a7:e3:c9:cd:9b:f1:
0d:80:5f:d8:f1:5d:52:d8:27:0a:36:e2:a7:f5:6e:6c:67:91:
03:fc:6a:51:a4:2e:00:fc:35:86:d5:c1:aa:f1:6e:14:32:ad:
e2:19:dc:12:73:f3:a2:6b:b4:db:df:8d:3a:62:24:11:d8:b4:
ee:99:48:78:c0:93:c9:8a:01:de:97:99:97:f5:5b:41:c3:84:
9f:d0:72:f1:15:4c:b5:79:64:74:9b:b5:b3:86:11:e6:83:9b:
92:76:4f:71:3d:68:54:50:38:31:16:d1:72:8c:ff:a0:f3:4f:
da:dd:65:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:53:02 2025 by rpki-client