Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft
File: ZpmXJxYiITikWjnrC_qoFJaDQK4.mft (raw, json)
Hash identifier: EO+/AG/VR5K6yZBeibtwkvN6XREta0440fjw8MYF3pw=
Subject key identifier: 67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1
Authority key identifier: 66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE
Certificate issuer: /CN=6699972716222138A45A39EB0BFAA814968340AE
Certificate serial: 046D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft
Manifest number: 046D
Signing time: Fri 04 Apr 2025 19:05:26 +0000
Manifest this update: Fri 04 Apr 2025 19:05:26 +0000
Manifest next update: Sat 05 Apr 2025 01:05:26 +0000
Files and hashes: 1: ZpmXJxYiITikWjnrC_qoFJaDQK4.crl (hash: ebsXTx4wga1pRuIN1INsaK4MBkH5tHJTB6EZhkKqRn8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1133 (0x46d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6699972716222138A45A39EB0BFAA814968340AE
Validity
Not Before: Apr 4 19:05:26 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=67114EE963B683F8CC94FE97BBEACE592E4020C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:4d:a1:bd:23:f1:5f:1f:47:b6:95:7b:04:
90:3c:3e:af:9e:a5:ab:24:d8:cb:8c:01:86:f3:c1:
27:ae:28:97:17:16:92:d2:ea:38:dd:11:28:19:d3:
a4:c2:43:b3:82:28:ad:ae:9f:0e:de:1d:81:9b:32:
04:87:a9:26:6f:5c:19:a8:fa:15:c7:a6:7a:3e:e9:
2d:c7:56:5f:e2:66:fa:a2:a3:ee:68:e2:f7:a9:7e:
af:3a:f3:b3:81:54:90:a4:30:64:5b:e5:23:61:4f:
45:cb:15:b3:e3:85:56:e8:ee:87:1a:9e:11:5f:a5:
8c:5f:0e:ab:9f:2d:a8:a1:57:3d:9f:99:fe:ef:53:
48:9d:58:bd:11:4f:7e:f1:d0:f8:3a:9b:e4:c6:ca:
0d:d7:d5:d3:46:10:de:0d:1b:2e:3f:3e:c2:57:f8:
5d:cc:56:b9:df:08:43:e0:f3:16:03:16:cf:8b:2b:
19:3e:ef:ef:24:59:dc:bc:79:2d:56:0d:fe:9d:03:
2e:47:2f:ea:37:5c:d2:39:df:95:7f:9e:13:63:93:
68:ff:64:78:c2:67:57:27:86:89:88:c2:eb:c7:55:
a2:72:78:a4:35:9c:a4:af:44:35:fd:e1:9e:b2:61:
ea:41:74:08:28:9b:62:62:2c:49:fa:14:20:dd:f7:
50:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1
X509v3 Authority Key Identifier:
keyid:66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:79:14:6c:9b:c4:d1:97:de:8e:be:0b:4e:a3:79:f7:5d:55:
90:bf:cb:91:a4:bb:7f:b5:94:9f:fa:89:f2:0f:bd:99:26:55:
cb:84:59:b4:e8:37:8f:8e:47:41:48:15:d2:eb:c3:f3:d9:49:
36:c1:94:23:56:3b:e0:75:11:b0:94:9f:f8:86:a7:91:52:f1:
8e:02:5c:09:54:fe:b0:a4:08:14:c4:a1:51:c1:58:bd:b8:01:
43:20:9d:1a:95:ec:dc:17:25:c8:8a:b1:06:29:31:b2:e7:3b:
c6:4e:b6:bb:61:60:53:2c:35:6a:25:90:be:1a:6d:8d:84:93:
19:9e:42:2a:22:72:25:f2:f1:77:76:ae:9a:f8:4c:30:d4:b1:
18:0c:12:e8:1b:ab:a3:9f:ed:d3:5f:b8:d4:99:a6:15:ad:10:
a3:9e:49:a2:30:bf:27:99:63:dc:9f:6e:06:7f:e9:05:f2:3d:
dd:c4:12:69:c6:2a:19:72:5f:47:d0:c3:b8:72:f2:2c:9a:91:
1a:1e:8b:bf:77:f6:22:5d:c4:a3:7b:d4:99:de:81:6d:48:e7:
81:5b:08:68:81:a2:61:90:c3:17:5d:c3:ae:ff:fb:05:fd:02:
41:b4:5f:03:ca:a3:c4:2d:21:cb:fd:fa:9b:cd:1b:c4:54:9a:
40:14:60:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:14:34 2025 by rpki-client