Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
File: nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft (raw, json)
Hash identifier: q7gEpMm7/H3uaF3nBVQQjGqbHkXtRkcIPLUErDlyB5w=
Subject key identifier: 7A:57:21:AF:CD:60:A6:A8:A6:05:AF:B2:ED:2F:29:0C:DB:87:3B:07
Authority key identifier: 9C:03:80:B9:17:46:0C:50:70:37:F3:CA:7F:53:B4:2B:C2:B8:2D:E7
Certificate issuer: /CN=9C0380B917460C507037F3CA7F53B42BC2B82DE7
Certificate serial: 0428
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nAOAuRdGDFBwN_PKf1O0K8K4Lec.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
Manifest number: 0428
Signing time: Sat 29 Mar 2025 09:29:34 +0000
Manifest this update: Sat 29 Mar 2025 09:29:34 +0000
Manifest next update: Sat 29 Mar 2025 15:29:34 +0000
Files and hashes: 1: nAOAuRdGDFBwN_PKf1O0K8K4Lec.crl (hash: xFHcYeqScuF9bWjReFtZhl9gNuhVIBiTjurRTgFy3GA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1064 (0x428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C0380B917460C507037F3CA7F53B42BC2B82DE7
Validity
Not Before: Mar 29 09:29:34 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7A5721AFCD60A6A8A605AFB2ED2F290CDB873B07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b1:d9:92:c7:fd:89:93:04:00:e3:6d:1f:f9:
8d:7a:54:07:e3:48:eb:59:16:8a:db:e3:6f:93:b3:
49:bf:1f:ed:1f:41:03:4e:ae:18:7b:1b:cc:7e:ee:
2f:28:96:5f:f4:27:03:d6:ed:14:5f:23:bf:70:17:
71:72:1e:a1:ff:74:9c:09:59:6a:b4:f3:d3:cb:de:
43:68:17:f0:c9:b7:b9:f2:3a:d9:1d:25:78:6a:19:
2a:71:0b:06:e7:82:88:f0:48:72:32:fb:fc:92:fe:
91:62:b9:15:ed:84:92:a0:28:f6:4d:b5:c6:0b:e5:
3d:c2:19:de:17:8d:73:2f:98:b8:3e:a6:1d:ea:a4:
20:df:82:f0:1b:3f:c1:20:51:fb:cd:ff:48:ec:1a:
5b:e1:82:14:dd:dd:f9:70:bd:b9:97:73:3a:93:36:
40:c4:d2:40:75:1a:e9:23:9a:22:7c:62:99:a9:e7:
3e:9d:f3:2d:e6:da:90:57:de:50:a2:cb:7d:1d:cf:
d5:fd:45:32:45:b3:e0:3e:5d:39:ba:06:12:4a:c9:
d3:2a:00:75:95:0c:ee:93:5f:c4:a3:3c:94:4c:a1:
94:11:fa:2a:4b:71:10:d6:fd:d4:a9:7e:12:be:f5:
7f:9b:92:ee:c8:81:9f:c4:2e:37:ef:c9:ce:9f:d9:
12:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:57:21:AF:CD:60:A6:A8:A6:05:AF:B2:ED:2F:29:0C:DB:87:3B:07
X509v3 Authority Key Identifier:
keyid:9C:03:80:B9:17:46:0C:50:70:37:F3:CA:7F:53:B4:2B:C2:B8:2D:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nAOAuRdGDFBwN_PKf1O0K8K4Lec.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c0:9c:20:4e:bc:75:16:a1:42:d7:fa:dc:62:1f:c8:82:6f:
7a:86:56:46:24:6c:09:16:a9:a9:94:9b:b9:78:93:9e:de:3d:
c9:de:ef:97:bd:ab:19:3d:b6:c7:e8:76:9d:36:35:6c:14:69:
54:3f:cf:b5:64:b2:6b:b9:10:ff:bf:07:44:7b:c8:e4:58:f1:
3c:f5:bf:ea:a7:81:c9:34:6c:ec:ec:25:5c:51:04:ba:d5:3d:
7b:9e:40:6d:5e:f5:c8:3c:82:40:13:45:a0:59:12:af:d8:63:
e4:9a:b6:27:d4:45:db:69:06:96:08:1f:5a:c3:f8:cd:fb:64:
f4:aa:6a:22:8c:e2:ff:2d:c6:8c:37:02:b9:ea:cf:61:f6:24:
e1:8d:b9:eb:3a:1d:99:b1:4c:53:cc:a4:d2:6b:ce:36:09:95:
82:d7:d8:25:c2:52:86:3d:c9:c2:6d:f2:b0:b6:a6:04:63:f8:
60:15:d5:55:40:87:ab:ff:4e:5f:1c:fe:2b:63:89:bd:64:ee:
da:18:e5:ed:12:05:53:bc:c3:cc:eb:0b:2f:ed:08:09:5a:9f:
d5:93:f9:1c:bf:0d:3c:ea:fa:0b:19:6e:47:88:0d:a8:36:9a:
d3:ac:6e:4b:ab:44:75:e7:a0:4b:2c:89:d0:06:69:45:fe:71:
95:76:97:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:54 2025 by rpki-client