Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3312/iKjPlfPBdEQkezVk72xrva8tcMA.mft
File: iKjPlfPBdEQkezVk72xrva8tcMA.mft (raw, json)
Hash identifier: 94tlxmxpecFgJlZEOrE7GAiHXO2aH2GsJEBmMdCRMtY=
Subject key identifier: 27:62:90:1D:BF:6C:FE:9E:16:6C:8E:CA:2F:B5:EA:BF:A7:67:69:4D
Authority key identifier: 88:A8:CF:95:F3:C1:74:44:24:7B:35:64:EF:6C:6B:BD:AF:2D:70:C0
Certificate issuer: /CN=88A8CF95F3C17444247B3564EF6C6BBDAF2D70C0
Certificate serial: 03FA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iKjPlfPBdEQkezVk72xrva8tcMA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/iKjPlfPBdEQkezVk72xrva8tcMA.mft
Manifest number: 03FA
Signing time: Fri 21 Mar 2025 00:27:16 +0000
Manifest this update: Fri 21 Mar 2025 00:27:16 +0000
Manifest next update: Fri 21 Mar 2025 06:27:16 +0000
Files and hashes: 1: iKjPlfPBdEQkezVk72xrva8tcMA.crl (hash: 9Nfl+FgO2MBdOuQgs4dzHGRMhg5u4POoUgCkjhJ2HlE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1018 (0x3fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88A8CF95F3C17444247B3564EF6C6BBDAF2D70C0
Validity
Not Before: Mar 21 00:27:16 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=2762901DBF6CFE9E166C8ECA2FB5EABFA767694D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:c8:3e:39:cb:ca:1a:be:d5:b4:ec:e1:1b:
7d:f0:0d:1e:4b:1e:62:06:9b:49:9a:91:dd:56:61:
df:d6:09:3e:8c:eb:90:dd:99:4a:95:af:9a:ac:e6:
2e:49:47:d7:f3:4a:79:0a:db:1e:83:05:ac:8f:43:
5a:c3:1e:14:fa:e9:25:21:b7:66:d7:5d:d9:ed:96:
0c:bd:7e:f4:b7:fe:db:8a:4f:f2:13:d5:9f:b8:a8:
f9:a5:c0:fa:94:1a:85:d8:2d:24:90:f0:de:9f:e4:
25:3c:00:5c:39:bc:4d:28:6f:f0:3a:c0:14:62:7f:
c4:03:99:63:88:e6:98:a8:69:14:28:44:65:da:f7:
10:54:b5:5a:43:1b:f1:e8:4e:61:b9:0e:ea:67:c3:
62:77:46:cc:af:c7:c7:9a:bd:8a:bd:01:8a:25:c8:
b3:08:b0:a9:46:b6:c8:ec:9e:22:fe:69:b3:33:a3:
a5:17:f7:1b:8e:d5:52:75:44:df:ac:30:4f:c7:0b:
50:da:a3:12:12:e9:eb:d1:bf:ff:7a:77:49:49:ff:
7a:4a:59:66:f2:3f:92:88:1f:90:d4:3f:71:59:fc:
72:84:a7:29:7a:6a:ab:7b:4a:a2:1c:9b:29:b5:19:
64:1d:2d:18:08:1d:0e:8c:87:09:d3:46:4e:ff:04:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:62:90:1D:BF:6C:FE:9E:16:6C:8E:CA:2F:B5:EA:BF:A7:67:69:4D
X509v3 Authority Key Identifier:
keyid:88:A8:CF:95:F3:C1:74:44:24:7B:35:64:EF:6C:6B:BD:AF:2D:70:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/iKjPlfPBdEQkezVk72xrva8tcMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iKjPlfPBdEQkezVk72xrva8tcMA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/iKjPlfPBdEQkezVk72xrva8tcMA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:d7:c8:de:66:7f:59:14:98:6d:1c:e1:b8:14:b8:3d:00:a5:
5c:fd:9a:51:07:6e:c7:a5:fb:94:0d:5f:2d:1b:83:69:3c:32:
58:08:15:59:78:f8:eb:4b:14:1d:f0:d9:7c:99:38:79:d0:f9:
c7:b3:a3:f3:1d:40:84:ba:d4:2c:02:81:ae:46:9c:05:6c:aa:
29:76:0e:44:b9:74:ff:42:a1:a4:ff:63:b5:0e:39:20:d7:8e:
a9:1c:39:cc:24:5b:90:2c:73:4a:9d:e7:54:52:e9:26:ba:63:
fa:c2:85:e5:94:04:20:56:83:3b:fd:08:49:60:44:be:19:b7:
5e:ec:c1:22:32:83:54:1e:9d:b2:33:63:81:04:2d:7b:57:63:
03:e0:c2:33:92:12:bf:fe:d0:3e:bc:97:7b:c1:76:11:64:83:
0f:e6:bb:c5:b8:48:71:60:bf:9a:12:76:82:4a:ba:71:55:b2:
99:45:f6:64:c3:25:0c:6b:b4:cb:0a:87:f1:0c:11:eb:7a:24:
6c:86:26:93:9b:f3:59:d5:10:a3:35:14:e0:c9:14:db:cf:5e:
3f:8a:b1:82:b3:33:fc:c6:c6:da:9b:ef:41:cf:4e:91:0a:87:
42:59:18:14:6e:95:52:fe:d5:8b:f9:a5:41:ca:a1:8e:eb:a4:
42:65:33:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:35:21 2025 by rpki-client