Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3313/1jfzzebYbvkaDKnPorWwML7sCUA.mft
File: 1jfzzebYbvkaDKnPorWwML7sCUA.mft (raw, json)
Hash identifier: P2FAnMo0acqY8A1edP7quMC3ZSOFSrOPQdBCp+5C2wQ=
Subject key identifier: DC:FD:43:DA:80:B6:53:C7:05:87:FF:30:64:10:9E:DD:2C:50:86:64
Authority key identifier: D6:37:F3:CD:E6:D8:6E:F9:1A:0C:A9:CF:A2:B5:B0:30:BE:EC:09:40
Certificate issuer: /CN=D637F3CDE6D86EF91A0CA9CFA2B5B030BEEC0940
Certificate serial: 03FC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1jfzzebYbvkaDKnPorWwML7sCUA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/1jfzzebYbvkaDKnPorWwML7sCUA.mft
Manifest number: 03FC
Signing time: Fri 21 Mar 2025 01:56:38 +0000
Manifest this update: Fri 21 Mar 2025 01:56:38 +0000
Manifest next update: Fri 21 Mar 2025 07:56:38 +0000
Files and hashes: 1: 1jfzzebYbvkaDKnPorWwML7sCUA.crl (hash: 7XlhsOL6w9s3qlYJ8+MRxgs8DXzUeys7n/wfObNlPhQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1020 (0x3fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D637F3CDE6D86EF91A0CA9CFA2B5B030BEEC0940
Validity
Not Before: Mar 21 01:56:38 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DCFD43DA80B653C70587FF3064109EDD2C508664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:4d:63:7e:6d:17:70:9d:81:b7:94:36:2b:
09:01:6e:dc:5f:1b:7d:24:9a:bb:db:ac:a8:fd:a1:
c2:da:3d:9e:39:4e:b5:ac:cb:20:46:e9:44:1e:f2:
51:30:f8:c8:86:3a:66:58:1e:b9:e6:5d:52:99:8e:
74:6c:37:44:eb:84:97:8d:3d:e5:e3:f1:dc:54:7f:
b8:db:b5:14:46:96:4c:a1:aa:2f:36:e1:aa:ca:12:
55:30:64:66:56:15:1c:6f:bd:ba:60:e7:d3:ea:07:
76:4d:16:dc:d5:73:10:f2:12:e6:f7:25:c7:11:23:
37:10:01:af:69:82:bf:7c:e0:eb:ae:1b:c5:bb:24:
41:fe:7b:46:f7:d3:d8:64:65:a2:03:69:3f:e0:7a:
44:23:71:8f:be:81:48:4a:c6:d3:db:63:65:d0:70:
e1:e2:78:f9:08:66:a0:22:7c:e7:55:5c:b4:f0:d9:
07:95:58:2b:ad:a2:52:2f:bd:f4:a2:66:07:fa:36:
0d:54:6c:bf:96:46:b5:ec:d8:b9:d7:0d:6c:0d:8a:
b4:29:c5:ed:be:ad:51:66:43:fc:70:a0:c0:59:18:
68:9b:75:f9:15:f9:db:69:96:48:7e:33:93:06:d4:
06:71:6a:50:d2:aa:b1:ba:36:32:63:8c:c9:d5:f5:
97:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FD:43:DA:80:B6:53:C7:05:87:FF:30:64:10:9E:DD:2C:50:86:64
X509v3 Authority Key Identifier:
keyid:D6:37:F3:CD:E6:D8:6E:F9:1A:0C:A9:CF:A2:B5:B0:30:BE:EC:09:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/1jfzzebYbvkaDKnPorWwML7sCUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1jfzzebYbvkaDKnPorWwML7sCUA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/1jfzzebYbvkaDKnPorWwML7sCUA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:2a:ca:78:d7:d7:4e:e3:a0:21:2d:88:3f:39:23:84:cf:64:
46:96:1b:ff:d6:8b:09:fc:cc:d3:4d:45:eb:e1:00:bf:12:a6:
1f:12:f7:c6:a4:b1:ce:c0:f8:22:a5:aa:d6:28:af:b4:e9:5b:
38:ae:aa:f7:16:4c:c2:79:94:f8:33:c5:3c:01:3f:7c:46:50:
56:a4:48:e8:0c:66:3d:e1:bc:f3:07:93:2b:86:ef:5e:9f:a0:
05:05:12:bc:c0:dd:d7:3b:d0:86:0b:76:39:35:f7:06:d7:01:
cb:71:92:a1:7d:b5:59:9a:ee:50:97:cf:18:db:3b:2e:fc:88:
71:85:86:87:09:b2:e0:c4:34:a5:9f:69:f6:de:7f:0d:f7:bb:
b6:31:12:20:a0:07:5c:bf:d1:c2:c0:2e:cf:6d:51:b7:92:0c:
aa:df:c5:20:a3:92:75:a7:11:fc:a4:72:1a:af:e3:f9:36:6b:
c8:54:1d:84:c2:02:e2:74:26:82:06:ce:d5:59:0d:6d:75:67:
94:26:2f:ed:15:d8:89:ca:f1:dc:46:df:85:fd:3e:ea:85:2b:
1a:82:40:ae:c4:ab:20:e8:3e:75:75:46:b1:f8:16:57:f6:be:
ce:ad:72:f2:5f:2f:cc:b6:1a:3d:06:7e:c5:36:af:43:5e:5e:
8b:12:93:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:36 2025 by rpki-client