Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3314/JKE7dSyiLWMkgdhuY953eAuDMfw.mft
File: JKE7dSyiLWMkgdhuY953eAuDMfw.mft (raw, json)
Hash identifier: Le/lMNk7kAb/dYAL/F+0lfA2loJn4z8vvvNaKcpC5ro=
Subject key identifier: 90:25:59:F5:6A:0D:B1:A4:33:74:A8:E6:69:BC:ED:C3:8D:C0:BB:B0
Authority key identifier: 24:A1:3B:75:2C:A2:2D:63:24:81:D8:6E:63:DE:77:78:0B:83:31:FC
Certificate issuer: /CN=24A13B752CA22D632481D86E63DE77780B8331FC
Certificate serial: 03FA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JKE7dSyiLWMkgdhuY953eAuDMfw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/JKE7dSyiLWMkgdhuY953eAuDMfw.mft
Manifest number: 03FA
Signing time: Fri 21 Mar 2025 00:30:40 +0000
Manifest this update: Fri 21 Mar 2025 00:30:40 +0000
Manifest next update: Fri 21 Mar 2025 06:30:40 +0000
Files and hashes: 1: JKE7dSyiLWMkgdhuY953eAuDMfw.crl (hash: fAud52OkotasPdzYc0CNbpPdWjpfJDz6MiCR+gPqm+0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1018 (0x3fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24A13B752CA22D632481D86E63DE77780B8331FC
Validity
Not Before: Mar 21 00:30:40 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=902559F56A0DB1A43374A8E669BCEDC38DC0BBB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:1f:12:43:ec:03:dc:78:af:4d:0d:b4:97:
49:68:e6:45:43:e3:a8:03:b8:3f:60:cd:67:f4:b1:
a1:b5:d5:0a:c3:3f:1d:05:2e:24:fe:66:e7:db:b4:
31:d2:66:97:85:e8:2c:4b:fb:ba:2d:d9:f5:d9:33:
7c:59:b6:9d:26:4c:70:4c:2e:1e:0a:87:90:05:c5:
d3:bf:dc:f8:35:3f:5e:5c:bc:af:5a:46:0b:a8:e6:
51:37:c5:44:ce:2f:2c:d1:00:8a:96:4a:7a:2a:0e:
3a:fb:20:01:2b:b1:98:a9:99:7f:75:85:f3:2f:85:
7a:05:48:9c:0d:b1:bd:f4:37:eb:b5:89:b7:e8:52:
42:df:60:23:79:c2:c0:84:9f:0b:5d:70:3b:28:66:
6d:73:4f:19:41:18:d9:44:bf:ff:50:52:84:7b:3d:
5b:e1:ec:d8:1c:83:0a:43:2e:87:78:91:3e:d3:e3:
b5:05:08:e3:11:f9:7d:52:e6:af:53:3a:a1:96:31:
e5:5e:a5:0b:1f:9b:26:c0:9d:b3:6e:1e:b8:01:45:
c9:5c:56:10:e1:76:38:1d:8c:b4:c3:bd:61:ca:69:
30:0e:df:ab:43:60:ba:f3:d0:60:0f:83:c1:75:9f:
0a:5b:91:60:39:90:85:86:4c:3f:97:9a:7a:c5:45:
6e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:25:59:F5:6A:0D:B1:A4:33:74:A8:E6:69:BC:ED:C3:8D:C0:BB:B0
X509v3 Authority Key Identifier:
keyid:24:A1:3B:75:2C:A2:2D:63:24:81:D8:6E:63:DE:77:78:0B:83:31:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/JKE7dSyiLWMkgdhuY953eAuDMfw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JKE7dSyiLWMkgdhuY953eAuDMfw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/JKE7dSyiLWMkgdhuY953eAuDMfw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
de:79:04:ab:83:65:4d:5c:e1:2d:68:1d:fa:3e:d6:d9:be:40:
d1:a4:12:65:6a:42:93:f1:e7:12:27:fa:46:55:56:55:bd:18:
22:1a:e0:55:45:de:b9:e5:81:60:c6:11:19:cb:c0:14:77:be:
e2:04:45:06:15:34:6c:91:6a:c5:9c:8d:70:7d:67:41:40:ea:
95:62:52:ae:dd:32:45:4a:93:0b:e8:57:bc:ea:84:46:6a:40:
15:44:52:f7:13:8f:ee:4e:2a:83:de:c1:86:db:07:03:a0:24:
a2:35:18:9a:ab:1b:7e:26:6f:ab:7f:55:24:65:f8:a4:88:85:
4b:35:28:64:05:98:23:96:8e:a9:7e:ad:57:42:96:f8:ee:3f:
d3:24:a2:81:13:fe:31:99:13:12:6e:7a:4e:28:1f:83:4c:39:
91:d4:08:1b:2b:9d:4d:ad:26:76:5e:63:59:42:04:82:41:4d:
06:87:9b:34:79:68:b3:3e:10:25:ce:f1:06:84:90:2e:0f:e2:
f4:0e:81:88:21:16:2c:b9:96:75:51:6e:f4:29:4c:16:c1:12:
d2:30:47:26:31:8e:2f:df:df:12:f9:0b:6d:02:6a:9a:c6:bf:
20:26:15:9a:4c:97:2c:bf:c0:ce:56:59:36:d7:e9:56:87:8f:
3e:ff:f9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:25 2025 by rpki-client