Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft
File: 89605Z7lMyYp7F4LaGZtNuKXN2s.mft (raw, json)
Hash identifier: V3aLaUbV1E4dHz+CslOy0EB70HAjMZ+rgTgLiYfraOo=
Subject key identifier: 52:79:76:65:E5:66:FA:8A:9E:8A:CF:21:00:B2:0A:2E:63:FD:F8:B1
Authority key identifier: F3:DE:B4:E5:9E:E5:33:26:29:EC:5E:0B:68:66:6D:36:E2:97:37:6B
Certificate issuer: /CN=F3DEB4E59EE5332629EC5E0B68666D36E297376B
Certificate serial: 0372
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/89605Z7lMyYp7F4LaGZtNuKXN2s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft
Manifest number: 0372
Signing time: Fri 04 Apr 2025 19:10:13 +0000
Manifest this update: Fri 04 Apr 2025 19:10:13 +0000
Manifest next update: Sat 05 Apr 2025 01:10:13 +0000
Files and hashes: 1: 89605Z7lMyYp7F4LaGZtNuKXN2s.crl (hash: hyHhB3wqPYKEfAkffB5N55yYV/thq2xx7w27PQLzpFw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 882 (0x372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3DEB4E59EE5332629EC5E0B68666D36E297376B
Validity
Not Before: Apr 4 19:10:13 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=52797665E566FA8A9E8ACF2100B20A2E63FDF8B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:26:22:b1:13:d3:08:92:e7:1f:ab:59:2f:b3:
a1:ea:34:eb:d1:89:c7:1a:14:19:ec:00:38:d6:36:
20:7b:1c:77:cf:d1:60:76:50:d9:4e:84:9d:1c:c2:
be:ca:bf:9a:fe:a3:af:dc:26:2f:87:5a:4c:2f:23:
1a:95:b3:31:ce:5c:69:04:ba:33:d5:cf:1a:82:e0:
f2:44:9c:fc:6d:7e:a8:9c:46:1f:69:b6:3b:a0:0c:
15:9e:82:1c:71:23:fb:0c:7e:e4:95:12:bf:c0:11:
3b:56:e2:0d:f2:71:72:b0:b5:cb:4c:0c:bf:7c:42:
80:92:a8:63:cb:c0:9a:e1:62:85:35:3d:03:56:b5:
ef:74:cf:d6:e3:bc:30:be:e2:f0:57:a0:49:55:74:
0a:5c:4a:d7:1c:c8:4c:24:ed:51:a6:36:1c:0c:db:
a1:7c:9f:d0:d5:54:e7:26:70:b1:63:f6:4f:a9:ca:
70:0a:bb:d9:f8:d2:ee:f7:94:4c:c9:05:f1:03:34:
2a:4e:37:8e:ea:08:58:da:3d:2d:42:10:3c:5b:26:
f0:2f:5c:06:cc:ca:d8:7b:4b:09:f8:5f:c7:25:fd:
5f:8a:38:50:bc:b6:c3:ff:3a:76:f6:dc:c0:41:76:
b6:dc:68:54:1d:1c:46:17:ac:eb:3c:26:e7:c3:5c:
69:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:79:76:65:E5:66:FA:8A:9E:8A:CF:21:00:B2:0A:2E:63:FD:F8:B1
X509v3 Authority Key Identifier:
keyid:F3:DE:B4:E5:9E:E5:33:26:29:EC:5E:0B:68:66:6D:36:E2:97:37:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/89605Z7lMyYp7F4LaGZtNuKXN2s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:ca:99:26:bf:5c:d7:d4:19:dd:11:a8:a3:8d:2a:5f:1f:55:
1b:b2:a9:cf:44:f2:d5:81:4d:47:74:ca:ef:1c:b5:3f:b9:0a:
6a:d6:34:2d:c1:4d:0a:f0:f5:6e:9c:b8:07:7b:00:51:af:9b:
f0:10:93:ed:03:f7:b6:a2:67:03:83:6d:e1:12:a5:ac:a7:2c:
44:cc:4e:b9:36:d6:4f:30:9d:80:c0:9f:07:04:92:63:1c:43:
44:20:ce:b9:47:0c:18:7c:bd:86:18:be:96:4f:28:bd:cb:f2:
56:1d:33:a2:9c:f9:33:60:98:cf:b0:6e:91:08:67:8e:e0:71:
dd:69:39:0e:74:bf:95:75:f0:14:7b:0d:7b:6f:90:48:f1:bf:
85:f2:d7:e2:47:5d:2f:0a:d4:a5:20:67:aa:79:f0:a1:85:97:
1f:d9:bf:72:a7:5e:7f:9b:2c:9f:32:92:ec:06:18:b5:da:8a:
bc:26:5c:66:90:56:15:31:9c:23:b7:e9:a5:e7:55:8f:01:e8:
0c:1d:75:d9:a2:89:5d:f1:79:a2:e9:1d:ec:42:5d:77:6b:a4:
1b:22:cb:89:a1:d4:8d:3d:b2:5c:2a:52:c1:fa:9b:03:6e:79:
ba:fa:07:8c:0f:1a:07:2e:13:29:33:ca:30:ed:1d:b2:17:70:
e5:f5:d2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:48 2025 by rpki-client