Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3319/lhDb2veO-a6MqrQpti0mfGB8eN0.mft
File: lhDb2veO-a6MqrQpti0mfGB8eN0.mft (raw, json)
Hash identifier: rEiwtiGepGtrGLw4hQkSAgfqqtoskcDAdrSBm9Yeg40=
Subject key identifier: D5:46:84:57:8F:D3:93:82:27:36:B3:9A:46:B1:10:60:80:20:15:B7
Authority key identifier: 96:10:DB:DA:F7:8E:F9:AE:8C:AA:B4:29:B6:2D:26:7C:60:7C:78:DD
Certificate issuer: /CN=9610DBDAF78EF9AE8CAAB429B62D267C607C78DD
Certificate serial: 0328
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lhDb2veO-a6MqrQpti0mfGB8eN0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/lhDb2veO-a6MqrQpti0mfGB8eN0.mft
Manifest number: 0328
Signing time: Fri 21 Mar 2025 00:31:05 +0000
Manifest this update: Fri 21 Mar 2025 00:31:05 +0000
Manifest next update: Fri 21 Mar 2025 06:31:05 +0000
Files and hashes: 1: lhDb2veO-a6MqrQpti0mfGB8eN0.crl (hash: rLBneeKwE2F8kpDu6M3aSU05Lw0S7sO0maL4xQi4RJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 808 (0x328)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9610DBDAF78EF9AE8CAAB429B62D267C607C78DD
Validity
Not Before: Mar 21 00:31:05 2025 GMT
Not After : Oct 9 05:57:36 2025 GMT
Subject: CN=D54684578FD393822736B39A46B11060802015B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:3e:b5:66:c4:1a:dd:cf:33:cf:72:ca:35:
ef:3e:75:ba:69:89:18:99:4c:78:5d:fc:6c:ff:bb:
bb:7f:78:c5:53:2b:37:a4:57:d1:be:52:85:ee:60:
c1:32:a9:6a:6c:69:d6:e8:15:45:8e:4e:43:0d:ca:
c3:41:ae:0a:cd:c1:a0:0a:88:51:95:2e:3c:e2:e8:
95:fe:1b:7a:84:d1:ce:14:96:63:8c:9c:b3:ec:de:
08:19:1b:15:c2:50:3a:c6:88:51:d6:13:fc:ea:e8:
e1:db:ba:f3:65:a6:90:e9:ca:65:4b:b0:93:32:e9:
59:c4:91:7a:cd:73:0d:c7:d4:4c:13:c1:4f:33:dd:
59:d9:57:c0:e4:37:45:95:dd:6d:ff:ae:ac:93:83:
d0:7d:d2:74:4d:d7:a6:0b:0b:45:6f:5b:97:69:da:
bc:cb:78:68:1a:f3:5f:12:46:1b:24:5b:f0:77:21:
57:73:36:f4:12:78:82:df:23:42:f4:8f:da:91:15:
2e:f9:b0:81:30:bb:c8:e4:f4:18:34:45:77:3c:c6:
91:4c:5f:e4:8b:69:84:c8:9c:f3:8b:a2:60:f3:e3:
1e:6d:f4:7a:a6:cf:5b:9a:d9:4f:1d:a4:30:50:8e:
74:6c:6c:52:3f:01:5a:c7:b5:53:ba:8f:b0:60:c2:
a4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:46:84:57:8F:D3:93:82:27:36:B3:9A:46:B1:10:60:80:20:15:B7
X509v3 Authority Key Identifier:
keyid:96:10:DB:DA:F7:8E:F9:AE:8C:AA:B4:29:B6:2D:26:7C:60:7C:78:DD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/lhDb2veO-a6MqrQpti0mfGB8eN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lhDb2veO-a6MqrQpti0mfGB8eN0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/lhDb2veO-a6MqrQpti0mfGB8eN0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:3d:05:87:de:05:46:07:15:ab:cf:09:f1:8f:87:01:9b:39:
7c:35:5a:d3:29:b7:52:97:81:16:3b:6d:48:13:a9:3a:26:1a:
f0:d9:aa:d7:dc:a0:e1:52:c6:9e:d0:8d:32:a3:58:08:65:3d:
ef:55:f7:ae:25:db:09:af:2e:78:0f:07:28:a1:7c:d3:9f:ee:
cb:d5:c9:53:d0:af:1f:91:2a:68:e6:24:9c:ed:7c:25:3f:3a:
8c:5c:a8:d5:d8:cb:f2:76:4e:23:74:6e:0f:3f:ba:6b:20:be:
8e:59:ef:2e:20:24:e5:c5:2d:ed:91:9e:fc:e6:01:0b:27:ab:
cf:c3:99:42:e7:d5:2c:47:04:7b:d7:15:51:80:63:aa:3c:de:
f0:44:2e:be:36:d9:1b:74:da:e7:42:6b:01:61:8d:cd:c5:2b:
ec:af:1a:f9:c7:93:62:54:1c:9a:6b:b5:60:58:12:88:2c:bf:
45:a0:7f:21:4c:15:7b:cd:07:c4:33:0a:c6:fe:71:d2:0a:62:
d5:10:72:52:45:dd:54:99:5c:db:78:e7:41:02:40:63:98:81:
ae:37:07:32:44:43:a7:47:7f:18:e7:e8:cd:d3:05:1b:d3:40:
3f:bf:db:b1:5a:38:7f:1e:bb:70:22:84:ee:2c:33:fe:b0:76:
f9:2d:61:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:40 2025 by rpki-client