Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft
File: o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft (raw, json)
Hash identifier: p2x2ASVTp4Me1xqr0bTHutZjVmHXBxZPawuJVQz3IGw=
Subject key identifier: 7D:BC:F4:A1:EA:8E:EB:3E:12:4E:8E:23:CE:7F:82:EE:DD:F0:4B:C0
Authority key identifier: A3:8D:5F:3E:A6:54:AD:8C:6D:65:4D:A5:BE:90:8A:65:8F:26:6E:64
Certificate issuer: /CN=A38D5F3EA654AD8C6D654DA5BE908A658F266E64
Certificate serial: 0352
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/o41fPqZUrYxtZU2lvpCKZY8mbmQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft
Manifest number: 0352
Signing time: Sat 29 Mar 2025 10:29:47 +0000
Manifest this update: Sat 29 Mar 2025 10:29:47 +0000
Manifest next update: Sat 29 Mar 2025 16:29:47 +0000
Files and hashes: 1: o41fPqZUrYxtZU2lvpCKZY8mbmQ.crl (hash: 8o+4mOKL7dS8qdcYclAJX8AH1QzIxKWprhSb9llQNcE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 850 (0x352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A38D5F3EA654AD8C6D654DA5BE908A658F266E64
Validity
Not Before: Mar 29 10:29:47 2025 GMT
Not After : Oct 9 05:57:36 2025 GMT
Subject: CN=7DBCF4A1EA8EEB3E124E8E23CE7F82EEDDF04BC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:95:67:6c:b0:cd:c7:64:a1:13:8e:d9:0d:
8d:96:58:1d:08:c8:2c:68:59:8a:4b:2a:92:76:32:
07:01:1d:ab:14:13:b2:ce:a1:06:a5:9b:84:5c:1c:
f8:a3:c2:22:9f:6a:5c:0e:f5:95:3b:4e:55:01:2e:
6e:17:d8:04:f1:c3:43:91:0a:b6:4e:01:cc:4d:6d:
66:ba:99:a5:a1:dd:0f:92:6e:ef:fa:55:e4:3f:16:
12:1d:85:09:6d:29:a0:57:1c:07:8f:a9:6b:ee:4f:
c7:ec:36:26:a6:f8:5a:0f:2b:24:7a:7c:c7:72:f4:
48:42:89:55:2d:21:d0:fe:de:be:51:86:02:d6:19:
38:32:ad:02:c7:d7:68:d5:7e:76:47:39:5d:01:42:
ed:ff:a1:f2:d8:e7:c3:ba:48:2b:e7:1b:ed:85:14:
23:56:60:aa:7b:95:6d:c7:1d:bf:f3:0a:a7:00:95:
ff:23:69:7a:be:8a:5c:7e:4c:ef:e5:12:77:c5:a5:
d1:44:61:77:6f:31:7a:8c:ed:49:3e:c9:2f:bd:ed:
ab:e6:75:17:61:3a:d3:ea:ef:6a:fe:74:9e:53:95:
be:f1:c7:28:dc:18:2d:c5:76:f8:15:59:77:df:c2:
8e:b3:19:c7:7e:0a:8e:d1:3d:6e:f5:87:c0:6e:42:
60:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BC:F4:A1:EA:8E:EB:3E:12:4E:8E:23:CE:7F:82:EE:DD:F0:4B:C0
X509v3 Authority Key Identifier:
keyid:A3:8D:5F:3E:A6:54:AD:8C:6D:65:4D:A5:BE:90:8A:65:8F:26:6E:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/o41fPqZUrYxtZU2lvpCKZY8mbmQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:35:45:c4:60:38:0f:cb:7c:22:97:1b:79:b6:d9:09:1d:bb:
91:8d:f4:52:13:14:63:f7:4a:26:ac:f1:58:57:49:43:7b:64:
a4:20:38:bf:fe:c1:75:72:1c:8a:f9:27:8d:98:45:12:09:9d:
f6:1d:37:f1:dc:70:13:51:80:14:83:c4:4a:0f:00:f8:12:8d:
61:e8:9d:30:a9:85:85:dd:fb:ea:ad:2e:97:30:2b:47:31:9a:
b3:3e:1b:42:ec:70:8d:42:53:2a:b0:44:4e:f2:fe:d0:91:0d:
3f:86:98:f3:7d:35:91:15:14:48:40:4c:b1:74:9d:43:30:ef:
f1:86:a6:d6:bb:71:b4:5a:9c:59:d2:26:aa:97:1a:69:a2:bc:
ff:32:31:cc:56:55:61:2d:a6:ba:66:b9:56:49:68:2e:53:0e:
b4:42:6a:64:eb:eb:a5:8b:c8:49:1b:18:53:83:13:f8:9b:b5:
5c:31:91:be:04:05:26:ad:f3:b1:5c:ba:af:0c:1b:0e:b9:08:
01:55:13:9c:a8:0c:4f:af:c6:fb:08:6c:fe:3f:d4:5d:c3:2f:
bd:b8:0f:01:a3:6e:b5:63:f5:77:86:e9:a5:24:ca:83:d3:94:
c2:81:62:02:9e:27:86:1e:c6:21:9f:4a:46:01:d6:78:2a:bf:
2b:ae:51:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:46 2025 by rpki-client