Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft
File: kEgXQ3MJLmD9IX-_HSOR79WjObw.mft (raw, json)
Hash identifier: vTd2vmnVRK/tNFBlklw/wX0VHLbvWK5vHW5OqpY6ecg=
Subject key identifier: 30:33:75:87:DF:E9:C7:27:43:A1:F6:30:DB:98:C1:A2:C7:39:25:9F
Authority key identifier: 90:48:17:43:73:09:2E:60:FD:21:7F:BF:1D:23:91:EF:D5:A3:39:BC
Certificate issuer: /CN=9048174373092E60FD217FBF1D2391EFD5A339BC
Certificate serial: 034A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kEgXQ3MJLmD9IX-_HSOR79WjObw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft
Manifest number: 034A
Signing time: Sat 29 Mar 2025 10:31:02 +0000
Manifest this update: Sat 29 Mar 2025 10:31:02 +0000
Manifest next update: Sat 29 Mar 2025 16:31:02 +0000
Files and hashes: 1: kEgXQ3MJLmD9IX-_HSOR79WjObw.crl (hash: 1dSeFOFgAzVPRNqGPlNWsMra4MCJsikVlhP+KENspiY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 842 (0x34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9048174373092E60FD217FBF1D2391EFD5A339BC
Validity
Not Before: Mar 29 10:31:02 2025 GMT
Not After : Oct 11 07:28:59 2025 GMT
Subject: CN=30337587DFE9C72743A1F630DB98C1A2C739259F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:52:ba:ed:85:29:cf:39:2a:e0:6f:d7:56:94:
bb:25:1a:e8:39:74:40:39:fb:bd:da:af:13:2d:47:
33:f5:50:8d:d9:25:74:61:57:c8:7c:b5:ee:77:75:
26:19:fd:e8:c5:50:0f:30:90:42:9c:a0:85:78:91:
78:2c:e5:db:df:3f:7f:a2:1b:7d:eb:71:8b:82:65:
21:4d:df:57:ca:76:30:ba:09:8f:52:2e:d9:70:db:
e1:e2:52:6d:08:c4:16:f9:d1:ce:40:da:8c:e2:cd:
ee:58:d3:68:a5:ba:4b:c3:92:3c:72:03:94:92:b4:
6f:ac:4b:ad:6b:05:88:ad:f4:a3:8a:42:62:5e:fb:
8a:c6:3c:51:aa:e4:d4:cd:a0:c0:48:62:ea:8d:0d:
22:a2:86:63:e3:1a:a0:83:f8:67:df:e1:1d:f6:99:
b7:48:e6:07:d0:b2:58:a8:29:64:45:16:c4:ff:6b:
9e:3a:e2:25:f4:b4:8e:99:2f:fd:00:cc:05:a7:cd:
8c:a5:53:8a:ab:99:bc:93:65:99:bf:c7:2d:32:a2:
29:b4:12:82:3a:64:d8:8a:1a:4f:a2:37:90:cc:9c:
24:88:59:14:a3:b7:de:d3:4e:f5:0b:a2:e2:6b:ca:
93:65:10:e2:86:a5:71:56:fa:77:78:7b:19:cc:a1:
91:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:33:75:87:DF:E9:C7:27:43:A1:F6:30:DB:98:C1:A2:C7:39:25:9F
X509v3 Authority Key Identifier:
keyid:90:48:17:43:73:09:2E:60:FD:21:7F:BF:1D:23:91:EF:D5:A3:39:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kEgXQ3MJLmD9IX-_HSOR79WjObw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:93:f1:be:59:4d:0e:3d:54:b7:e6:52:ed:e0:e5:c0:b6:d8:
c8:40:cb:87:6c:48:4a:35:79:0b:af:db:62:f9:de:1f:14:6f:
7a:23:ef:dd:47:8f:e0:a0:37:12:a6:8a:e0:cc:8e:c6:bf:e5:
3d:2e:23:cf:12:9e:2a:aa:32:bf:4f:a6:01:90:1c:bd:98:1f:
b6:2e:8a:6c:b0:a0:92:f8:e3:6d:b6:c5:0c:60:34:9c:d8:eb:
00:ee:d8:ce:a8:50:bb:2d:f4:0b:91:1a:f3:72:a0:46:93:dc:
18:0e:13:c8:d0:cb:d6:a0:10:0d:fe:8f:be:45:29:91:37:8c:
5c:2d:04:c1:8e:7c:ac:86:ac:cf:e7:e6:00:06:08:2f:f5:c3:
7f:fe:7f:a8:15:59:62:2a:db:f9:9b:6a:69:f9:48:25:d8:aa:
e2:3e:e4:55:69:96:16:92:8c:72:4e:1d:07:8e:fb:fc:66:41:
a8:f2:8c:e6:0d:31:ef:c4:1e:fe:91:37:b8:4c:29:8f:11:bb:
36:bd:e4:77:73:50:8d:c9:21:a1:bd:fb:18:71:5a:81:b7:92:
89:9c:9f:d5:8f:f7:e3:2b:af:6d:b9:84:9f:50:ca:63:1a:bb:
4a:8e:c0:a4:85:36:08:17:61:00:86:7b:ba:71:e1:4e:06:ce:
9d:a5:12:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:40 2025 by rpki-client