Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft
File: fetUO9g1VViFIfIivviJGRdeExQ.mft (raw, json)
Hash identifier: OSgC2uD1jqp09jMykvFsINuUCn5mnUqPNyhGEJev5vI=
Subject key identifier: 2B:33:28:67:0B:68:10:E8:C3:9E:2B:64:3D:2E:E6:6F:42:C7:55:10
Authority key identifier: 7D:EB:54:3B:D8:35:55:58:85:21:F2:22:BE:F8:89:19:17:5E:13:14
Certificate issuer: /CN=7DEB543BD83555588521F222BEF88919175E1314
Certificate serial: 032D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fetUO9g1VViFIfIivviJGRdeExQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft
Manifest number: 032D
Signing time: Sat 29 Mar 2025 10:30:08 +0000
Manifest this update: Sat 29 Mar 2025 10:30:08 +0000
Manifest next update: Sat 29 Mar 2025 16:30:08 +0000
Files and hashes: 1: fetUO9g1VViFIfIivviJGRdeExQ.crl (hash: Y9EE9ramAyfFSse5H5ikrEBiuPoRLRSUbZgtsvYvXUY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 813 (0x32d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7DEB543BD83555588521F222BEF88919175E1314
Validity
Not Before: Mar 29 10:30:08 2025 GMT
Not After : Oct 16 11:48:52 2025 GMT
Subject: CN=2B3328670B6810E8C39E2B643D2EE66F42C75510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7d:a3:8a:82:7f:e4:f3:db:3b:18:f0:4b:f3:
87:2a:48:0d:61:80:97:c2:87:93:94:44:b8:36:0d:
3d:c3:c9:35:7d:39:09:51:d8:c6:6c:6a:a7:45:59:
7f:86:44:7e:e5:af:88:89:d4:c9:99:cf:b7:5a:74:
8a:d4:91:3b:c7:3a:e6:ba:95:4d:0d:d5:0d:b7:5c:
1d:81:5c:db:33:3b:07:59:b4:eb:b5:37:38:31:24:
3f:31:af:63:ba:71:7e:c5:11:a7:41:47:15:83:c7:
62:01:a0:fb:7c:6d:c1:5f:67:11:e4:9b:38:df:89:
c9:9b:07:66:dc:7b:72:ff:d2:44:26:db:24:f2:8d:
cc:44:57:58:d5:95:bd:fb:12:73:a0:ca:65:88:ee:
a2:13:a6:4c:68:9d:4a:07:e6:6d:40:5d:e8:14:66:
5e:12:65:5c:49:44:80:1d:f1:3d:a6:37:a3:56:dc:
6d:f7:dd:ef:6c:49:34:c3:0f:be:30:d1:cb:0c:12:
79:2c:c6:71:2b:9d:46:7e:09:ab:7d:55:1d:27:b0:
dd:93:58:d3:63:c6:5a:58:b6:ea:e0:b3:15:0d:35:
57:b3:71:3d:a3:a3:5b:7e:f3:c9:86:ec:63:0e:9c:
5a:71:42:5b:3e:c9:3c:b2:00:2c:b3:91:f8:92:84:
79:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:33:28:67:0B:68:10:E8:C3:9E:2B:64:3D:2E:E6:6F:42:C7:55:10
X509v3 Authority Key Identifier:
keyid:7D:EB:54:3B:D8:35:55:58:85:21:F2:22:BE:F8:89:19:17:5E:13:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fetUO9g1VViFIfIivviJGRdeExQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:07:24:00:6a:4e:3d:72:58:ff:b3:51:e0:ae:cd:9d:67:26:
97:d1:db:72:67:36:47:53:4c:1d:a0:42:16:90:c7:ef:95:c3:
2c:3b:46:cc:7d:f2:94:b0:2a:9e:47:31:bb:d2:d1:3b:4c:bf:
53:28:b6:24:78:10:0d:21:b0:3d:65:02:15:31:3e:31:b1:5e:
70:78:64:1e:10:1b:73:1b:3c:78:c8:31:d7:98:91:c7:95:75:
d8:6c:c9:1d:ea:ba:9b:0c:48:be:36:ea:70:f2:55:35:79:0e:
82:d7:eb:ef:bc:cd:fc:8e:b5:1c:82:6c:60:95:5a:2b:f8:8c:
69:41:69:27:86:28:8d:75:7c:41:46:c7:76:64:83:32:46:e7:
3e:ff:61:16:a9:95:b3:0e:df:c3:e3:a3:e2:30:82:9f:bc:af:
f0:62:26:cd:10:f8:67:81:da:ca:70:76:90:2b:5c:bc:85:af:
2f:c5:66:42:c7:91:bb:0b:2c:97:0b:be:a1:c0:78:7c:dd:6d:
e8:7f:f4:73:b5:0d:fd:3e:ff:2a:f6:dc:47:5d:2a:45:62:96:
40:63:14:55:e1:3b:88:cd:f3:04:49:c2:b1:56:2e:31:5b:0a:
da:cd:e2:be:3e:a7:e8:8a:36:8c:f1:7c:e4:e8:df:d4:ed:4c:
4a:32:d4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:24 2025 by rpki-client