Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft
File: ahHuR0JdFOuvL80k0gYrClK6BCw.mft (raw, json)
Hash identifier: JHgtl3UITG12NhC7lIbuZKK06G5/WRXu3cMbVAaalLs=
Subject key identifier: 47:8F:ED:13:0B:DC:21:23:D0:1B:E4:4F:5F:CF:5F:0B:56:06:23:47
Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C
Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C
Certificate serial: 0304
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft
Manifest number: 0304
Signing time: Sat 29 Mar 2025 10:30:27 +0000
Manifest this update: Sat 29 Mar 2025 10:30:27 +0000
Manifest next update: Sat 29 Mar 2025 16:30:27 +0000
Files and hashes: 1: ahHuR0JdFOuvL80k0gYrClK6BCw.crl (hash: A2GMmmCC/lYekNN/pVPYxcvOeZB7epL74Vh6CelKpYs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 772 (0x304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C
Validity
Not Before: Mar 29 10:30:27 2025 GMT
Not After : Oct 25 08:26:02 2025 GMT
Subject: CN=478FED130BDC2123D01BE44F5FCF5F0B56062347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8f:80:81:70:aa:fb:0e:8d:47:e8:26:06:8e:
3b:c5:98:f2:74:a7:54:35:ae:e6:59:f8:76:52:b9:
29:39:d4:09:0b:2a:1f:7c:4c:f6:3d:42:95:76:8f:
5f:34:94:19:8f:7e:ac:0f:e1:23:5c:0d:62:fa:96:
9e:df:bd:c9:86:9b:6a:7a:81:d2:1c:ef:c4:a8:8f:
b9:b2:ce:84:b8:1c:04:7a:07:3b:5f:69:67:c0:85:
59:9f:90:f5:21:b1:0e:cc:22:64:7d:92:42:b3:86:
2e:99:75:a4:d3:27:cf:58:4e:61:b9:73:76:94:98:
b7:1e:ae:b5:33:10:36:7d:3e:45:ae:19:d6:44:3e:
2c:44:15:29:40:bc:0f:af:f7:52:a5:44:4b:7d:65:
29:64:c0:2c:0f:60:71:7f:a3:c2:fa:bd:11:25:2b:
3b:76:63:49:9f:aa:77:b3:0a:4d:eb:5e:1a:1f:e0:
0b:ca:4a:9d:69:a6:37:88:cc:80:84:7d:22:c7:8e:
25:94:10:0f:48:2e:6f:b2:fa:04:d4:c6:b9:86:e8:
a4:1e:f1:15:85:a0:da:c0:d4:c2:93:e8:e4:3a:95:
e5:38:32:e0:e0:ca:9e:10:8c:80:0a:e1:6f:b7:19:
be:f7:89:ed:18:ae:00:3b:26:44:e6:72:86:7f:01:
bd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8F:ED:13:0B:DC:21:23:D0:1B:E4:4F:5F:CF:5F:0B:56:06:23:47
X509v3 Authority Key Identifier:
keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2d:96:de:97:97:a0:fa:3c:85:57:3f:bf:63:08:4b:46:b3:
6a:67:f7:fa:55:80:7d:b9:5b:1a:d2:42:10:37:af:b4:05:d0:
d1:6a:51:35:3a:fb:bf:ba:69:54:08:a0:db:c7:84:98:4c:51:
c5:e4:97:f9:bf:2d:7d:a0:29:c8:cc:23:ff:cc:d9:37:46:75:
da:60:c1:eb:8d:60:29:d4:ae:80:6c:a5:a0:c8:80:c7:b5:d6:
de:71:b1:2f:eb:ac:9f:59:af:70:d1:82:a2:f5:d2:c9:9f:a7:
86:9a:5f:bc:53:97:a9:d1:3b:9c:06:fd:c6:b4:03:97:07:52:
fc:31:f6:06:58:b6:bc:e5:0b:26:a9:b8:9d:e7:f8:69:4f:d4:
2b:27:66:07:18:58:0a:37:4f:f0:b5:04:0e:88:87:6b:ba:b7:
b7:25:89:28:58:05:93:26:8f:d4:e5:15:d2:ee:08:8d:cf:1a:
19:16:36:6d:22:f6:f9:90:dc:b4:35:ce:51:b5:44:f4:9e:f4:
da:90:0f:a1:1d:a3:e1:2d:ca:c3:33:9c:be:2c:d3:23:74:6d:
40:30:9b:d6:34:82:62:de:15:8f:24:ef:89:1f:a3:6e:4c:7d:
ba:c0:f4:f4:fb:4c:58:59:a0:6b:b6:fc:9f:bf:eb:db:fe:8e:
ec:ad:7f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:27 2025 by rpki-client