Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3327/UtrlTcDKsEdFGkc8madkNE6mTRc.mft
File: UtrlTcDKsEdFGkc8madkNE6mTRc.mft (raw, json)
Hash identifier: Mvgu0EdUmyCBWfRBDQF54PtJzjAVlr56h3oLsBWPHBg=
Subject key identifier: CF:32:6F:5B:D7:6F:41:62:08:E1:D9:25:4A:9B:41:5C:82:1F:8B:BF
Authority key identifier: 52:DA:E5:4D:C0:CA:B0:47:45:1A:47:3C:99:A7:64:34:4E:A6:4D:17
Certificate issuer: /CN=52DAE54DC0CAB047451A473C99A764344EA64D17
Certificate serial: 02A2
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UtrlTcDKsEdFGkc8madkNE6mTRc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/UtrlTcDKsEdFGkc8madkNE6mTRc.mft
Manifest number: 02A2
Signing time: Fri 21 Mar 2025 00:32:07 +0000
Manifest this update: Fri 21 Mar 2025 00:32:07 +0000
Manifest next update: Fri 21 Mar 2025 06:32:07 +0000
Files and hashes: 1: UtrlTcDKsEdFGkc8madkNE6mTRc.crl (hash: v4BhswSCyqKJhzui5werdZuwsSoHYhqKn/PAmDAOZ98=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 674 (0x2a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52DAE54DC0CAB047451A473C99A764344EA64D17
Validity
Not Before: Mar 21 00:32:07 2025 GMT
Not After : Nov 5 05:25:14 2025 GMT
Subject: CN=CF326F5BD76F416208E1D9254A9B415C821F8BBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a9:ac:8a:e4:d9:93:47:af:2c:dd:f8:ef:ad:
8a:a3:94:7a:c5:4b:8b:8a:45:12:67:9f:3c:b9:10:
3a:c2:52:7e:d7:e2:03:44:b1:31:50:b3:3a:a8:b1:
1b:82:df:4a:48:c8:04:99:a4:ce:8e:b6:72:86:07:
c4:82:94:ea:f2:0f:88:70:a4:03:a9:6c:b3:d6:25:
9a:87:d7:95:67:7b:a5:8c:88:6e:20:f3:e0:75:f8:
d1:6b:ea:61:8f:92:68:31:3e:e5:6c:cd:ba:65:6f:
a3:82:0a:47:b2:ed:61:3c:a2:4c:bc:1a:ce:b6:18:
06:0e:c8:1d:30:f7:e6:97:76:5b:b1:50:c9:39:9a:
5e:63:28:d1:6f:2a:7f:90:32:1d:a9:a5:32:0e:88:
85:0a:4d:69:f5:14:bd:60:9d:e7:89:6a:8c:a1:4f:
25:b4:21:28:0c:85:b2:59:bb:45:11:1d:06:ba:8c:
cf:48:ca:90:1d:ca:05:2b:3a:b6:ef:d0:62:56:8d:
42:54:d0:af:a4:3d:5f:9e:f7:8a:9d:3d:75:0f:c8:
9c:35:cc:61:e1:de:e8:67:f7:b3:ee:4f:ec:cb:fc:
52:60:9b:c6:bf:4d:d4:e5:2f:ec:7f:83:94:f9:96:
eb:73:68:24:92:3c:1d:05:95:3c:65:b1:9f:ba:c3:
7e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:32:6F:5B:D7:6F:41:62:08:E1:D9:25:4A:9B:41:5C:82:1F:8B:BF
X509v3 Authority Key Identifier:
keyid:52:DA:E5:4D:C0:CA:B0:47:45:1A:47:3C:99:A7:64:34:4E:A6:4D:17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/UtrlTcDKsEdFGkc8madkNE6mTRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UtrlTcDKsEdFGkc8madkNE6mTRc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/UtrlTcDKsEdFGkc8madkNE6mTRc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:af:00:27:15:c1:11:4a:15:3b:1e:83:81:4c:20:d1:fc:0f:
71:6e:30:c7:62:f3:46:35:3d:38:8e:db:a1:e6:7b:47:16:dc:
04:41:8f:6a:74:5b:c4:1f:00:34:eb:f2:f8:9c:a5:46:8c:10:
c4:c0:a0:63:4c:7f:83:9b:4f:24:c9:11:79:43:08:69:44:e3:
8f:59:09:28:9e:2a:f1:a0:da:96:47:dd:15:8b:71:f5:ae:67:
d9:01:6f:85:ba:1b:ff:a5:24:9f:36:74:d9:00:70:10:27:64:
c5:e1:14:0a:e2:60:67:fd:17:19:93:c2:01:fa:92:a2:cf:10:
07:d1:f7:4f:61:6f:32:fe:9f:c0:cd:61:fb:53:ce:3a:26:74:
e3:7a:4c:bf:5c:e0:d8:12:3f:c4:af:2c:b0:c1:01:35:32:f6:
80:f5:2e:66:e0:f3:14:8f:f5:6f:d3:28:22:67:dc:b2:d1:29:
e3:4d:61:07:53:71:2c:cd:63:f7:3a:e0:0b:6f:69:70:1a:71:
00:01:c6:68:ad:fc:81:15:9e:e3:20:01:85:41:bf:61:42:a6:
3e:d6:6b:d0:f5:15:d4:8f:d7:6f:c5:1a:b4:c8:4d:de:ca:87:
95:6f:9a:d1:b4:dc:55:0b:1a:a2:e2:7e:44:6a:c3:4d:84:77:
5f:cf:14:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:26 2025 by rpki-client