Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft
File: hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft (raw, json)
Hash identifier: 6hnVGVE/oUcBhEt/Rv7hMEIM+8iYcdBW0txmcxNlf4E=
Subject key identifier: BE:D9:25:DE:39:2A:E8:6E:11:81:56:16:4F:49:12:59:38:4C:5C:5A
Authority key identifier: 85:3C:52:D1:A8:41:42:13:79:81:B9:05:1E:92:4A:4B:32:91:5C:66
Certificate issuer: /CN=853C52D1A84142137981B9051E924A4B32915C66
Certificate serial: 02CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hTxS0ahBQhN5gbkFHpJKSzKRXGY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft
Manifest number: 02CC
Signing time: Sat 29 Mar 2025 10:30:53 +0000
Manifest this update: Sat 29 Mar 2025 10:30:53 +0000
Manifest next update: Sat 29 Mar 2025 16:30:53 +0000
Files and hashes: 1: hTxS0ahBQhN5gbkFHpJKSzKRXGY.crl (hash: 2ujoqfuNxYYXnmBo+tPDiqUJiLCk/VOAkPMYB+wWXFY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 716 (0x2cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853C52D1A84142137981B9051E924A4B32915C66
Validity
Not Before: Mar 29 10:30:53 2025 GMT
Not After : Nov 5 05:25:14 2025 GMT
Subject: CN=BED925DE392AE86E118156164F491259384C5C5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:4c:3b:16:5a:51:15:14:ad:a8:2c:93:64:
4a:3e:6e:88:fd:04:ea:22:b3:8d:d4:6c:4f:43:7a:
f1:99:c4:0f:4a:c7:7b:77:ac:d9:1c:8b:8c:f6:86:
53:29:47:2e:39:30:3b:22:77:5d:ba:04:09:b2:bf:
42:58:53:1c:18:43:9f:d5:34:7e:4c:1b:e7:85:73:
51:fa:33:f3:d2:75:cf:39:5e:3f:13:3d:e9:0c:ce:
ed:33:af:4c:63:cd:2e:c7:08:2a:07:5a:6d:64:d5:
54:9f:d2:58:bd:99:a4:f1:b4:cb:b4:d8:e8:ad:ca:
61:f8:ca:ff:bc:6d:36:91:08:40:d3:b6:c9:b6:4d:
cd:e1:35:1b:7e:14:21:76:dc:db:58:ef:d0:48:9e:
bb:ff:25:19:05:6d:f5:32:fa:52:8b:3f:42:21:0a:
f7:05:84:f7:b5:5c:73:9b:3c:aa:8c:ab:1b:4e:98:
3f:32:db:28:18:b5:86:3b:63:cf:fb:fb:87:70:c4:
68:a1:86:c5:b7:9a:39:b8:92:d8:38:54:ef:15:29:
21:50:6d:bd:12:5e:70:65:e4:da:dd:66:3a:9e:76:
46:b8:8b:d7:58:c2:7a:9e:fd:da:72:a9:ac:27:aa:
4f:c9:be:4b:f6:42:64:e1:16:b9:d9:b8:11:ff:dd:
b0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D9:25:DE:39:2A:E8:6E:11:81:56:16:4F:49:12:59:38:4C:5C:5A
X509v3 Authority Key Identifier:
keyid:85:3C:52:D1:A8:41:42:13:79:81:B9:05:1E:92:4A:4B:32:91:5C:66
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hTxS0ahBQhN5gbkFHpJKSzKRXGY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:97:43:9e:e0:42:4f:27:0f:88:d4:66:76:1c:12:33:2d:ef:
43:e9:48:fa:0c:fa:0d:4c:92:d7:fe:3c:a9:38:93:6e:26:ee:
e4:46:95:88:6e:3c:56:30:8f:99:c2:61:a7:9a:e1:b5:8a:31:
0d:73:f6:01:c7:76:af:10:a0:eb:e6:28:90:79:ab:16:3c:b2:
61:83:40:7b:0e:e0:73:64:f2:b0:f6:76:b7:b6:f5:37:42:bf:
e4:d9:ef:40:61:c5:4e:16:89:01:19:be:ab:f4:b9:76:c7:db:
bd:81:21:47:96:aa:96:3b:c5:21:08:45:96:66:13:e6:1d:2b:
d9:fc:3a:71:33:b0:17:ed:7d:15:7f:19:d2:ac:87:ee:20:e0:
09:7d:e8:96:0b:b9:50:5e:db:98:e8:4f:a2:7d:ce:c0:c8:6a:
07:23:cc:68:ef:38:4b:bf:30:44:20:64:f3:e8:3d:3c:6a:9d:
01:d5:1e:47:66:93:45:5a:8c:ad:cc:15:42:d3:a7:ab:0e:1f:
61:d5:0a:31:ff:e4:45:2c:65:72:57:bb:86:e5:ba:8a:b0:37:
7d:6b:2c:39:11:67:27:71:61:25:0e:d5:16:ae:bb:d6:c4:5e:
0d:44:5a:ba:42:1c:44:50:66:e2:c8:2e:5e:4a:45:bc:2b:a8:
3e:18:29:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:41 2025 by rpki-client