Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.mft
File: OCdChXYoqbKyIFmuiEdvIwYL6tA.mft (raw, json)
Hash identifier: PKPu7CWfGFuF4dRFiUrqDKErSr6dMwOXNWkKLRUp21s=
Subject key identifier: 28:21:5B:26:84:B2:51:CB:C1:6E:81:F4:5A:46:65:8D:87:98:73:05
Authority key identifier: 38:27:42:85:76:28:A9:B2:B2:20:59:AE:88:47:6F:23:06:0B:EA:D0
Certificate issuer: /CN=382742857628A9B2B22059AE88476F23060BEAD0
Certificate serial: 03E2
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OCdChXYoqbKyIFmuiEdvIwYL6tA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.mft
Manifest number: 03E2
Signing time: Tue 03 Jun 2025 21:12:38 +0000
Manifest this update: Tue 03 Jun 2025 21:12:38 +0000
Manifest next update: Wed 04 Jun 2025 03:12:38 +0000
Files and hashes: 1: OCdChXYoqbKyIFmuiEdvIwYL6tA.crl (hash: pft0E30SmbfyFRBBWBABVcg6brzwdppqxothTrbUyB4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 994 (0x3e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382742857628A9B2B22059AE88476F23060BEAD0
Validity
Not Before: Jun 3 21:12:38 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=28215B2684B251CBC16E81F45A46658D87987305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:26:72:d5:94:16:40:a9:56:11:27:83:ad:c9:
ac:73:2e:26:c8:68:e4:37:1c:e2:b9:5d:8a:dc:5d:
52:91:42:3b:2e:de:b3:6e:fb:38:6c:62:43:f2:65:
fe:2d:44:45:7d:02:5c:fb:a1:47:11:13:de:41:4b:
e9:61:23:81:c1:3c:01:8c:a8:0c:1b:2b:47:6e:19:
76:95:78:de:65:db:39:ce:e0:22:0e:f5:e1:af:50:
40:ed:f6:61:24:bf:62:9f:a0:eb:d9:b4:02:f1:ea:
85:d3:3d:5e:85:3b:d0:19:a7:a5:e5:cc:a8:12:69:
a0:7b:a1:8b:61:e3:bc:89:4a:5e:8a:2b:eb:9c:90:
c5:6c:a9:6b:a7:08:2b:86:ba:2e:62:d7:77:ef:ab:
37:a1:fa:a1:c6:27:4e:8f:b0:83:bb:7a:98:51:bd:
d9:c4:aa:06:f2:99:ec:0a:ac:d2:44:d7:21:1d:80:
f3:d8:6a:3f:70:e1:2f:01:12:2e:8c:85:b2:f7:0e:
f7:d9:ae:c6:09:03:cd:cd:05:0b:24:bb:11:96:78:
38:bb:bd:68:67:78:5d:33:a8:1e:f6:97:cc:61:ec:
a5:11:dc:9e:e2:70:3c:31:72:f5:59:be:13:fe:f5:
5c:38:80:94:e7:6d:06:32:ca:d6:37:3a:eb:b5:19:
b9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:21:5B:26:84:B2:51:CB:C1:6E:81:F4:5A:46:65:8D:87:98:73:05
X509v3 Authority Key Identifier:
keyid:38:27:42:85:76:28:A9:B2:B2:20:59:AE:88:47:6F:23:06:0B:EA:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OCdChXYoqbKyIFmuiEdvIwYL6tA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e0:95:b0:d3:b3:ec:d5:c0:48:4b:a7:c2:eb:ad:6c:b8:99:eb:
cd:5b:89:94:b9:fb:e0:27:32:87:2d:b4:30:1f:d8:fd:3e:32:
5e:03:56:d2:70:6e:df:c7:69:f8:59:4d:29:49:98:14:a6:ef:
ac:c5:ca:8e:a0:eb:95:ce:03:e5:4d:48:fa:c5:7d:1e:ea:a3:
a9:2a:ac:f4:b8:75:8b:b6:ed:91:cf:f6:76:66:3c:33:13:0a:
ca:bf:f9:50:d7:32:13:32:14:c3:d9:11:eb:d1:f9:a6:2a:3c:
1d:63:2a:80:6c:94:8e:c2:e4:47:af:ee:7e:ab:15:d2:89:24:
e4:92:a7:98:3d:a1:f1:c6:ca:b4:b1:b4:12:a9:64:b2:09:c8:
2c:f1:6b:41:5c:3b:46:06:a7:42:2e:d3:01:9a:d5:d8:eb:cd:
3b:60:1f:7b:b2:c0:dd:25:b4:b7:4b:36:7d:2c:78:7a:83:4a:
06:d9:a0:3a:1f:a2:cf:9a:82:2e:b4:e6:77:cf:f2:fa:90:f2:
48:d1:a2:cb:60:cb:7e:49:07:b5:b2:8e:1a:09:7e:7d:71:ca:
62:5a:01:07:d0:50:f4:44:63:74:c0:11:ee:4e:7a:af:68:c8:
a9:eb:c9:08:19:55:2e:a6:b7:62:18:38:a3:77:c8:1c:2c:38:
a2:48:74:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:01:44 2025 by rpki-client