Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.mft
File: LsLMuD3fv0MzIma3amIhNiFD42U.mft (raw, json)
Hash identifier: a1oVPUNcVF+jXDe0i4j+LMfuwOwXNvB3akp3Yk/KhJ8=
Subject key identifier: E9:A8:0F:3E:34:7B:6C:8F:32:A5:22:D9:69:07:BE:40:1B:9C:AF:C4
Authority key identifier: 2E:C2:CC:B8:3D:DF:BF:43:33:22:66:B7:6A:62:21:36:21:43:E3:65
Certificate issuer: /CN=2EC2CCB83DDFBF43332266B76A6221362143E365
Certificate serial: 0264
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LsLMuD3fv0MzIma3amIhNiFD42U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.mft
Manifest number: 0264
Signing time: Sat 29 Mar 2025 09:29:49 +0000
Manifest this update: Sat 29 Mar 2025 09:29:49 +0000
Manifest next update: Sat 29 Mar 2025 15:29:49 +0000
Files and hashes: 1: LsLMuD3fv0MzIma3amIhNiFD42U.crl (hash: ybnMT2DIa4S2iQs3PLWJB/t2iBHq5W+LJhenOIQVXvY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 612 (0x264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EC2CCB83DDFBF43332266B76A6221362143E365
Validity
Not Before: Mar 29 09:29:49 2025 GMT
Not After : Nov 26 01:04:53 2025 GMT
Subject: CN=E9A80F3E347B6C8F32A522D96907BE401B9CAFC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:35:02:91:d5:4d:1e:bc:05:75:c8:ac:25:b1:
c5:00:9f:86:fe:b1:45:b4:76:27:71:80:99:70:d9:
bf:37:ab:a6:ca:c8:04:a0:87:65:c7:a9:c0:b3:d8:
2a:3b:ce:0d:0f:9a:af:7f:0c:23:65:13:4f:a3:c7:
a7:06:c2:a6:5b:7a:45:d4:23:9f:3a:19:1b:4e:d3:
0e:b6:57:59:3b:9e:9b:0c:6d:52:a1:4b:8a:b6:88:
4c:05:bb:7d:e8:cc:6b:60:ca:74:a9:84:93:40:27:
32:1b:8d:d8:98:51:e6:e4:42:52:17:39:83:2f:22:
80:06:d3:66:43:b6:31:82:8d:be:d6:05:7c:e2:b9:
86:b8:70:09:fa:d8:e4:8a:dc:20:2a:e4:8e:e8:ef:
d5:4d:fe:d0:be:98:1a:98:ac:90:92:e9:ba:8c:f5:
c0:23:78:e4:10:d4:c7:37:41:b0:1a:25:c5:1f:a7:
5e:8a:04:0f:4d:c9:97:58:17:36:a7:8e:53:10:a3:
56:4d:3d:23:e4:57:e2:39:2d:6b:48:bf:8c:49:69:
65:ea:e5:6b:03:47:4a:2b:5b:28:83:7a:2f:a8:76:
ff:98:ea:6e:fe:cb:33:ac:2c:31:65:10:a3:1f:07:
f6:47:0f:17:2e:45:10:62:55:0b:54:a7:63:0c:70:
85:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A8:0F:3E:34:7B:6C:8F:32:A5:22:D9:69:07:BE:40:1B:9C:AF:C4
X509v3 Authority Key Identifier:
keyid:2E:C2:CC:B8:3D:DF:BF:43:33:22:66:B7:6A:62:21:36:21:43:E3:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LsLMuD3fv0MzIma3amIhNiFD42U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c1:a6:35:29:f4:19:18:fb:09:88:cb:e6:0c:49:73:db:5e:
1c:f6:24:a0:a3:79:f4:be:05:eb:ea:65:e6:71:7b:6f:3d:f7:
37:0f:d0:f3:05:ae:27:0a:87:9f:41:eb:6c:e0:f2:4a:03:fa:
65:2f:07:58:8b:5b:65:ab:ca:fd:c0:3e:bf:79:e4:f6:bb:3c:
7a:28:85:e1:3d:fb:5a:e0:88:6e:d2:54:da:9f:fb:52:2c:93:
70:e6:ab:6d:8b:4a:e5:1b:93:31:79:8e:36:20:c0:80:b1:a3:
7a:4c:89:5c:7f:8a:bb:5a:c2:00:d4:b0:32:d1:1d:16:24:8b:
e7:af:19:a1:c2:cc:b4:d2:52:30:42:c4:1a:d3:1e:20:15:77:
75:3b:b0:13:c3:50:93:7e:c7:b4:f7:02:63:a7:42:38:c1:d6:
80:a2:65:08:d8:35:d5:34:a9:74:e8:3b:d3:2a:e6:d1:fb:dc:
f3:e6:93:97:ff:ec:e8:0b:fa:d1:ba:45:60:29:4f:85:09:db:
bd:ff:6d:45:98:31:86:92:71:1d:b3:29:83:57:4c:49:2f:9a:
89:bf:8a:0e:dd:d3:47:0d:95:12:70:1e:f9:13:d9:93:1a:66:
16:50:15:e8:3d:9d:d9:4d:4f:b5:f3:0f:02:e7:b2:b0:c0:4a:
70:59:f4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:29:48 2025 by rpki-client