Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft
File: fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft (raw, json)
Hash identifier: SSzqf+BtGzzlJ6g0np2dQ5BXh6LS0xnKqTn+eP3UhSk=
Subject key identifier: A9:C9:6D:2C:D7:FF:73:A2:4D:41:60:27:35:A7:3A:35:A0:69:50:09
Authority key identifier: 7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6
Certificate issuer: /CN=7E403B9520B4246443D3EB87FF1ACC699E04DFB6
Certificate serial: 03B1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft
Manifest number: 03B1
Signing time: Thu 05 Jun 2025 16:45:23 +0000
Manifest this update: Thu 05 Jun 2025 16:45:23 +0000
Manifest next update: Thu 05 Jun 2025 22:45:23 +0000
Files and hashes: 1: fkA7lSC0JGRD0-uH_xrMaZ4E37Y.crl (hash: Mqt8FsP96IDSotj0eWKhf2C/HMn+8op+Ip/kFCv99V8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 945 (0x3b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E403B9520B4246443D3EB87FF1ACC699E04DFB6
Validity
Not Before: Jun 5 16:45:23 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A9C96D2CD7FF73A24D41602735A73A35A0695009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:d1:dd:7d:8d:3f:3f:cc:2b:5d:b7:4b:22:
98:52:25:29:58:7e:98:42:d4:70:0f:27:ed:8e:77:
8d:4d:36:96:c0:4c:60:f1:93:56:45:e4:12:33:e0:
a3:45:1e:21:a4:f3:aa:81:04:cd:e3:8f:da:1c:f1:
c6:5e:d0:38:98:b1:74:e9:2d:10:b0:f5:c4:25:2b:
8e:34:9f:77:dd:16:76:e5:54:7c:5b:84:a2:d1:5d:
28:5d:50:b6:46:2e:24:5c:63:6d:c2:e5:94:90:c9:
11:d1:61:fd:28:3f:f4:0d:cb:72:74:d2:80:ad:50:
de:ee:8e:e0:ba:f3:92:4d:be:ba:cd:c4:2a:0f:6c:
d8:0a:d3:b5:90:43:90:ff:d1:8b:6b:74:7f:cd:d1:
a0:ac:33:30:9b:96:5e:6b:3a:4d:8b:b8:8d:c7:2c:
e1:3e:2e:b5:5b:5e:35:48:08:eb:75:b9:24:7a:d3:
d7:89:70:b9:87:fd:9d:45:3e:95:ce:bf:a3:96:c5:
a0:31:c0:56:f9:76:ed:12:8f:dd:e9:54:26:cb:32:
bb:dd:ba:79:af:ac:58:61:a1:87:09:a3:87:86:f0:
47:3a:d6:49:c5:df:3a:4b:e3:96:ac:0b:22:8b:c6:
a8:fe:41:2d:02:7e:df:2a:b0:85:34:bf:21:47:f9:
53:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C9:6D:2C:D7:FF:73:A2:4D:41:60:27:35:A7:3A:35:A0:69:50:09
X509v3 Authority Key Identifier:
keyid:7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:29:f3:75:33:a8:e1:a2:9c:eb:b1:cb:7f:4f:56:53:de:39:
98:71:6c:99:27:fc:2c:21:ce:32:98:55:f5:84:38:64:f0:18:
2d:5c:91:bc:2f:b1:39:2d:76:fe:7e:9a:63:2e:10:19:ca:df:
95:1d:e5:b6:ca:1a:b0:0d:4c:9f:ed:a8:5c:f1:b1:89:96:84:
b5:77:f1:90:af:c3:8e:0f:36:5c:b1:5e:7b:f0:00:d5:bd:2c:
f1:a9:48:69:37:b8:6e:05:92:7d:f8:01:a3:51:6a:e2:9b:a6:
a9:01:94:99:20:22:bf:03:15:ff:a3:b1:fa:3f:29:64:b6:a1:
f0:35:dd:e0:2c:89:f3:63:16:8f:4e:bf:15:47:96:e4:33:26:
df:c9:74:ab:3e:c2:01:af:81:6a:b6:41:32:50:a9:d3:12:74:
2c:67:c4:91:74:1d:f7:1a:9d:eb:71:09:9d:b9:71:23:cf:ab:
8a:a2:2d:fd:e7:20:35:3d:36:7f:8f:1b:5d:10:ce:0f:88:b7:
21:15:e6:02:a7:9d:0f:fa:ff:dc:41:cf:2b:94:ce:8a:80:a2:
f2:f2:49:fd:71:29:7b:ce:c3:62:80:bc:29:dd:fe:e6:0e:c1:
bb:81:8c:c0:d5:20:18:aa:56:05:5a:d8:ef:29:e0:a7:24:29:
97:13:3c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:12:38 2025 by rpki-client