Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3334/vprtouQBwCThFN7roFBLwzpoUck.mft
File: vprtouQBwCThFN7roFBLwzpoUck.mft (raw, json)
Hash identifier: BVTfFmNVnP6o2PA1egd2OzoiX8EEz4oVMcgCOuWqxcw=
Subject key identifier: C4:CA:F8:6A:BF:C0:F4:EF:21:DA:EE:8D:84:A8:D5:DF:AD:52:E6:30
Authority key identifier: BE:9A:ED:A2:E4:01:C0:24:E1:14:DE:EB:A0:50:4B:C3:3A:68:51:C9
Certificate issuer: /CN=BE9AEDA2E401C024E114DEEBA0504BC33A6851C9
Certificate serial: 021D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vprtouQBwCThFN7roFBLwzpoUck.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3334/vprtouQBwCThFN7roFBLwzpoUck.mft
Manifest number: 021D
Signing time: Fri 21 Mar 2025 00:32:11 +0000
Manifest this update: Fri 21 Mar 2025 00:32:11 +0000
Manifest next update: Fri 21 Mar 2025 06:32:11 +0000
Files and hashes: 1: vprtouQBwCThFN7roFBLwzpoUck.crl (hash: p9SqycI9Ph1nk2R1Cvm9C/fWxlHDoMqytH6UzZvikB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE9AEDA2E401C024E114DEEBA0504BC33A6851C9
Validity
Not Before: Mar 21 00:32:11 2025 GMT
Not After : Dec 2 02:18:36 2025 GMT
Subject: CN=C4CAF86ABFC0F4EF21DAEE8D84A8D5DFAD52E630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:96:ff:3b:71:ac:c0:7e:16:47:fb:df:8a:ec:
ea:c0:d4:bd:ba:3e:66:9e:ae:d3:df:b9:41:03:4f:
4d:34:cc:ae:58:58:8f:c6:4f:50:0f:c5:f1:fc:11:
05:c6:2b:25:4e:3d:74:54:73:f7:23:ca:79:a8:5b:
ef:f0:b5:b2:46:88:94:25:3b:15:46:fe:ec:ea:d8:
70:86:35:e4:c8:b9:f2:8e:82:58:84:44:b7:42:54:
aa:41:ca:af:22:c7:f7:75:34:11:34:e0:68:81:e1:
6c:77:c5:b3:79:dd:12:1d:f7:df:81:77:22:6a:8b:
ab:9b:93:ac:7b:59:91:e8:c3:84:6d:f7:8d:78:41:
f6:8a:f0:a3:b2:6b:3c:d3:fd:85:72:7a:77:07:9f:
28:27:93:b1:34:35:a8:96:de:a4:c2:e9:d4:70:6f:
18:fd:a0:18:b4:95:cc:5f:a6:cd:ed:44:6c:bd:9e:
bb:15:36:84:e0:14:9e:c4:60:46:21:e4:b3:c9:9c:
2e:1a:85:f0:16:c2:90:52:b9:a5:36:6e:d0:8e:ea:
c6:96:ab:4c:2b:bc:29:26:ae:0d:0f:ad:34:7b:a5:
b1:9a:cd:94:34:49:8a:a9:73:71:6e:4e:68:fb:00:
8f:d7:9f:11:19:d6:64:19:b4:04:f3:cf:91:4e:d9:
dc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CA:F8:6A:BF:C0:F4:EF:21:DA:EE:8D:84:A8:D5:DF:AD:52:E6:30
X509v3 Authority Key Identifier:
keyid:BE:9A:ED:A2:E4:01:C0:24:E1:14:DE:EB:A0:50:4B:C3:3A:68:51:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3334/vprtouQBwCThFN7roFBLwzpoUck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vprtouQBwCThFN7roFBLwzpoUck.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3334/vprtouQBwCThFN7roFBLwzpoUck.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:ca:2b:61:2f:94:05:d6:1a:ce:9f:5d:ef:0b:24:ff:6d:d4:
c4:f1:76:a8:23:e2:1f:e2:78:2e:8b:4f:c1:c0:0d:2e:6b:8c:
db:9f:fc:6a:d9:92:4b:20:30:51:72:cb:eb:85:0b:6c:81:d2:
31:50:26:fd:6a:55:4a:ac:f0:5f:1d:9c:1d:a1:60:2f:e6:8b:
ea:bf:5b:fe:ad:4f:2d:22:d8:16:79:6e:cf:cd:fb:e0:47:f8:
c7:25:a7:52:5c:65:48:25:de:6e:3c:49:90:07:2c:df:8c:7d:
9d:5d:39:13:1b:2c:e2:ab:4c:04:89:fb:02:5b:eb:da:b4:e4:
50:7e:45:9f:fa:1c:15:7e:05:a7:64:46:b5:1d:a4:ed:43:94:
ef:21:0a:e0:f1:e1:78:83:34:5e:37:8a:6e:81:35:06:de:d8:
78:b2:a9:35:71:4b:e5:db:b1:2a:d2:f1:32:aa:d1:b4:55:b9:
c3:73:c7:3d:56:b4:31:a0:d0:b4:3e:a6:63:67:24:ea:1c:f2:
db:d2:0e:00:10:52:8b:3c:af:8e:2e:74:c2:53:75:61:ec:6e:
a0:1e:88:49:0d:f2:d5:a0:9a:ca:35:37:85:f2:9d:cd:1b:e3:
24:79:ca:5a:2f:03:d1:09:8c:a7:49:86:6b:1a:02:9c:d4:38:
fa:b1:e5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:38 2025 by rpki-client