Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3335/HGWVpCrOOFPHh2cE5lvoX1wYUnk.mft
File: HGWVpCrOOFPHh2cE5lvoX1wYUnk.mft (raw, json)
Hash identifier: ucpG4WjlJ7fiIfWdzLO8jry5nkdiWyDMf5rTxlz9YAg=
Subject key identifier: 41:C0:BC:01:D3:A5:31:04:38:42:93:9A:B4:1F:F3:CC:BF:84:D8:2D
Authority key identifier: 1C:65:95:A4:2A:CE:38:53:C7:87:67:04:E6:5B:E8:5F:5C:18:52:79
Certificate issuer: /CN=1C6595A42ACE3853C7876704E65BE85F5C185279
Certificate serial: 0241
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HGWVpCrOOFPHh2cE5lvoX1wYUnk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/HGWVpCrOOFPHh2cE5lvoX1wYUnk.mft
Manifest number: 0241
Signing time: Sat 29 Mar 2025 10:30:55 +0000
Manifest this update: Sat 29 Mar 2025 10:30:55 +0000
Manifest next update: Sat 29 Mar 2025 16:30:55 +0000
Files and hashes: 1: HGWVpCrOOFPHh2cE5lvoX1wYUnk.crl (hash: spS5pZa4+4dme3tEKMGSn0QzVkEoeYkWXRQyO15iOBg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 577 (0x241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C6595A42ACE3853C7876704E65BE85F5C185279
Validity
Not Before: Mar 29 10:30:55 2025 GMT
Not After : Dec 3 07:29:30 2025 GMT
Subject: CN=41C0BC01D3A531043842939AB41FF3CCBF84D82D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:55:27:89:99:f7:37:b9:b9:5e:cf:49:bb:
94:59:c4:73:e2:c1:71:d4:3f:31:0c:b0:17:3d:ba:
4d:69:ae:dd:e1:76:d1:d9:e2:59:01:3c:cf:10:37:
b1:a9:2a:c7:65:16:bb:f7:e8:79:da:9c:65:0d:9f:
88:00:b4:f9:07:f9:48:81:b2:53:45:36:10:ba:af:
1f:06:98:d4:69:77:37:67:f5:30:2b:f7:42:3a:2e:
a0:03:cf:8e:52:ae:28:e3:13:65:a3:e2:0e:ff:7e:
ab:9a:9f:e5:00:ff:b7:e4:93:12:a7:8c:82:a4:89:
ae:15:5e:72:b1:5f:ea:2c:be:e2:15:55:2f:32:ca:
3d:d1:ab:cb:51:6d:3d:d4:9f:56:07:1d:d1:16:89:
73:a3:2b:09:61:16:3c:af:ee:b7:01:98:d3:4e:d3:
d9:fd:6f:e8:66:7d:3c:97:d2:a7:bc:70:7b:63:d8:
60:60:4f:09:08:cb:c0:f0:f6:99:be:a3:43:f6:5e:
b8:18:f3:fd:fe:f2:67:af:8d:e1:3c:46:8e:b8:0c:
e9:6f:23:8a:c3:38:92:47:98:6e:14:6f:7e:52:4c:
93:7b:3b:e3:35:bc:6b:40:2a:26:fb:79:94:39:57:
4b:ab:1e:e2:e2:71:dc:57:c3:b0:15:35:52:2a:7f:
e6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C0:BC:01:D3:A5:31:04:38:42:93:9A:B4:1F:F3:CC:BF:84:D8:2D
X509v3 Authority Key Identifier:
keyid:1C:65:95:A4:2A:CE:38:53:C7:87:67:04:E6:5B:E8:5F:5C:18:52:79
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/HGWVpCrOOFPHh2cE5lvoX1wYUnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HGWVpCrOOFPHh2cE5lvoX1wYUnk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/HGWVpCrOOFPHh2cE5lvoX1wYUnk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:00:75:b8:ba:f8:0a:5f:57:64:d4:5f:43:f4:f0:6b:42:e5:
77:b0:b1:e5:bb:37:45:c0:12:02:49:55:61:ae:14:02:53:e6:
3a:61:4c:60:d9:d9:3e:84:e7:5c:d0:1e:48:5d:2b:70:c9:20:
4f:27:66:22:76:41:24:03:47:67:a5:c0:a2:30:e4:16:f5:c1:
12:b0:f8:8a:b7:62:cf:fd:f8:96:d9:23:e7:4c:f6:d5:19:ea:
2f:51:39:65:3f:37:8d:d7:10:f6:0b:9e:f5:65:3b:b1:02:79:
d7:89:b8:98:21:8a:df:13:40:a4:3d:05:26:8d:ec:47:50:27:
f1:a9:f8:53:e4:7b:a1:9c:e1:da:7a:1e:e1:e1:57:f1:c0:d5:
c2:18:1b:26:9f:d9:d8:7d:d6:f7:7f:87:2e:02:09:60:ce:94:
8d:04:d7:24:03:09:fb:21:97:9b:4b:d2:b3:db:f7:b8:c8:2e:
69:9c:de:5b:2d:d2:de:c5:23:51:07:1f:89:8a:d2:9f:ae:90:
55:e2:8f:9e:1e:96:1e:ea:c8:0e:af:2e:8c:51:96:85:6c:0d:
4e:0f:a6:7a:a5:65:7f:1f:43:8e:bc:27:6e:a9:c4:87:aa:54:
8c:07:f6:90:64:66:6c:39:86:66:6e:8a:68:67:77:79:d7:ba:
34:3f:9c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:33 2025 by rpki-client