Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.mft
File: dLHNkLnEHIANH1u3AQiWQC4auU4.mft (raw, json)
Hash identifier: 9x3UzOLJpbKR9J347zDIK9y9z1hPzH1JT8n7uaN/HOE=
Subject key identifier: B0:54:D2:70:E7:FB:43:E0:C7:77:B3:3D:79:CA:A9:F9:0E:52:26:B0
Authority key identifier: 74:B1:CD:90:B9:C4:1C:80:0D:1F:5B:B7:01:08:96:40:2E:1A:B9:4E
Certificate issuer: /CN=74B1CD90B9C41C800D1F5BB7010896402E1AB94E
Certificate serial: 017D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dLHNkLnEHIANH1u3AQiWQC4auU4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.mft
Manifest number: 017D
Signing time: Mon 17 Feb 2025 19:27:14 +0000
Manifest this update: Mon 17 Feb 2025 19:27:14 +0000
Manifest next update: Tue 18 Feb 2025 01:27:14 +0000
Files and hashes: 1: dLHNkLnEHIANH1u3AQiWQC4auU4.crl (hash: i1Cj6eG6zLJL/I6qOW6XEyc6gtvL1AIyyLB3JtHIEYw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381 (0x17d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74B1CD90B9C41C800D1F5BB7010896402E1AB94E
Validity
Not Before: Feb 17 19:27:14 2025 GMT
Not After : Dec 3 07:29:30 2025 GMT
Subject: CN=B054D270E7FB43E0C777B33D79CAA9F90E5226B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:0f:2d:e4:fc:fd:40:e6:c9:69:06:2c:d0:
63:f2:39:94:44:ab:77:3a:54:18:e1:c0:8b:d4:20:
b5:d0:43:40:59:34:7a:aa:f6:39:9f:1e:33:db:12:
ee:50:c0:ca:13:fc:45:b1:1d:b7:34:16:6d:80:c6:
5d:34:23:6d:aa:00:3b:ec:a7:1a:3c:5c:ac:75:3b:
a9:01:17:f5:1f:18:2e:25:84:b9:d7:6b:4e:9c:10:
87:af:01:0b:e7:59:73:8c:28:a9:50:67:22:9a:cd:
72:96:01:0c:11:76:26:c0:92:aa:9b:34:5d:30:1e:
39:13:38:e1:1c:c6:1c:6e:11:34:f4:ad:4a:e1:13:
04:5e:12:53:7d:59:9c:7f:06:60:84:25:be:29:49:
ae:e5:d2:fe:0c:5d:57:0b:7a:ed:33:47:1c:a8:ce:
ef:03:5a:09:66:d1:a3:61:45:fa:d1:16:80:84:6d:
04:bf:e8:8f:a1:7a:70:d2:a9:96:dc:48:df:2b:b5:
04:a6:94:f3:4f:30:bb:68:5c:f0:06:6b:8b:88:4f:
60:80:e3:8a:b7:ee:8e:d7:88:58:0a:65:12:73:ae:
a1:65:8b:b6:03:f7:c9:08:1c:e7:93:51:38:98:0c:
1d:ef:03:ac:63:26:e3:fd:e3:36:8e:25:6d:83:1f:
50:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:54:D2:70:E7:FB:43:E0:C7:77:B3:3D:79:CA:A9:F9:0E:52:26:B0
X509v3 Authority Key Identifier:
keyid:74:B1:CD:90:B9:C4:1C:80:0D:1F:5B:B7:01:08:96:40:2E:1A:B9:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dLHNkLnEHIANH1u3AQiWQC4auU4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:48:e1:45:d1:fa:d2:29:22:b0:76:8a:c0:a6:f1:e3:83:e0:
00:59:6d:d6:61:58:01:8a:4b:31:fc:61:31:b1:d5:61:f3:b8:
12:3a:65:a4:a1:c0:71:ee:03:73:3d:9a:26:e8:5c:94:75:84:
08:98:d9:ad:e3:79:7b:4d:29:32:08:12:87:09:7e:08:d6:1b:
27:68:a3:5f:66:bf:9f:5f:8a:aa:7d:d8:04:63:e1:50:3c:64:
61:9b:c9:97:6b:e1:1e:5d:9d:0c:42:ae:44:43:09:ca:d5:d9:
0a:ac:d7:20:30:99:cb:2e:24:d5:48:76:5b:33:82:b4:31:8a:
31:ed:5b:54:d4:93:d8:1c:45:8c:58:cc:3e:f2:45:3d:87:9a:
42:c2:e2:26:f2:9e:89:6a:d3:66:d1:9f:43:44:40:3f:ce:74:
67:ec:9c:64:8b:ae:fc:47:39:88:a5:21:f5:c6:e5:bf:17:b5:
40:0f:e5:3e:d5:8b:2a:4b:84:e8:f2:82:eb:61:80:76:54:21:
d5:8f:dc:36:00:bd:9d:e2:f7:07:d5:ac:b0:2d:28:69:01:b6:
6a:00:a4:e2:69:68:dc:1c:16:63:54:2d:07:a6:23:17:dc:5a:
7d:f6:77:bb:a0:7c:a2:9a:89:6d:d0:c5:67:8e:b5:26:5d:1e:
3c:1d:d1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:16:18 2025 by rpki-client