Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.mft
File: YBt2TrIFMYSt13mb83x-Ctsz99w.mft (raw, json)
Hash identifier: 7CqnBZ6Akgt+jk3NYEGBwhTozpW4zM9Nw1qXW11c408=
Subject key identifier: B1:7C:3C:F4:4B:F9:80:D1:A0:BF:8E:74:79:DA:90:78:E8:29:0A:73
Authority key identifier: 60:1B:76:4E:B2:05:31:84:AD:D7:79:9B:F3:7C:7E:0A:DB:33:F7:DC
Certificate issuer: /CN=601B764EB2053184ADD7799BF37C7E0ADB33F7DC
Certificate serial: 023E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YBt2TrIFMYSt13mb83x-Ctsz99w.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.mft
Manifest number: 023E
Signing time: Sat 29 Mar 2025 10:30:57 +0000
Manifest this update: Sat 29 Mar 2025 10:30:57 +0000
Manifest next update: Sat 29 Mar 2025 16:30:57 +0000
Files and hashes: 1: YBt2TrIFMYSt13mb83x-Ctsz99w.crl (hash: H0/PUmuNmmP1f/c6HOoP9/CSQVfqfezTF77MnlqW7Sw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601B764EB2053184ADD7799BF37C7E0ADB33F7DC
Validity
Not Before: Mar 29 10:30:57 2025 GMT
Not After : Dec 3 07:38:23 2025 GMT
Subject: CN=B17C3CF44BF980D1A0BF8E7479DA9078E8290A73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:eb:28:ea:a9:81:15:e8:67:3f:e4:f3:8a:
14:e9:34:01:10:18:8d:d3:fb:a9:6a:ed:20:f6:02:
72:24:f9:94:e1:cc:e5:9a:94:95:d1:bf:0b:fd:0e:
d7:fc:4c:c7:06:e7:99:e1:aa:fd:93:f6:05:76:69:
f8:28:79:bc:77:65:1a:1c:da:11:24:68:6d:7f:1f:
e8:34:2b:ab:73:bf:ca:23:95:b9:57:40:e3:70:71:
f0:02:3c:40:22:9c:ae:65:97:7d:cc:d4:50:41:17:
a2:11:16:e8:69:cc:2a:38:eb:6a:6f:98:83:14:99:
7e:d1:ec:11:11:5b:a2:42:ed:d7:00:96:5c:51:f2:
0a:3c:53:af:c7:16:a2:e5:9c:c4:51:cc:bc:5f:49:
e2:f8:6f:4c:c8:12:6e:32:14:23:34:1d:84:77:6f:
40:4d:aa:5a:a7:a3:b5:8a:27:62:64:8a:53:b1:60:
77:b5:ee:d5:f7:20:1c:35:fc:9e:b7:08:ca:42:34:
5f:22:a9:f7:98:2c:3f:eb:40:dc:16:55:97:e9:da:
6b:a4:fd:8e:46:7f:bd:a0:94:d2:b4:08:c6:df:a8:
61:1a:f2:0a:57:ac:97:65:73:88:d2:3c:2e:3c:63:
eb:87:e2:40:0d:58:9a:a8:0a:6b:9e:31:59:d2:36:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7C:3C:F4:4B:F9:80:D1:A0:BF:8E:74:79:DA:90:78:E8:29:0A:73
X509v3 Authority Key Identifier:
keyid:60:1B:76:4E:B2:05:31:84:AD:D7:79:9B:F3:7C:7E:0A:DB:33:F7:DC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YBt2TrIFMYSt13mb83x-Ctsz99w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:7a:58:15:47:a3:99:97:7b:be:b7:59:4c:3d:e1:4a:76:2f:
02:f7:fc:4f:2a:ee:18:2c:2d:dc:ab:b8:a0:5d:3c:e8:dd:c9:
94:5d:7c:01:52:08:1c:c5:51:0b:d9:8f:92:6d:e7:95:9b:17:
75:c4:ef:af:52:65:e5:72:e1:90:8d:11:3b:58:80:fa:6d:92:
db:db:9e:1a:7c:f9:c7:da:55:6a:18:34:94:cd:64:35:40:24:
e2:54:d7:26:5d:b3:f7:96:5a:22:d5:e5:35:dd:b7:5f:00:05:
72:e6:e7:57:24:d2:d4:b8:6a:1e:c0:ce:68:7d:17:98:e5:22:
34:b5:c0:d0:5c:95:48:8d:e1:e9:a8:cf:3c:23:ee:99:f0:4e:
bb:c0:c5:67:0b:c4:e0:0f:5e:c3:5e:8d:70:fd:93:08:77:d6:
02:7d:ef:a8:14:4e:59:b6:f6:cb:7b:93:ae:de:b4:ed:2c:28:
77:c0:58:e1:bb:5a:aa:30:d4:92:29:75:e6:c5:e4:62:6f:51:
a6:fa:d7:96:b4:b8:0a:c3:16:9f:8d:76:45:11:66:92:6f:85:
cc:9c:07:cb:15:6a:97:d2:40:49:20:6c:a8:f1:10:23:d2:2b:
6e:d3:df:60:38:73:2d:df:e8:16:ef:70:46:56:bf:e8:2b:5a:
a9:ce:fe:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:39 2025 by rpki-client