Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3336/sdvJmjz4VWFonrkSeUwG3qXoTf0.mft
File: sdvJmjz4VWFonrkSeUwG3qXoTf0.mft (raw, json)
Hash identifier: OWIC7iq9+vUBZ/LP5V31inwNoMhzFPhGSCm2a8BXL9s=
Subject key identifier: 0A:7B:A4:DF:9B:81:DE:CB:6C:4E:1C:35:D3:00:CA:0B:73:8F:51:2E
Authority key identifier: B1:DB:C9:9A:3C:F8:55:61:68:9E:B9:12:79:4C:06:DE:A5:E8:4D:FD
Certificate issuer: /CN=B1DBC99A3CF85561689EB912794C06DEA5E84DFD
Certificate serial: 0214
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdvJmjz4VWFonrkSeUwG3qXoTf0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/sdvJmjz4VWFonrkSeUwG3qXoTf0.mft
Manifest number: 0214
Signing time: Fri 21 Mar 2025 00:28:48 +0000
Manifest this update: Fri 21 Mar 2025 00:28:48 +0000
Manifest next update: Fri 21 Mar 2025 06:28:48 +0000
Files and hashes: 1: sdvJmjz4VWFonrkSeUwG3qXoTf0.crl (hash: Ldbh2TNRF6racStamkBBLnr+qsMdc5mk813qrrbR3eQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 532 (0x214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1DBC99A3CF85561689EB912794C06DEA5E84DFD
Validity
Not Before: Mar 21 00:28:48 2025 GMT
Not After : Dec 3 07:38:23 2025 GMT
Subject: CN=0A7BA4DF9B81DECB6C4E1C35D300CA0B738F512E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:33:87:8e:10:b3:87:bd:8c:c1:16:a9:6c:
9e:b6:c5:21:2c:c6:8f:17:65:c6:0f:45:3e:4d:4b:
6c:d5:3c:51:28:4b:ee:03:e3:9f:8e:f2:b8:19:d1:
54:a6:da:43:19:d0:e7:4f:9f:13:88:f4:5d:c2:8f:
b7:22:e8:16:3d:77:42:88:14:29:6f:25:0e:a6:5e:
68:37:10:0e:66:da:13:5e:1e:5a:6c:b2:d7:ce:f7:
3a:2d:5a:df:7f:18:44:84:9e:59:f6:3f:9a:4e:b1:
52:8f:f1:83:3f:fd:1e:29:50:4f:05:d4:26:d9:63:
4c:3a:7e:82:a0:56:f7:4b:de:31:5b:90:08:c2:6e:
80:83:13:9d:40:ff:57:af:7e:64:93:cb:e8:36:fe:
ec:48:8e:7f:3e:34:ff:33:d2:79:e9:42:0a:fe:58:
5d:da:72:6f:59:e2:15:86:78:59:c1:38:52:1f:13:
a1:d1:b4:78:ab:62:57:31:64:b7:e2:87:f4:3f:41:
56:31:0b:3f:14:3e:5a:59:a8:5c:9c:a6:b1:c9:5f:
ac:57:d0:b5:a7:36:2a:07:d3:8d:2d:0c:9b:de:7c:
03:18:c6:9e:62:18:1a:8d:cf:d2:3f:ca:2f:af:b4:
4a:7d:45:31:8b:b0:ad:22:a1:71:5d:e3:64:59:ac:
c8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7B:A4:DF:9B:81:DE:CB:6C:4E:1C:35:D3:00:CA:0B:73:8F:51:2E
X509v3 Authority Key Identifier:
keyid:B1:DB:C9:9A:3C:F8:55:61:68:9E:B9:12:79:4C:06:DE:A5:E8:4D:FD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/sdvJmjz4VWFonrkSeUwG3qXoTf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdvJmjz4VWFonrkSeUwG3qXoTf0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/sdvJmjz4VWFonrkSeUwG3qXoTf0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6d:c8:37:43:b7:6f:a6:7f:8e:de:d9:d3:2c:74:9c:69:7b:
6f:63:26:4a:5a:20:74:7d:f3:de:9b:f4:c5:fb:47:ac:4c:54:
cf:33:42:3f:84:7d:e4:2c:9d:2f:77:9b:af:d4:cb:95:ef:b7:
ee:6d:41:e9:1c:04:6f:34:4a:2b:96:ef:fb:ae:90:6d:2b:b5:
63:68:c5:df:2c:f7:19:bd:10:aa:ed:fb:8f:f0:35:1b:f8:d5:
b4:a6:29:eb:83:83:c3:ec:7d:65:22:7a:2c:9c:32:3d:80:a0:
e1:e2:04:4a:ef:b8:37:5a:66:6b:67:a4:ba:66:20:88:4a:d7:
3d:af:38:c9:b6:4b:1c:93:3f:4c:fa:43:0d:6d:f3:c5:b7:f9:
ca:ee:13:bd:39:61:11:51:11:d2:aa:9a:50:57:95:13:0e:ba:
e1:b2:91:42:37:f0:b9:ac:2b:aa:02:ee:8d:43:99:b7:38:84:
a1:72:6f:fa:46:7e:11:a3:dd:f3:30:bb:55:06:8c:ee:e9:a6:
a0:90:da:80:fc:16:05:c2:da:d6:98:5f:0d:1c:75:61:24:f7:
51:5b:2c:3c:f7:35:49:83:df:ef:55:dc:4c:f0:bb:e2:cd:4e:
f6:2c:9b:f3:27:9f:ba:18:6a:41:9a:d1:b5:98:7d:e8:2c:d8:
c6:a0:0b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:02:11 2025 by rpki-client