Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft
File: ldntqLoorwPp7aZMarFbbPYvoGM.mft (raw, json)
Hash identifier: DkWYZEwZeA/6Mts9UPtNAR6JCbVePqkijk7f2kkasWk=
Subject key identifier: F1:42:27:85:AE:B7:77:94:E6:77:E8:37:68:6C:92:08:29:C2:2C:70
Authority key identifier: 95:D9:ED:A8:BA:28:AF:03:E9:ED:A6:4C:6A:B1:5B:6C:F6:2F:A0:63
Certificate issuer: /CN=95D9EDA8BA28AF03E9EDA64C6AB15B6CF62FA063
Certificate serial: 0217
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ldntqLoorwPp7aZMarFbbPYvoGM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft
Manifest number: 0217
Signing time: Sat 29 Mar 2025 10:31:16 +0000
Manifest this update: Sat 29 Mar 2025 10:31:15 +0000
Manifest next update: Sat 29 Mar 2025 16:31:15 +0000
Files and hashes: 1: ldntqLoorwPp7aZMarFbbPYvoGM.crl (hash: Z9C8zVu4H1U5ebWKZ2IbZoKRYkjV1ow3ZGSCkzUnaXc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95D9EDA8BA28AF03E9EDA64C6AB15B6CF62FA063
Validity
Not Before: Mar 29 10:31:15 2025 GMT
Not After : Dec 11 23:58:45 2025 GMT
Subject: CN=F1422785AEB77794E677E837686C920829C22C70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:24:1f:1b:36:2f:ba:66:78:29:1c:e0:a7:3a:
97:52:e5:09:dd:d1:91:b2:73:8a:72:5a:fc:a9:11:
97:73:c7:c1:13:86:59:6c:bd:a3:25:61:19:5c:d7:
b5:44:e8:47:12:14:87:85:36:53:cd:b7:8c:5a:0a:
86:22:22:05:c5:8e:1c:9f:27:8d:d0:8a:82:f3:20:
ca:3c:41:96:1d:51:34:21:07:d8:78:7a:f9:35:f9:
f0:0d:4c:70:c8:71:b5:74:b6:34:d8:38:6c:88:c6:
b8:48:bd:24:d3:29:c3:d7:86:b8:08:12:f8:a0:01:
3c:63:5f:36:f8:36:15:90:cb:02:62:21:8b:4e:5d:
90:cd:e8:cb:d7:7c:6f:e4:54:09:01:77:f8:bc:8a:
71:90:b1:fc:a6:ad:c1:17:d0:66:90:b7:1e:53:98:
e1:d6:30:e6:60:ef:29:8c:1e:48:d6:b0:cf:53:d7:
3a:22:b5:cd:53:64:8f:76:ca:4b:21:ec:90:ce:06:
cd:4b:35:e0:75:02:fd:aa:fe:22:75:36:99:ea:32:
1d:4e:04:8a:56:3a:06:14:0f:f4:d5:60:02:81:2d:
20:30:5f:c3:48:55:ed:db:e7:72:77:e6:2c:99:ef:
84:7d:e3:ba:fc:f6:c7:f9:a2:35:46:c8:65:41:76:
9e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:42:27:85:AE:B7:77:94:E6:77:E8:37:68:6C:92:08:29:C2:2C:70
X509v3 Authority Key Identifier:
keyid:95:D9:ED:A8:BA:28:AF:03:E9:ED:A6:4C:6A:B1:5B:6C:F6:2F:A0:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ldntqLoorwPp7aZMarFbbPYvoGM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:7b:b6:78:96:d3:24:17:55:92:9b:45:67:a2:38:ad:2f:42:
0c:cc:97:b9:c4:62:d9:57:2e:78:24:8c:12:5e:6a:8f:49:c9:
3c:e7:99:bc:75:4d:cd:b4:b2:15:9c:3d:b8:9d:68:f2:93:e7:
7a:25:37:69:1c:53:8c:31:1e:40:4f:0e:58:bf:42:26:a1:69:
68:d2:42:08:f7:de:b7:35:12:21:09:f8:16:ae:ed:cc:83:f3:
46:c9:ee:f5:2e:2b:70:47:41:5b:1c:e5:a8:77:27:fa:f1:5d:
64:f7:61:aa:be:b5:5e:98:ec:80:21:91:11:c2:d6:7b:10:92:
15:e1:13:cb:8e:1c:ab:b3:ab:52:3f:2d:c5:a1:ab:44:54:83:
b5:e2:32:11:85:34:96:90:3f:49:90:21:2d:32:52:04:05:38:
24:20:73:90:36:e5:c2:fa:44:b2:14:cc:15:d3:c2:b0:23:61:
15:16:26:c0:63:5b:5d:fb:b6:1c:03:c6:5e:8f:bc:ec:9c:60:
c8:27:86:56:09:2b:c0:5d:b8:9a:f5:3c:bb:54:ee:1c:6f:bc:
31:dd:c3:70:65:82:6a:90:08:06:77:3e:69:54:7f:c4:21:fa:
d2:b3:14:ef:ea:dd:4b:50:d8:76:1a:ea:f9:45:8c:4a:2f:5a:
62:bc:3d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:42 2025 by rpki-client