Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3343/0Thk00ASqL2IAiF99LmT9iQBB2w.mft
File: 0Thk00ASqL2IAiF99LmT9iQBB2w.mft (raw, json)
Hash identifier: dZ1vSmG45sEhF60wJztPzMFy45wv22mtMKWm0RxAXk4=
Subject key identifier: 00:91:B7:3B:A0:64:11:18:D0:2A:80:45:59:62:19:82:07:B8:3A:C5
Authority key identifier: D1:38:64:D3:40:12:A8:BD:88:02:21:7D:F4:B9:93:F6:24:01:07:6C
Certificate issuer: /CN=D13864D34012A8BD8802217DF4B993F62401076C
Certificate serial: 032B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Thk00ASqL2IAiF99LmT9iQBB2w.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3343/0Thk00ASqL2IAiF99LmT9iQBB2w.mft
Manifest number: 032B
Signing time: Thu 05 Jun 2025 16:44:31 +0000
Manifest this update: Thu 05 Jun 2025 16:44:31 +0000
Manifest next update: Thu 05 Jun 2025 22:44:31 +0000
Files and hashes: 1: 0Thk00ASqL2IAiF99LmT9iQBB2w.crl (hash: JldCQEOH+HrsvE9pOMA/BGSSbRPlXKRgXUCDEyJpdbc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 811 (0x32b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D13864D34012A8BD8802217DF4B993F62401076C
Validity
Not Before: Jun 5 16:44:31 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0091B73BA0641118D02A80455962198207B83AC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:dd:4f:f5:72:89:66:0d:f6:f6:47:59:ec:
ef:40:b2:1c:56:8e:08:72:8a:d3:68:9a:b4:0f:7c:
ea:16:27:97:c8:f2:4c:ec:26:15:97:6c:e3:16:9a:
09:5c:90:34:44:85:54:23:41:4d:b4:41:a7:41:92:
f2:33:4c:fe:3b:19:8c:40:d3:bc:8f:e3:31:d6:2e:
c7:fe:4c:6c:3e:e4:ef:c8:74:0a:db:1d:3c:e2:07:
38:d5:0c:a0:16:fc:6f:22:f5:09:8f:2b:ad:b0:11:
2f:ec:3f:04:f1:82:ed:38:51:42:d2:46:ab:fb:e4:
24:f6:1a:60:04:66:6a:4b:5a:9d:78:14:c1:84:90:
c1:4c:a3:6e:14:e2:3b:7c:dd:5d:e1:c1:d2:83:6f:
11:6d:40:89:48:47:e2:d6:c4:63:c5:e8:c7:15:d1:
ed:eb:a7:fb:b5:09:fe:b5:d7:c3:a5:e4:6a:dc:61:
dd:8f:73:dd:fe:ec:f4:da:7a:40:a0:61:62:f5:c5:
35:6a:28:36:e0:ef:db:a9:1b:f7:40:e1:fa:12:9f:
67:c5:4e:48:84:83:1d:93:c7:b3:3f:ba:c4:09:25:
8a:b4:b0:a9:b7:68:8c:a9:b3:88:a5:ba:d1:75:16:
2c:0c:36:fc:c2:72:a2:1b:56:c0:e1:c5:6c:d9:4a:
4d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:91:B7:3B:A0:64:11:18:D0:2A:80:45:59:62:19:82:07:B8:3A:C5
X509v3 Authority Key Identifier:
keyid:D1:38:64:D3:40:12:A8:BD:88:02:21:7D:F4:B9:93:F6:24:01:07:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3343/0Thk00ASqL2IAiF99LmT9iQBB2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Thk00ASqL2IAiF99LmT9iQBB2w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3343/0Thk00ASqL2IAiF99LmT9iQBB2w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:29:31:41:2a:8d:5e:8b:c5:82:2a:c8:95:71:4f:8e:10:a0:
b4:7d:bf:1f:ca:43:55:3a:db:7b:dd:d7:7c:e4:96:f7:e2:68:
b0:26:bf:46:a7:07:39:8f:0e:23:4e:21:28:9d:c0:51:2d:e7:
61:6f:52:87:67:00:26:ab:c2:b6:c5:cb:e9:61:b8:51:45:dd:
50:c4:4c:a8:33:d8:95:5d:82:82:5d:02:cd:c0:24:09:25:59:
57:71:07:b3:06:f3:d7:9a:cf:c6:ff:28:03:7d:2e:b3:d6:5e:
31:5a:74:c2:23:8c:41:5c:ec:26:91:10:39:14:b6:9a:8a:2c:
ec:a8:1f:c3:3d:d4:e1:21:cc:93:88:a5:b1:bb:c5:33:55:43:
cc:58:43:ba:e3:5e:b0:e4:6e:75:46:e1:f0:49:6d:3e:10:a3:
ac:7e:8b:1e:de:04:6d:ee:d4:a6:a1:94:f3:7b:3b:38:f1:04:
91:73:5d:f0:a2:5d:93:39:a9:89:5f:57:76:41:97:a7:b4:a8:
b0:c5:81:03:b8:ed:2b:85:52:02:da:8d:a8:24:4c:51:2d:5f:
1f:d4:38:d0:07:56:09:08:66:00:04:1f:b1:5e:b4:87:0d:f1:
05:51:e9:34:a3:ea:20:7a:ff:0d:6b:be:3a:d8:50:0d:a2:aa:
df:a7:12:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:09:01 2025 by rpki-client