Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3348/4-kR-6TrqZzwwUrXPulh9srrlDE.mft
File: 4-kR-6TrqZzwwUrXPulh9srrlDE.mft (raw, json)
Hash identifier: yWpZSLDx5r2vEkCFvCKhRIsGlleRwikDVxeZt4D5D1Q=
Subject key identifier: 7D:ED:8F:0B:C6:93:05:A8:44:39:9E:6C:9A:29:0B:89:1A:55:4C:88
Authority key identifier: E3:E9:11:FB:A4:EB:A9:9C:F0:C1:4A:D7:3E:E9:61:F6:CA:EB:94:31
Certificate issuer: /CN=E3E911FBA4EBA99CF0C14AD73EE961F6CAEB9431
Certificate serial: 016B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4-kR-6TrqZzwwUrXPulh9srrlDE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/4-kR-6TrqZzwwUrXPulh9srrlDE.mft
Manifest number: 016B
Signing time: Fri 21 Mar 2025 01:26:57 +0000
Manifest this update: Fri 21 Mar 2025 01:26:57 +0000
Manifest next update: Fri 21 Mar 2025 07:26:57 +0000
Files and hashes: 1: 4-kR-6TrqZzwwUrXPulh9srrlDE.crl (hash: 78WsVDYV5aWOq5JFRDVJnQwhw/IANrdtNV6xdqqNtcc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 363 (0x16b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E911FBA4EBA99CF0C14AD73EE961F6CAEB9431
Validity
Not Before: Mar 21 01:26:57 2025 GMT
Not After : Jan 7 03:18:54 2026 GMT
Subject: CN=7DED8F0BC69305A844399E6C9A290B891A554C88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5a:b0:37:45:6d:c7:fa:7e:b8:cd:23:56:a0:
85:f1:7b:34:d9:5e:0f:04:3a:dc:ab:a0:39:a8:d3:
d9:c5:e9:ab:10:1f:84:19:4f:5e:2f:ed:6d:78:2b:
e3:ea:f3:69:66:36:84:1d:11:1b:d5:6b:1a:97:ef:
31:c8:2a:32:92:e5:6f:ce:06:68:77:a7:17:3d:f8:
66:e4:ab:b3:fc:4c:eb:79:43:5b:cb:b1:67:23:c2:
f5:0f:0a:47:31:37:7a:d1:fc:7e:f4:90:e9:1d:5a:
2d:4f:19:26:c0:f4:57:00:72:bc:e8:76:cb:93:fc:
a0:83:2f:24:3c:69:6d:70:b4:87:ba:69:38:3d:6d:
d9:90:c1:ec:12:33:86:7e:84:82:2c:c8:b5:c0:a4:
b5:4d:c4:67:72:93:b3:5d:c8:f4:21:9a:3b:21:9c:
11:49:67:f3:04:b0:53:00:0f:57:f2:f3:e9:99:28:
ea:b0:0a:b6:bf:38:0a:ce:82:37:fa:5a:78:a7:0e:
71:0b:99:5c:9f:d8:c8:5a:23:c8:e8:a7:96:16:7a:
6e:0a:77:2d:5b:55:2e:e8:f0:01:46:48:c3:f5:bc:
3a:51:fb:1c:13:1b:79:9a:06:63:c6:17:14:6e:32:
5e:1e:aa:05:02:c3:bc:48:30:d1:4a:7f:06:ef:15:
31:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:ED:8F:0B:C6:93:05:A8:44:39:9E:6C:9A:29:0B:89:1A:55:4C:88
X509v3 Authority Key Identifier:
keyid:E3:E9:11:FB:A4:EB:A9:9C:F0:C1:4A:D7:3E:E9:61:F6:CA:EB:94:31
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/4-kR-6TrqZzwwUrXPulh9srrlDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4-kR-6TrqZzwwUrXPulh9srrlDE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/4-kR-6TrqZzwwUrXPulh9srrlDE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:ad:6e:da:78:53:44:bd:1f:2f:ac:84:0f:47:d0:5d:b5:d7:
eb:34:b9:72:11:e0:35:29:20:ee:3e:f6:1e:34:7d:18:ad:ef:
7d:7b:c4:9e:b3:64:75:b7:c5:01:b8:35:c8:b4:bf:2f:56:68:
d8:dc:10:47:16:22:8b:b7:4c:5b:61:a6:94:02:cf:60:f1:b9:
7b:26:31:0f:04:ec:0d:62:f4:ad:52:d8:e5:ae:97:9a:bb:ad:
1a:01:79:30:1e:de:c6:ca:09:ab:2b:19:39:6d:1e:70:d4:91:
d9:ba:89:bc:20:24:b4:49:64:a3:c0:11:af:5b:63:aa:4e:dc:
96:00:2e:c9:eb:e5:15:68:22:ae:3a:84:9b:13:03:6e:9e:f9:
da:dd:9e:39:34:1f:4e:39:b8:ce:0d:d9:33:a1:a5:20:34:b8:
f9:79:1b:57:1d:2a:a2:29:59:9a:ec:7a:40:ef:e6:8a:50:fa:
fb:64:bd:a8:75:70:bb:25:f9:33:a6:4f:8a:1e:a3:0c:44:78:
bf:84:b7:a5:6c:13:06:c3:bc:ae:d8:10:01:33:19:55:20:e1:
0d:ff:38:6a:e6:64:43:3a:ff:7f:99:f3:fb:bd:f6:b5:be:ea:
c7:07:68:a4:2b:75:94:9b:d7:9c:bd:ac:00:58:f1:0c:1e:37:
aa:40:ad:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:44 2025 by rpki-client