Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3348/7BRTzo9P3rT2cWhPomfBhndJeXc.mft
File: 7BRTzo9P3rT2cWhPomfBhndJeXc.mft (raw, json)
Hash identifier: exkOVULae3A0vnFqS+H47R7pu6BQYFZAbUP8c3vpAyw=
Subject key identifier: 82:A4:98:8F:B6:08:9D:1A:03:36:C1:A0:FC:3B:5E:32:31:88:4B:5C
Authority key identifier: EC:14:53:CE:8F:4F:DE:B4:F6:71:68:4F:A2:67:C1:86:77:49:79:77
Certificate issuer: /CN=EC1453CE8F4FDEB4F671684FA267C18677497977
Certificate serial: 0195
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BRTzo9P3rT2cWhPomfBhndJeXc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/7BRTzo9P3rT2cWhPomfBhndJeXc.mft
Manifest number: 0195
Signing time: Sat 29 Mar 2025 10:31:23 +0000
Manifest this update: Sat 29 Mar 2025 10:31:23 +0000
Manifest next update: Sat 29 Mar 2025 16:31:23 +0000
Files and hashes: 1: 7BRTzo9P3rT2cWhPomfBhndJeXc.crl (hash: 4IUDeq8OO4bKxsWz8A5JUgK7hSsDqh2nrtvj5j/k7kU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC1453CE8F4FDEB4F671684FA267C18677497977
Validity
Not Before: Mar 29 10:31:23 2025 GMT
Not After : Jan 7 03:18:54 2026 GMT
Subject: CN=82A4988FB6089D1A0336C1A0FC3B5E3231884B5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:1f:ff:d0:6b:56:1d:24:31:45:11:0d:d0:
ad:f0:ca:85:19:80:54:42:18:15:8d:98:c8:cc:a6:
46:b9:6b:d8:e7:e9:78:b3:af:52:09:10:20:df:5a:
17:dd:e8:92:9f:62:02:8a:57:af:a0:a5:d8:3e:22:
a5:96:87:5c:5e:3e:75:c2:cf:60:95:7c:e6:f8:6d:
5d:14:9e:32:9f:e0:a0:a2:f4:ed:e7:09:63:f2:a8:
51:c4:31:57:22:46:e4:08:7a:b3:33:05:34:e4:c4:
7b:3d:5e:2a:ab:9f:8b:34:ad:95:d7:cf:da:50:a6:
f8:04:72:30:02:07:9b:ae:8e:90:3e:a8:f8:ab:cb:
08:4d:28:da:4f:38:55:94:dd:59:11:83:e0:d0:2d:
f9:a0:85:0b:cb:3a:c9:7e:ff:6e:13:75:40:ee:a7:
96:af:d7:cd:cb:38:2f:c3:71:65:06:ee:1a:6d:65:
a8:07:00:57:30:9b:78:e8:10:6b:72:43:7a:e3:f2:
85:ab:75:59:86:ad:d1:1b:82:6c:bf:47:57:f6:f9:
51:49:fb:de:dd:2f:e4:70:44:cb:18:26:bf:ff:88:
e0:9b:8d:4e:c5:2c:7a:a6:2f:e8:89:7d:be:8f:36:
55:c9:55:07:f1:61:35:71:77:b9:f8:2b:ab:b6:ee:
ab:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A4:98:8F:B6:08:9D:1A:03:36:C1:A0:FC:3B:5E:32:31:88:4B:5C
X509v3 Authority Key Identifier:
keyid:EC:14:53:CE:8F:4F:DE:B4:F6:71:68:4F:A2:67:C1:86:77:49:79:77
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/7BRTzo9P3rT2cWhPomfBhndJeXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BRTzo9P3rT2cWhPomfBhndJeXc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/7BRTzo9P3rT2cWhPomfBhndJeXc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:3f:06:86:12:17:79:75:f7:ca:c2:63:9b:04:86:de:43:34:
af:74:11:c3:c9:df:fa:b8:f8:56:c8:96:32:da:98:4f:cf:6f:
dd:20:59:32:86:ff:fe:49:8f:56:ab:12:34:8e:51:4c:33:49:
80:b8:ec:57:b1:e3:c6:b4:75:56:fb:dd:e6:ba:49:f4:25:d7:
67:cb:66:1a:ba:97:e5:be:11:ef:95:d5:cb:b7:d2:3d:97:8d:
c1:1e:4d:0b:1d:de:ec:fe:32:95:ab:38:a4:94:be:66:82:30:
8f:24:6c:85:f9:67:e5:de:91:65:c9:b3:d5:11:81:a4:d6:e1:
e2:0a:d6:c7:3a:08:d8:5d:49:8e:46:17:fe:6e:d3:e3:ba:43:
04:14:1f:86:13:f7:04:ed:32:3e:ad:4f:95:69:94:b1:b1:fd:
23:6d:b1:3d:39:d2:a2:6f:af:03:60:05:87:1d:2a:3e:19:ba:
f8:46:20:92:7e:be:49:9a:c0:99:ef:d7:db:59:2d:b6:24:ce:
07:3d:e4:0e:c4:ba:39:ec:8a:e8:a6:1f:0a:c4:52:ac:4e:98:
93:d7:0c:69:57:ef:d9:6c:1b:b3:1f:95:85:0a:91:5f:1c:a3:
01:78:dd:c0:ee:99:6c:7f:e4:e2:5a:4d:1a:88:dc:c4:07:ae:
d6:17:5f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:41 2025 by rpki-client