Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3351/7aUtpkhG0-ZV3pk87JPIcbz253w.mft
File: 7aUtpkhG0-ZV3pk87JPIcbz253w.mft (raw, json)
Hash identifier: +UPw5RqTyhep+U0yVH7h6RYInRak4kILwF2rNwzSjX8=
Subject key identifier: 37:42:35:FF:9F:CE:3D:59:C2:19:49:A9:D2:DA:1C:B0:8A:F4:C5:5E
Authority key identifier: ED:A5:2D:A6:48:46:D3:E6:55:DE:99:3C:EC:93:C8:71:BC:F6:E7:7C
Certificate issuer: /CN=EDA52DA64846D3E655DE993CEC93C871BCF6E77C
Certificate serial: 97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7aUtpkhG0-ZV3pk87JPIcbz253w.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3351/7aUtpkhG0-ZV3pk87JPIcbz253w.mft
Manifest number: 97
Signing time: Fri 21 Mar 2025 00:32:45 +0000
Manifest this update: Fri 21 Mar 2025 00:32:45 +0000
Manifest next update: Fri 21 Mar 2025 06:32:45 +0000
Files and hashes: 1: 7aUtpkhG0-ZV3pk87JPIcbz253w.crl (hash: D2tv9gZ0xCNe+xv6d7e3HeG19biBivl/Wp4QBa9ayvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDA52DA64846D3E655DE993CEC93C871BCF6E77C
Validity
Not Before: Mar 21 00:32:45 2025 GMT
Not After : Feb 18 23:15:08 2026 GMT
Subject: CN=374235FF9FCE3D59C21949A9D2DA1CB08AF4C55E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:73:c9:11:ff:f2:47:25:b9:cf:b2:72:bc:
cb:28:2e:ab:3a:04:87:ff:49:fb:1e:fa:ed:c6:5c:
0e:39:12:d2:92:df:7e:19:ff:fd:7a:b1:43:a6:21:
f4:b6:89:72:1a:c8:13:a9:31:55:c5:9a:d5:7b:39:
e1:d5:53:71:41:c0:12:0c:b0:28:23:9a:2e:62:ce:
bc:93:4a:b6:cd:33:8f:ed:f9:ef:9e:eb:50:11:1f:
95:a9:4e:e9:9b:7a:47:3b:08:5a:c4:6c:ff:a0:be:
8d:4e:12:df:24:c3:9f:26:f2:a9:da:a5:40:5c:75:
79:b6:7a:eb:a1:9c:4f:cf:18:ac:09:26:f4:59:63:
9d:59:1a:be:da:7c:45:fc:91:73:d0:8b:a2:7c:26:
8c:8c:21:c6:2f:69:d6:60:ee:c1:2d:93:40:80:31:
6a:d9:2c:d6:2c:46:47:be:34:a8:a6:72:51:06:50:
d6:47:09:6b:72:7a:14:7e:ef:28:aa:a4:86:d3:f8:
d4:50:6c:52:81:4a:a3:9a:1e:b0:ee:6d:5e:19:23:
b6:a1:ea:ec:90:aa:06:b0:9f:a5:03:43:41:26:10:
46:c6:82:a7:af:a2:9b:ae:21:29:18:d6:f5:7a:c4:
0b:ad:9b:ff:ff:05:ed:6d:b0:c3:6a:b3:ee:0b:fd:
c0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:42:35:FF:9F:CE:3D:59:C2:19:49:A9:D2:DA:1C:B0:8A:F4:C5:5E
X509v3 Authority Key Identifier:
keyid:ED:A5:2D:A6:48:46:D3:E6:55:DE:99:3C:EC:93:C8:71:BC:F6:E7:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3351/7aUtpkhG0-ZV3pk87JPIcbz253w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7aUtpkhG0-ZV3pk87JPIcbz253w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3351/7aUtpkhG0-ZV3pk87JPIcbz253w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:27:72:3b:a6:e4:1d:a5:21:ae:04:ff:2e:74:8e:58:80:9f:
c5:f5:02:9f:0c:02:5e:0d:fe:ad:79:d2:65:43:64:5a:35:97:
8c:4d:21:bc:d2:a1:1a:54:7e:1a:bd:73:38:61:92:a2:23:d9:
37:fe:f4:17:e3:09:97:ec:e7:2c:02:14:66:96:79:2d:9a:5c:
99:66:06:a2:71:1a:84:31:ba:82:dc:a4:93:01:a9:1b:e3:93:
91:dd:66:aa:51:54:38:0b:de:24:63:8a:53:88:eb:bb:dd:97:
23:7c:26:fa:04:d0:e3:54:21:34:82:13:c6:61:fd:05:5b:28:
65:24:fb:df:39:4a:0f:7c:bf:98:e6:25:86:4c:9b:3a:92:88:
27:98:9a:31:02:f6:b3:c9:1f:c7:7d:09:26:b8:f1:97:34:f6:
5d:24:cd:55:e0:5c:b1:4b:ee:85:2e:10:12:20:7b:bc:aa:3d:
69:88:17:69:a1:5c:10:61:c1:20:e8:d0:f2:f8:75:58:44:d2:
3d:fb:a0:8a:ac:ec:45:c3:cd:17:bd:e1:45:23:fd:34:e1:bd:
77:d2:f7:f6:83:28:4a:03:14:c6:e9:5d:7f:32:30:11:a8:32:
88:78:ab:43:c1:55:5a:dd:7f:1c:70:03:70:14:65:8d:8a:eb:
fd:9c:21:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:50 2025 by rpki-client