Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3357/E2CTbmfETZO_WT2GobjJ3gG6y8w.mft
File: E2CTbmfETZO_WT2GobjJ3gG6y8w.mft (raw, json)
Hash identifier: 91vRfKvUsP9c6ruM0tJDe9O2JVUXsKsmTTt/W7gnrUQ=
Subject key identifier: D6:EA:20:48:E3:59:D1:19:BE:58:3A:35:75:38:E8:C9:0F:1E:D0:82
Authority key identifier: 13:60:93:6E:67:C4:4D:93:BF:59:3D:86:A1:B8:C9:DE:01:BA:CB:CC
Certificate issuer: /CN=1360936E67C44D93BF593D86A1B8C9DE01BACBCC
Certificate serial: 2E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/E2CTbmfETZO_WT2GobjJ3gG6y8w.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3357/E2CTbmfETZO_WT2GobjJ3gG6y8w.mft
Manifest number: 2E
Signing time: Wed 19 Mar 2025 19:56:36 +0000
Manifest this update: Wed 19 Mar 2025 19:56:36 +0000
Manifest next update: Thu 20 Mar 2025 01:56:36 +0000
Files and hashes: 1: E2CTbmfETZO_WT2GobjJ3gG6y8w.crl (hash: DK1OmDSngy0v6R2RQ8cDH90Jwh0R8AY0FhsRIhdqwqM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1360936E67C44D93BF593D86A1B8C9DE01BACBCC
Validity
Not Before: Mar 19 19:56:36 2025 GMT
Not After : Mar 10 23:06:01 2026 GMT
Subject: CN=D6EA2048E359D119BE583A357538E8C90F1ED082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:2d:fb:ac:b1:f2:22:94:70:09:0b:dd:6f:
d9:9c:9b:18:5c:94:47:22:25:04:16:22:cb:8b:74:
69:ff:ac:64:8c:b6:9a:68:58:9e:91:d7:df:ec:79:
2f:5d:a2:31:2b:32:dd:e1:f5:87:d0:cb:62:55:69:
3c:db:d4:5a:32:14:cc:a7:3e:b7:ad:d7:c6:5f:63:
b8:2f:43:9e:6e:ea:c5:63:84:8e:6d:09:04:57:f5:
2c:22:0e:8d:c3:01:9c:da:25:7a:9a:e7:89:f8:0b:
d3:03:b8:c4:cb:bd:85:79:e8:32:a7:9e:18:e3:d5:
49:0f:ca:c2:e3:df:70:38:d6:32:c3:36:21:7c:fe:
85:9d:5d:a1:e9:e5:be:6e:23:3d:50:e5:54:f2:3c:
aa:df:95:b0:a5:f0:b8:79:cb:47:27:d8:49:8d:b8:
b4:e2:32:53:d1:e7:14:33:96:a1:d2:a7:fc:c6:ba:
ab:8f:0a:f4:d9:b8:b6:fb:7c:0f:96:76:51:b1:cf:
de:5c:47:f2:f5:5d:ff:2b:7a:8e:ee:c5:1d:7a:74:
87:27:db:16:7d:77:b6:6a:dc:de:a8:c2:be:31:64:
be:c9:1f:4e:74:d0:0e:09:06:6c:9e:21:73:68:05:
6c:3e:a6:92:4f:16:8b:77:8c:35:43:9a:7d:ab:74:
ec:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EA:20:48:E3:59:D1:19:BE:58:3A:35:75:38:E8:C9:0F:1E:D0:82
X509v3 Authority Key Identifier:
keyid:13:60:93:6E:67:C4:4D:93:BF:59:3D:86:A1:B8:C9:DE:01:BA:CB:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3357/E2CTbmfETZO_WT2GobjJ3gG6y8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/E2CTbmfETZO_WT2GobjJ3gG6y8w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3357/E2CTbmfETZO_WT2GobjJ3gG6y8w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:b7:f0:e5:c3:75:6f:47:2e:a2:ee:4f:ed:ed:69:04:db:14:
95:19:6f:7b:7b:f9:8f:ed:2f:c6:0b:8b:62:98:a0:bf:1c:32:
23:ab:08:4e:69:bf:a3:db:c4:7b:b2:ed:3a:5e:4d:3c:50:de:
c1:60:96:fb:c6:39:70:b6:d0:7c:8d:26:57:0b:ac:fe:0d:79:
22:2e:fe:71:e6:4d:e2:c4:13:34:c0:a9:61:2f:7a:94:13:a7:
0c:81:f6:ca:e5:5b:22:bb:b5:97:b5:c9:47:39:d7:e8:e5:a7:
c1:d0:2b:19:ea:80:b6:3c:08:66:77:5d:e8:12:22:ef:e2:1b:
3d:55:b4:9e:0f:82:27:3e:5d:3d:a1:78:c6:74:5d:a5:57:e0:
92:dd:7d:93:28:07:66:8c:80:b7:de:75:d2:2e:ac:52:9f:27:
4a:0f:22:91:04:3b:a4:62:c0:e9:4b:98:09:c3:ce:31:14:72:
21:d5:6c:a5:ef:f6:f3:34:be:81:ce:a7:a4:71:3e:d6:c7:8b:
7c:ad:3c:8a:36:44:bd:89:5a:a6:a4:f9:2a:21:06:e7:87:c4:
0d:02:d7:9e:9e:59:96:f7:a3:83:ff:d5:d3:67:95:b8:4d:44:
7b:bc:ba:67:88:14:20:d4:87:7f:e5:fb:6e:b9:97:ad:53:55:
5b:ab:ed:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:34:35 2025 by rpki-client