Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/338/iY_NiB8trZUa3DHkgcTtyCCTGtM.mft
File: iY_NiB8trZUa3DHkgcTtyCCTGtM.mft (raw, json)
Hash identifier: GBDrV3ZFLf6LYfo0Na8mNhqSN7QIUlY8LFLGNQ1ink0=
Subject key identifier: 26:D5:A2:25:0C:9C:07:F5:B0:C0:55:57:0D:9F:F4:BB:DA:7D:20:B8
Authority key identifier: 89:8F:CD:88:1F:2D:AD:95:1A:DC:31:E4:81:C4:ED:C8:20:93:1A:D3
Certificate issuer: /CN=898FCD881F2DAD951ADC31E481C4EDC820931AD3
Certificate serial: 18B2
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iY_NiB8trZUa3DHkgcTtyCCTGtM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/338/iY_NiB8trZUa3DHkgcTtyCCTGtM.mft
Manifest number: 18B2
Signing time: Fri 04 Apr 2025 19:06:08 +0000
Manifest this update: Fri 04 Apr 2025 19:06:08 +0000
Manifest next update: Sat 05 Apr 2025 01:06:08 +0000
Files and hashes: 1: iY_NiB8trZUa3DHkgcTtyCCTGtM.crl (hash: J5ftu5FzISZ+Wrmo5nLLsbPmmeXYP+BH4pHaSfIlHOY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6322 (0x18b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=898FCD881F2DAD951ADC31E481C4EDC820931AD3
Validity
Not Before: Apr 4 19:06:08 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=26D5A2250C9C07F5B0C055570D9FF4BBDA7D20B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:a5:d2:e2:cc:2c:37:c8:aa:43:13:1a:2c:
9e:fb:21:87:69:c8:00:c4:83:45:43:c3:87:cf:ed:
29:50:14:42:61:c4:66:ce:6d:c5:59:9d:2a:9f:f5:
67:c5:ae:17:f8:1b:2c:75:60:2b:dd:bf:b3:fe:59:
02:7a:11:d2:9a:11:21:36:5f:cc:8b:3b:2c:5b:8c:
d4:bb:20:52:8e:a0:62:a2:dc:14:29:42:26:97:7c:
8e:fc:af:7b:14:b3:8d:df:61:27:09:8f:a5:1f:f8:
e9:93:a3:ba:ab:cb:79:80:5b:c9:45:d3:bb:50:d8:
ce:eb:7c:84:95:48:98:37:e8:22:8a:cd:36:85:2b:
c1:56:70:63:86:c1:cb:55:20:10:42:5e:ad:98:9b:
d2:ac:c2:40:1b:3e:66:55:7e:6e:49:9d:1c:8a:75:
c7:5b:e5:2f:77:8d:20:67:2c:a6:aa:d6:f8:b4:d1:
40:47:e2:71:23:01:9a:19:7f:9e:ff:62:95:a1:39:
e9:1a:c6:76:14:3a:93:c2:13:9f:4e:5c:81:88:80:
f6:e4:0c:d9:2a:b6:c9:98:88:1e:d8:e0:53:92:bb:
e7:43:08:67:11:12:ed:90:b3:45:9d:3f:ae:be:a5:
6d:91:1f:d9:b3:9a:8d:d2:bf:4e:09:a1:76:43:b3:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D5:A2:25:0C:9C:07:F5:B0:C0:55:57:0D:9F:F4:BB:DA:7D:20:B8
X509v3 Authority Key Identifier:
keyid:89:8F:CD:88:1F:2D:AD:95:1A:DC:31:E4:81:C4:ED:C8:20:93:1A:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/338/iY_NiB8trZUa3DHkgcTtyCCTGtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iY_NiB8trZUa3DHkgcTtyCCTGtM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/338/iY_NiB8trZUa3DHkgcTtyCCTGtM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:34:1d:b3:66:8d:49:ba:f6:8b:d3:85:01:23:46:cb:62:37:
64:8f:9d:19:88:80:ef:2e:9b:45:6b:42:a6:f2:50:65:87:82:
15:19:42:05:12:cf:f2:d7:1b:2e:82:05:fc:81:37:46:85:87:
ed:e8:41:4e:ab:78:03:af:bd:2b:76:1a:44:49:67:39:8c:5b:
fb:db:83:61:f1:51:c6:4e:ad:d1:68:9f:1b:96:4c:2f:af:54:
5b:0d:21:88:f0:2d:19:b6:ce:c7:0a:82:09:c0:ce:4b:16:36:
4a:dc:cb:ab:49:fc:bf:88:5c:dd:e6:e2:7d:01:e0:29:44:71:
89:b4:be:bd:a2:98:9f:a8:cd:7a:71:7a:4c:81:bf:2b:8e:8a:
a0:fd:3e:17:3e:ee:a3:d1:8f:38:0e:e8:76:7f:95:bd:3e:5b:
96:a0:8c:c4:47:d5:99:b7:1b:40:77:e1:5b:1f:ed:84:6b:b0:
8f:6c:d4:d4:b4:4a:53:68:60:55:93:06:8d:f9:5c:e4:66:5d:
05:cb:d9:52:06:9a:4c:4b:9f:b8:2c:72:2c:92:23:6d:e3:ac:
d2:2b:93:d2:85:c7:9c:8e:19:34:6a:7b:50:76:4a:0e:da:e3:
af:45:03:6f:7f:bd:03:19:ac:4a:4c:fc:65:ff:0e:84:5e:b2:
54:d0:e7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:41 2025 by rpki-client