Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft
File: rszMt53-bEZsyts5iWcQ7Kw3uEc.mft (raw, json)
Hash identifier: hK55zua4mgQ9riueW3vu+lFxBPl55itJH2l1eTl2BeM=
Subject key identifier: 47:87:9F:E4:8B:6D:A4:B6:10:AE:6E:6B:D8:39:4A:BD:6F:01:11:03
Authority key identifier: AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47
Certificate issuer: /CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847
Certificate serial: 19AF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft
Manifest number: 19AA
Signing time: Sat 29 Mar 2025 10:29:55 +0000
Manifest this update: Sat 29 Mar 2025 10:29:55 +0000
Manifest next update: Sat 29 Mar 2025 16:29:55 +0000
Files and hashes: 1: MCB3KJEpS5d2tI9HESY2f6-mB5Q.roa (hash: CvO0rxwQJpDF21wFHuLQBCHhxxdUOE1ZFTZaucA3ZlQ=)
2: XUqYO0gIBGKJdMnRrWNYofV9ASg.roa (hash: wk1aQuhsTJNh/QxRDGrQZqRt8vq+yd3VLEO5BonUzDY=)
3: rszMt53-bEZsyts5iWcQ7Kw3uEc.crl (hash: VYCTNyQ6xrag9g5c7IeriH+N4cUcKAukxKl8JR9Lyq0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6575 (0x19af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847
Validity
Not Before: Mar 29 10:29:55 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=47879FE48B6DA4B610AE6E6BD8394ABD6F011103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:dc:1e:54:8a:5a:b1:01:09:62:3e:1f:15:
e0:7d:5e:25:d5:f4:4b:0a:5e:54:6f:e7:41:2d:9b:
5c:1a:de:13:fc:d6:07:21:f2:2e:45:8c:5b:e3:d4:
db:ab:98:b3:9d:f8:72:74:85:e6:73:6a:13:91:aa:
36:f0:e5:bc:8d:b0:b6:65:d2:1a:b2:a6:52:1f:eb:
5b:a6:bf:3e:86:71:52:1b:a5:36:1b:0b:91:56:a1:
05:2b:ae:84:38:c9:8d:a9:81:33:2e:52:3e:c4:65:
01:68:31:20:9d:a6:cd:a3:86:1e:89:67:5f:a3:49:
86:4d:da:af:02:01:77:4d:0a:94:1f:c7:a1:f9:3b:
02:7b:04:51:18:c3:f0:41:92:08:cb:42:1c:37:75:
bf:09:ef:e5:5f:e8:0d:9d:26:c9:df:60:f4:f4:86:
3e:60:45:dd:a4:71:18:8b:a6:0a:51:11:9c:53:c7:
34:ff:68:be:54:2f:fe:fb:4f:c5:09:cc:bf:af:9c:
72:33:79:26:13:6c:ac:af:06:b8:db:20:d8:0e:ff:
8d:0c:d6:c3:a8:2e:3f:8b:46:b3:c1:8e:9d:d7:77:
12:9c:5b:32:b8:ac:75:c0:5e:a3:86:2e:70:5e:06:
ad:8c:a8:6b:58:91:75:ea:00:7f:82:15:65:0a:42:
b0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:87:9F:E4:8B:6D:A4:B6:10:AE:6E:6B:D8:39:4A:BD:6F:01:11:03
X509v3 Authority Key Identifier:
keyid:AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:a7:bc:30:0b:70:5d:49:5b:40:49:dc:22:02:f9:4c:0c:80:
33:20:6f:19:ae:0e:98:57:1e:f5:86:3c:0b:cf:99:e7:1c:3c:
80:ec:d1:42:78:b8:85:3f:f3:d0:4f:33:46:ad:b9:ba:0d:31:
54:10:f1:00:ea:1a:63:80:9a:cf:50:4a:aa:de:36:d9:bd:a4:
46:c0:53:cd:3d:35:25:9b:0f:1d:e0:45:57:e9:46:4c:bf:c3:
45:24:f0:b6:c1:ad:ab:a2:35:2b:f7:90:da:c4:22:e8:c3:1c:
5c:fb:d5:a5:46:ac:c3:df:5e:db:63:ed:de:88:dc:91:b5:d9:
d4:fb:a6:ab:24:89:2c:c4:2a:3b:d8:1f:df:ff:a9:cc:33:1b:
8f:90:1a:03:41:8b:53:8c:74:6d:a7:6a:3b:be:39:f0:69:c4:
d6:2e:bc:86:b3:ee:c0:9f:42:5d:96:22:a2:76:e1:6d:32:6f:
92:e8:87:51:33:74:65:ed:44:0e:1d:9b:4f:9d:a5:bb:d5:49:
f3:99:51:2b:ab:19:b2:fe:6c:5b:1b:b8:60:66:82:48:ad:f3:
f6:59:f3:f4:ec:d1:df:e8:ca:c3:32:6d:f2:33:7c:42:e3:58:
7b:e3:10:a4:73:6b:df:a3:1a:a3:df:e1:6d:56:d6:f3:eb:77:
38:c4:d8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:41 2025 by rpki-client