Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/423/1t4r4Qp2dY-5eHe1Q7s3tR160vQ.mft
File: 1t4r4Qp2dY-5eHe1Q7s3tR160vQ.mft (raw, json)
Hash identifier: dHOJNeLs0OMSPk1mcmXenIy+AoUZB/Qzv/w6m7UqX38=
Subject key identifier: 98:EE:C9:EC:16:C4:98:E0:9E:53:46:3B:F5:96:10:21:58:9C:1A:6B
Authority key identifier: D6:DE:2B:E1:0A:76:75:8F:B9:78:77:B5:43:BB:37:B5:1D:7A:D2:F4
Certificate issuer: /CN=D6DE2BE10A76758FB97877B543BB37B51D7AD2F4
Certificate serial: 1D1B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1t4r4Qp2dY-5eHe1Q7s3tR160vQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/423/1t4r4Qp2dY-5eHe1Q7s3tR160vQ.mft
Manifest number: 1D1B
Signing time: Sat 29 Mar 2025 06:27:15 +0000
Manifest this update: Sat 29 Mar 2025 06:27:15 +0000
Manifest next update: Sat 29 Mar 2025 12:27:15 +0000
Files and hashes: 1: 1t4r4Qp2dY-5eHe1Q7s3tR160vQ.crl (hash: e0foxNOQ35tG9nFtEso7hs4XhlZHtJTV9GIbxH1cDv4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7451 (0x1d1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6DE2BE10A76758FB97877B543BB37B51D7AD2F4
Validity
Not Before: Mar 29 06:27:15 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=98EEC9EC16C498E09E53463BF5961021589C1A6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a0:3f:2b:4f:2c:a8:62:e2:52:62:68:b4:bd:
e1:76:58:61:9e:b7:13:b1:6c:f6:f3:3c:d7:48:ca:
eb:de:0d:63:39:5c:5e:4a:83:fb:6a:50:3b:fb:f9:
d0:47:72:ee:9e:84:04:f6:5d:c1:af:52:24:e8:e6:
8d:85:6a:01:a9:70:0b:d7:fe:ff:3d:1b:c7:14:95:
91:80:11:7f:bf:49:b6:6e:36:e2:bb:25:8f:69:4c:
25:54:ec:a1:0d:2f:d0:45:c8:ed:e8:d8:23:2e:d4:
25:5a:9f:46:6f:fa:bd:9c:66:d2:31:ac:53:14:0c:
fc:1c:73:8b:97:bf:c3:39:13:3f:69:2c:29:d4:d2:
f8:dc:ca:4b:72:10:1a:6e:3a:86:ee:e6:5f:61:35:
9e:7b:53:a1:be:36:b0:1d:93:b6:58:94:ed:a5:a5:
ef:a0:62:51:52:6f:45:67:76:ba:8a:97:6d:0b:1b:
85:a0:a7:3f:81:5d:6a:f6:94:ba:10:09:18:48:79:
63:d4:16:35:97:4e:a2:c4:a7:93:c8:5a:05:86:9c:
2d:00:78:ba:36:ab:62:20:7b:7d:df:c3:e8:bd:52:
f3:93:a3:73:22:8b:7b:39:e2:bc:2c:47:51:86:11:
89:e9:75:6b:30:ad:5e:7c:20:a1:66:43:6e:c9:f2:
f0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EE:C9:EC:16:C4:98:E0:9E:53:46:3B:F5:96:10:21:58:9C:1A:6B
X509v3 Authority Key Identifier:
keyid:D6:DE:2B:E1:0A:76:75:8F:B9:78:77:B5:43:BB:37:B5:1D:7A:D2:F4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/423/1t4r4Qp2dY-5eHe1Q7s3tR160vQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1t4r4Qp2dY-5eHe1Q7s3tR160vQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/423/1t4r4Qp2dY-5eHe1Q7s3tR160vQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cd:2e:fa:3a:1c:02:ff:fa:71:a1:89:02:d7:2e:41:c1:f7:
e0:d8:0c:a6:70:66:3d:fc:6a:21:7d:92:08:70:22:c9:95:86:
54:40:f6:2b:09:3f:96:8c:75:b5:84:19:1d:0e:1e:6d:d4:1a:
53:8e:fd:5a:d4:20:50:aa:b0:6c:d2:11:e9:83:48:1b:28:41:
53:47:23:67:f9:59:97:58:19:c6:41:e1:09:1e:c9:62:b8:d3:
55:95:f4:8e:e0:a0:9e:c3:92:49:1b:3f:99:1c:47:1c:63:9f:
be:49:62:a8:b0:64:1e:cd:f5:c7:7b:85:53:3d:ef:96:1e:f2:
81:0c:b1:b1:49:58:cc:dd:c9:ba:9f:c2:be:a2:da:b4:62:d8:
d3:9b:09:04:f4:ac:c2:ed:89:a1:05:c3:5c:f4:99:4a:69:35:
17:01:09:ee:ec:10:78:77:e9:f8:0a:77:0b:a8:a2:70:35:9e:
b6:44:cf:54:07:3c:d1:10:8c:56:ed:9f:f9:77:22:0d:13:c9:
3a:ea:91:cb:fa:90:12:07:b8:7e:2d:d2:67:e2:17:c8:05:b8:
65:cf:75:54:6a:4c:dc:f5:5e:d4:b2:9f:88:da:4d:07:97:59:
68:30:2c:6c:50:fd:b9:4b:90:fe:02:3f:b6:f4:f0:0f:aa:de:
31:41:9e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:54 2025 by rpki-client