Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/547/9GZUo8iCR6UBa64ysnJws0hfNMU.mft
File: 9GZUo8iCR6UBa64ysnJws0hfNMU.mft (raw, json)
Hash identifier: S4BZ5V8XqH0YtMHZ0QvUJswNNpw2VT5c3EPc+247w9c=
Subject key identifier: 31:82:D6:E3:A7:19:B3:47:F2:EC:DE:08:54:CF:FC:F0:2B:B6:83:E9
Authority key identifier: F4:66:54:A3:C8:82:47:A5:01:6B:AE:32:B2:72:70:B3:48:5F:34:C5
Certificate issuer: /CN=F46654A3C88247A5016BAE32B27270B3485F34C5
Certificate serial: 1A1B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9GZUo8iCR6UBa64ysnJws0hfNMU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/547/9GZUo8iCR6UBa64ysnJws0hfNMU.mft
Manifest number: 1A1B
Signing time: Sat 29 Mar 2025 10:29:45 +0000
Manifest this update: Sat 29 Mar 2025 10:29:45 +0000
Manifest next update: Sat 29 Mar 2025 16:29:45 +0000
Files and hashes: 1: 9GZUo8iCR6UBa64ysnJws0hfNMU.crl (hash: cpgkykpGPJu4NgjtZT5EPy1F/E06firUFDz+alXJg7c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6683 (0x1a1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F46654A3C88247A5016BAE32B27270B3485F34C5
Validity
Not Before: Mar 29 10:29:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3182D6E3A719B347F2ECDE0854CFFCF02BB683E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:f3:1e:e4:06:6a:fe:8e:31:88:2f:77:a6:
a6:6e:27:df:a3:aa:d6:23:2e:42:3d:f9:4c:f3:c0:
a4:f7:c6:58:12:04:63:f8:69:d9:5f:11:30:91:02:
36:4e:57:87:10:ff:b4:39:82:cb:d3:72:82:d4:16:
24:47:e5:d2:1d:5b:77:a4:90:3e:1d:91:19:ba:00:
a7:c4:ab:50:bb:02:51:1f:bb:53:e4:e4:0a:12:58:
04:11:9d:86:3a:2b:f3:a3:6e:7a:2e:60:d2:ab:8a:
f9:40:ad:4b:64:ce:76:03:08:21:d0:30:89:b4:9a:
ef:d8:98:3d:40:41:fa:97:fc:e2:13:64:a2:8b:41:
07:17:21:db:ad:81:95:1e:c1:ff:3e:72:d1:c4:23:
f5:59:79:16:0b:32:16:0b:a1:cf:99:4c:01:73:2c:
40:a1:5f:64:3c:98:17:27:a2:2d:77:eb:c9:42:3c:
26:e6:90:99:41:40:ac:ed:74:33:0a:a6:36:f8:42:
6c:eb:77:41:7c:f8:17:f5:2f:91:53:39:aa:9a:a2:
4f:a7:1b:2f:27:2b:49:0f:d4:ab:fc:cb:6a:2c:73:
19:f4:10:71:a8:26:28:c1:9a:e2:3b:1e:d4:03:f9:
8c:cb:80:b8:a4:20:8e:8b:ae:4f:60:39:72:74:24:
aa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:82:D6:E3:A7:19:B3:47:F2:EC:DE:08:54:CF:FC:F0:2B:B6:83:E9
X509v3 Authority Key Identifier:
keyid:F4:66:54:A3:C8:82:47:A5:01:6B:AE:32:B2:72:70:B3:48:5F:34:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/547/9GZUo8iCR6UBa64ysnJws0hfNMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9GZUo8iCR6UBa64ysnJws0hfNMU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/547/9GZUo8iCR6UBa64ysnJws0hfNMU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:9d:bb:0a:ab:a2:e7:8e:9a:95:0d:af:a4:38:90:4c:8a:11:
20:04:7e:2f:64:41:14:04:83:93:99:84:95:87:2d:74:1e:c9:
1f:12:76:5e:79:76:e2:7c:12:40:fc:62:29:14:3b:3f:da:7c:
8f:73:83:9b:df:50:f3:ef:fd:84:1c:4e:37:1b:cb:a2:e0:40:
57:0e:ef:1c:ac:a4:99:69:b4:35:77:d9:d0:5c:e9:2c:fa:79:
56:95:aa:f8:7e:e3:ac:da:b9:51:af:bc:d9:40:68:4f:4a:b3:
ba:cb:f0:2b:0e:60:86:cc:7f:c5:88:d3:aa:69:d4:11:5e:79:
2f:cf:78:e4:3f:d6:95:64:44:96:3d:41:b8:01:e9:bd:d3:52:
28:14:98:01:f8:17:7f:dc:b4:49:a4:5c:22:7f:40:60:10:03:
07:bf:a2:b1:c4:59:97:58:43:9c:19:0b:5d:de:24:52:00:e3:
8e:d7:61:3a:35:9d:39:01:1d:0d:69:72:e6:e3:83:24:dd:ce:
55:54:50:d4:c2:b0:68:c0:24:03:41:78:dc:2f:7c:ab:a5:0f:
ab:93:87:57:2c:94:65:a9:90:1c:ec:17:68:3e:ed:52:54:1a:
80:e2:d4:f2:33:b1:cd:8c:66:8d:6e:73:48:62:9f:3d:3b:08:
db:72:a4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:19 2025 by rpki-client