Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/643/-DfclmpQcbs64qfxU-0kRUEyris.mft
File: -DfclmpQcbs64qfxU-0kRUEyris.mft (raw, json)
Hash identifier: 51nSw0xrNbKSmLqfWVCzCjshruNdRyVzzBY05VRanOc=
Subject key identifier: A0:2C:0D:F6:B5:BA:61:A7:F2:BD:BF:A5:33:52:E4:21:11:71:56:5C
Authority key identifier: F8:37:DC:96:6A:50:71:BB:3A:E2:A7:F1:53:ED:24:45:41:32:AE:2B
Certificate issuer: /CN=F837DC966A5071BB3AE2A7F153ED24454132AE2B
Certificate serial: 2A45
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-DfclmpQcbs64qfxU-0kRUEyris.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/-DfclmpQcbs64qfxU-0kRUEyris.mft
Manifest number: 2A45
Signing time: Fri 21 Mar 2025 00:32:42 +0000
Manifest this update: Fri 21 Mar 2025 00:32:42 +0000
Manifest next update: Fri 21 Mar 2025 06:32:42 +0000
Files and hashes: 1: -DfclmpQcbs64qfxU-0kRUEyris.crl (hash: w3KAh481ub83owVhjWoaRs3R7z3Y35saY0VsO7SiV3Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10821 (0x2a45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F837DC966A5071BB3AE2A7F153ED24454132AE2B
Validity
Not Before: Mar 21 00:32:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A02C0DF6B5BA61A7F2BDBFA53352E4211171565C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7c:2c:d4:3b:19:01:a8:73:ac:45:a6:c1:13:
ba:13:56:58:a9:05:b2:47:4a:35:1e:60:af:61:b6:
7a:f4:58:ff:51:d4:ca:1c:70:56:29:59:f0:e3:8c:
4a:5a:af:b6:84:8e:53:8d:d4:47:41:77:6c:d2:17:
73:c0:6e:5e:48:3c:21:6a:24:06:72:1c:06:49:80:
15:24:30:03:8e:70:d0:86:57:81:ef:2e:9b:0d:6c:
d0:ef:05:42:52:ea:3a:61:ce:63:d3:b3:df:42:09:
51:6c:c3:89:37:d0:f7:da:6d:cc:cf:2b:ca:42:8c:
0a:d4:ce:76:f1:b2:04:36:30:eb:ce:73:84:fd:f8:
69:9f:a5:1b:42:a9:fa:dd:50:3a:6b:09:21:17:08:
8d:9d:8f:80:8e:06:43:da:20:79:29:2b:d7:5c:ab:
2f:0c:3b:3f:18:21:07:50:b1:1d:7c:70:09:dd:97:
bf:4e:ae:24:e2:b6:e7:9a:f3:4f:1c:16:c7:9c:af:
e3:18:cd:d3:21:1b:15:29:f9:64:30:c9:f1:bc:94:
5d:5b:f5:64:00:a1:ec:ec:d5:d3:d5:05:34:ae:aa:
17:94:c6:8a:79:c3:d5:91:d2:ed:1f:af:90:2f:77:
e3:d8:b1:4b:4c:17:98:9a:3b:22:46:ee:8b:0a:70:
e0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2C:0D:F6:B5:BA:61:A7:F2:BD:BF:A5:33:52:E4:21:11:71:56:5C
X509v3 Authority Key Identifier:
keyid:F8:37:DC:96:6A:50:71:BB:3A:E2:A7:F1:53:ED:24:45:41:32:AE:2B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/-DfclmpQcbs64qfxU-0kRUEyris.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-DfclmpQcbs64qfxU-0kRUEyris.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/-DfclmpQcbs64qfxU-0kRUEyris.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:5c:a3:6f:aa:8c:2d:40:34:55:b6:a0:75:08:b7:eb:1c:6c:
02:d0:55:1f:29:cc:0f:6e:59:00:57:3d:b9:37:b6:e7:bf:f8:
53:97:84:bf:82:f2:1a:c6:b2:7c:b7:43:45:d4:e7:54:55:30:
a8:85:bf:ed:99:51:e7:22:f0:a7:e5:b7:15:72:58:4f:21:fb:
2b:12:4c:ea:3c:a5:ef:03:53:00:a0:ae:11:9b:6d:17:29:37:
d0:38:ca:7a:b8:af:df:3f:fc:e1:79:96:ee:34:c3:db:e2:5a:
67:0b:03:44:c7:72:cf:5e:15:c9:8c:53:45:28:7c:d7:f3:2a:
8c:47:bb:9c:88:c7:76:fa:38:b2:41:90:4f:ea:e5:c2:27:f1:
80:b9:8f:45:93:e2:4d:3c:50:62:cd:55:d9:d1:a5:7c:5b:cc:
4e:ad:cc:a2:f6:d6:f1:86:3a:46:87:a2:6f:d8:cf:2b:98:eb:
62:ba:bf:41:9c:d9:94:05:8e:16:c2:8c:c7:aa:47:ea:ee:6c:
20:8a:13:c9:e4:74:c6:d7:09:6d:2a:c8:00:1f:1b:bd:ae:21:
3a:03:d7:73:c8:79:a6:2c:71:58:85:1b:f4:d8:db:98:e6:06:
b9:ae:92:f2:50:96:b2:6e:ec:17:e5:9a:fa:e5:b9:16:03:82:
da:af:f4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:13 2025 by rpki-client