Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
File: UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft (raw, json)
Hash identifier: lvy7Xa+U0EB0C+KiFK0yWVSVxtlk+WmhPt4PrgcQcUQ=
Subject key identifier: 0E:11:2D:BB:61:71:02:64:88:46:63:A5:59:99:07:4B:E9:DF:ED:12
Authority key identifier: 50:91:97:2F:AB:6D:1C:45:4E:2B:44:12:DC:44:85:A4:74:58:BE:36
Certificate issuer: /CN=5091972FAB6D1C454E2B4412DC4485A47458BE36
Certificate serial: 17A5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
Manifest number: 17A5
Signing time: Sat 29 Mar 2025 10:28:01 +0000
Manifest this update: Sat 29 Mar 2025 10:28:01 +0000
Manifest next update: Sat 29 Mar 2025 16:28:01 +0000
Files and hashes: 1: UJGXL6ttHEVOK0QS3ESFpHRYvjY.crl (hash: voHUf0RzVy1oar2EZ/sz0C+UMhEi2hwsT2k2T3tTN9s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6053 (0x17a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5091972FAB6D1C454E2B4412DC4485A47458BE36
Validity
Not Before: Mar 29 10:28:01 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0E112DBB61710264884663A55999074BE9DFED12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e7:76:61:d1:03:2b:e3:f6:0c:ce:c3:a5:bf:
e0:89:6c:50:37:41:5d:34:7f:a1:ea:ba:9a:de:a9:
00:a6:09:28:c9:59:2c:fd:3e:26:2c:7d:1c:e1:9e:
71:d2:1e:9e:da:0f:52:76:7a:ec:d3:9a:08:3d:17:
2e:da:e0:b2:3b:da:ef:5b:a8:d5:09:db:32:e7:c7:
f2:26:66:b0:2a:53:a6:aa:3c:f8:4a:dd:72:f1:e1:
31:7e:b0:8b:a1:9f:af:27:20:29:8c:af:cb:61:06:
5c:52:f2:8f:c5:fe:ef:38:7f:46:44:2e:db:21:88:
6d:d5:9e:7b:4a:2e:94:16:57:c4:fb:67:c3:3c:60:
c8:05:00:92:7a:db:84:ec:2b:01:25:68:66:a6:76:
73:52:41:e7:3c:80:f7:9e:ce:75:93:f3:c8:50:b8:
fa:17:32:06:fe:31:4e:55:f4:0e:57:ff:f8:a5:a5:
9a:54:67:dd:ee:1d:e5:06:42:12:23:a0:8f:a6:16:
d1:4d:60:62:64:e3:63:a7:b6:91:dd:bd:3e:36:60:
bf:fb:44:c7:56:6c:a9:28:81:8f:5c:b1:e8:40:62:
b2:0d:3d:77:f1:8a:84:04:d3:88:33:20:21:45:db:
d5:d5:68:68:09:ea:58:5d:16:ab:27:6a:0f:ad:f0:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:11:2D:BB:61:71:02:64:88:46:63:A5:59:99:07:4B:E9:DF:ED:12
X509v3 Authority Key Identifier:
keyid:50:91:97:2F:AB:6D:1C:45:4E:2B:44:12:DC:44:85:A4:74:58:BE:36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:40:5a:7c:7f:ab:91:9f:23:f0:ec:9a:5d:3d:96:d2:43:04:
06:d6:02:d9:e2:78:9b:c8:bd:7f:87:5b:df:29:f8:4d:9b:a2:
73:e4:6a:37:c5:bf:fd:57:b3:d5:5d:5c:72:d1:c2:b1:e8:23:
44:fb:e2:a3:ad:a0:aa:88:49:3c:bc:c2:0e:5e:9e:eb:97:2d:
71:18:62:4c:2a:fc:d4:78:5f:cd:e4:c2:bd:8e:bc:17:7d:d2:
2b:9f:81:8d:a9:1f:d1:0a:25:99:f9:e6:b9:3c:ad:ec:23:39:
5a:7c:48:06:c2:ba:3a:5b:27:d1:59:19:d2:93:7e:f5:04:45:
6b:05:1a:c7:a3:5f:ff:24:e1:93:60:e7:0c:40:72:d2:e0:44:
50:15:58:dc:80:86:1a:40:b5:80:39:3c:65:70:10:28:66:46:
7e:f0:e1:61:85:10:60:27:c2:75:31:c3:ae:78:67:66:6d:84:
94:15:85:3e:a9:71:f1:5d:40:46:3b:41:ff:e3:3c:b4:07:e9:
7d:63:aa:fa:03:ad:d5:1a:09:1e:ab:cb:08:9e:11:f8:3b:4a:
0c:a7:65:70:e1:94:a5:2f:12:d7:00:18:c3:88:b2:2f:93:a8:
24:00:50:3f:fc:06:15:91:94:81:61:58:46:9b:7d:17:9c:a8:
80:85:be:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:56 2025 by rpki-client