Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft
File: tRlLGMyNlt0mESh8YqnqgiDbOm4.mft (raw, json)
Hash identifier: RNiPdWwXdwfPLeq+1zFdJbeegS1zsbkuXiuHBmX1Sq4=
Subject key identifier: FC:15:36:7B:FB:39:7F:45:7D:46:54:0D:18:CD:C2:27:56:1D:D0:19
Authority key identifier: B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E
Certificate issuer: /CN=B5194B18CC8D96DD2611287C62A9EA8220DB3A6E
Certificate serial: 1D0B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft
Manifest number: 1D0B
Signing time: Fri 04 Apr 2025 19:09:49 +0000
Manifest this update: Fri 04 Apr 2025 19:09:49 +0000
Manifest next update: Sat 05 Apr 2025 01:09:49 +0000
Files and hashes: 1: tRlLGMyNlt0mESh8YqnqgiDbOm4.crl (hash: OR4FhXSrtxO5LgyUV4UyptaHh6MwVAAPag45stb41GE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7435 (0x1d0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5194B18CC8D96DD2611287C62A9EA8220DB3A6E
Validity
Not Before: Apr 4 19:09:49 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=FC15367BFB397F457D46540D18CDC227561DD019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b6:6a:5d:65:5d:09:10:b4:a6:69:c8:52:95:
7f:4c:5e:f7:6c:89:81:46:8c:3f:05:14:e8:8f:2c:
4c:c8:f2:be:ac:96:de:34:60:2d:b0:31:6b:c1:1c:
a7:d0:ef:9a:30:0e:a4:1e:14:0f:d0:cd:f7:0d:7d:
89:20:6b:14:2b:78:07:87:cf:0f:a3:88:d1:62:8f:
11:9c:20:d0:6e:df:52:40:19:50:26:64:b1:d5:14:
49:bc:31:33:d7:c4:f3:96:50:95:56:8a:00:cf:7c:
8b:c7:42:f3:d0:9c:9c:42:8d:7f:32:f9:2d:cf:8d:
a3:fb:cf:b2:e7:55:39:1f:b4:35:73:2c:b4:89:34:
bc:5a:5a:99:3f:48:55:2d:59:39:c3:4e:55:77:87:
c4:4e:fd:8c:02:6a:08:d5:5d:76:e7:d4:70:e5:67:
fb:80:3a:07:88:b6:1c:dd:d1:dc:ab:75:8d:71:85:
3e:92:f6:e8:24:de:d7:98:62:27:9d:15:08:71:22:
24:1d:5d:ad:c9:aa:fe:a3:a2:c0:89:d4:94:b6:ef:
0a:81:e7:6a:19:41:11:56:e2:50:85:6d:04:04:c0:
b2:fd:6c:63:f9:72:a5:56:c8:3a:c3:60:7f:1a:a6:
36:f9:06:0d:68:b6:69:ed:bf:67:62:d7:22:51:2f:
28:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:15:36:7B:FB:39:7F:45:7D:46:54:0D:18:CD:C2:27:56:1D:D0:19
X509v3 Authority Key Identifier:
keyid:B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:c7:c9:5d:41:f5:d3:84:52:1c:e7:d7:49:bd:98:19:81:4d:
81:41:65:e7:19:89:c0:88:d0:da:2b:43:16:ed:5a:3c:bc:09:
41:43:ed:5f:87:c2:66:4a:64:50:e3:3a:3d:fb:09:d6:d1:b3:
88:b1:04:ad:f6:54:c9:54:d2:31:5d:76:9a:cb:22:18:c2:91:
70:d3:c7:ff:b0:16:de:ea:f4:0c:1d:6d:75:d1:63:00:fe:cb:
6f:8e:ea:cc:97:58:a1:95:0f:ed:0b:53:6b:4c:e9:2f:b8:a3:
2a:57:99:d9:26:8b:1f:be:53:06:88:7f:0b:9b:b5:9c:cd:6f:
bf:cb:c1:09:60:b5:4b:12:10:08:fc:28:1a:4c:74:1e:0f:d0:
25:6c:ee:f9:79:46:3f:19:90:96:c9:51:b2:0e:49:79:d5:17:
e2:4e:a3:52:06:56:39:1a:8f:91:d3:ee:3c:46:2e:4a:58:a7:
a6:0a:66:86:27:04:d0:21:d9:62:a7:67:02:b2:99:af:7e:c8:
92:48:a9:8d:ee:de:17:76:cf:c4:8e:cd:51:32:3d:1a:c5:f6:
63:15:6c:d8:d6:3e:a6:ea:74:4a:63:cc:76:a3:39:bb:f5:9b:
0e:60:3a:40:02:c9:4a:28:64:c7:7c:06:3e:1e:9d:5b:db:40:
50:2e:68:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:14:53 2025 by rpki-client