Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft
File: 7JfpAsM6EGVBKiW96FhrxCFuOWI.mft (raw, json)
Hash identifier: Sy8r4s9swZeTYcpliYA8TalvNY807TO94mUebdneuyY=
Subject key identifier: 63:8B:1F:B2:B0:BC:8D:C7:85:A1:67:18:71:61:35:54:C0:7E:F8:EA
Authority key identifier: EC:97:E9:02:C3:3A:10:65:41:2A:25:BD:E8:58:6B:C4:21:6E:39:62
Certificate issuer: /CN=EC97E902C33A1065412A25BDE8586BC4216E3962
Certificate serial: 1EA7
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7JfpAsM6EGVBKiW96FhrxCFuOWI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft
Manifest number: 1EA7
Signing time: Sun 15 Jun 2025 07:25:15 +0000
Manifest this update: Sun 15 Jun 2025 07:25:15 +0000
Manifest next update: Sun 15 Jun 2025 13:25:15 +0000
Files and hashes: 1: 7JfpAsM6EGVBKiW96FhrxCFuOWI.crl (hash: CdVvY8X3JW25RzwCBD8An1JqUOebgVWPul0h+bKrNSE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7847 (0x1ea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC97E902C33A1065412A25BDE8586BC4216E3962
Validity
Not Before: Jun 15 07:25:15 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=638B1FB2B0BC8DC785A1671871613554C07EF8EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:20:45:39:7a:52:f6:52:e2:42:7e:07:38:
42:f0:e3:50:25:dd:4c:90:03:c5:0a:86:eb:b5:3e:
0f:64:5e:f2:01:28:8c:79:da:4e:36:e1:e5:07:f7:
da:ba:7b:b3:0e:85:16:95:44:d9:f6:91:ef:6b:1e:
f6:4a:88:d6:5b:f9:f4:8d:d3:dc:02:51:15:c6:a7:
39:83:47:d2:6e:86:d8:56:03:43:d2:e9:4b:4c:c5:
64:92:4c:56:e4:3d:5a:25:e4:71:12:41:e9:fc:ba:
75:6c:b6:ca:e5:fa:22:23:e9:62:a6:40:c1:44:de:
0d:64:d6:fd:c6:4d:20:dc:60:8c:fb:d4:ba:d4:be:
34:e1:20:dd:73:47:8e:ca:14:30:01:d5:ed:af:0f:
b4:4f:e7:26:c3:b5:ad:b3:45:8b:f6:94:47:ec:5f:
52:d1:0f:72:61:56:40:94:a2:a2:70:aa:3b:ba:3b:
4a:33:79:0f:47:fe:56:6a:e4:aa:d3:25:94:34:24:
81:19:67:dc:27:f7:01:b3:0d:9b:0e:db:9f:7b:7a:
04:be:27:99:d7:eb:c1:a4:0c:4e:81:84:72:50:d5:
80:23:cc:08:32:57:d6:9e:ef:0f:e8:5a:90:06:43:
2a:9f:cc:77:d0:41:98:d1:52:9c:6b:35:59:93:02:
8e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8B:1F:B2:B0:BC:8D:C7:85:A1:67:18:71:61:35:54:C0:7E:F8:EA
X509v3 Authority Key Identifier:
keyid:EC:97:E9:02:C3:3A:10:65:41:2A:25:BD:E8:58:6B:C4:21:6E:39:62
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7JfpAsM6EGVBKiW96FhrxCFuOWI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:64:26:4e:f2:f8:ca:14:1f:f2:62:7b:9e:b7:b7:8c:cf:da:
3f:47:a0:6d:65:21:4a:7e:bf:f6:ec:fe:44:bb:fc:4f:fa:0f:
31:ec:48:36:53:08:75:78:df:2a:9e:bf:4f:b8:22:58:73:5f:
9a:95:ca:96:e7:0c:ce:cd:59:f3:9b:67:a2:bb:09:f4:30:d7:
55:19:86:4d:0d:ed:87:4b:0d:9d:d7:d9:3f:9a:bf:ec:d6:a6:
af:43:8d:2a:b9:84:8c:6f:93:fd:94:50:79:a1:99:d7:3d:c7:
5c:97:5c:ca:a2:7c:ed:5c:33:76:b8:99:76:a6:32:62:ea:a8:
4c:d2:88:a4:71:1d:2e:ba:64:cb:fa:db:32:a2:4f:70:46:f0:
30:bd:e5:e1:aa:bc:76:c4:7f:3e:63:11:82:6b:b9:91:7b:9d:
c8:ef:a0:44:d5:58:64:84:11:b1:b2:b7:82:e6:f8:7f:fe:16:
cf:6d:ef:9b:4a:b0:e7:9c:d5:88:16:75:c6:f4:37:8b:43:41:
56:65:fa:a5:1b:7b:68:26:39:2e:77:03:dd:3e:38:16:ae:3d:
49:45:b1:d7:1d:e2:1f:39:cb:54:5c:9c:99:7e:4c:45:62:7a:
82:ca:0b:fd:24:13:4b:a8:2f:51:27:f6:a9:63:66:10:d3:04:
6c:fb:c9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:19:54 2025 by rpki-client