Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/189/3RJeXvjndIYA-q71VO3x22h64zs.mft
File: 3RJeXvjndIYA-q71VO3x22h64zs.mft (raw, json)
Hash identifier: Bl26ii0nu1AvQsLOI0ZSzgbupK1GxX1e3kxHnMMCbvA=
Subject key identifier: 22:D1:F3:2B:3F:30:F8:70:55:2B:04:37:88:E0:9D:A1:DF:C7:1F:35
Authority key identifier: DD:12:5E:5E:F8:E7:74:86:00:FA:AE:F5:54:ED:F1:DB:68:7A:E3:3B
Certificate issuer: /CN=DD125E5EF8E7748600FAAEF554EDF1DB687AE33B
Certificate serial: 148B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3RJeXvjndIYA-q71VO3x22h64zs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/189/3RJeXvjndIYA-q71VO3x22h64zs.mft
Manifest number: 148B
Signing time: Sat 26 Apr 2025 11:08:10 +0000
Manifest this update: Sat 26 Apr 2025 11:08:10 +0000
Manifest next update: Sat 26 Apr 2025 17:08:10 +0000
Files and hashes: 1: 3RJeXvjndIYA-q71VO3x22h64zs.crl (hash: X3FFzPcXtHjoBXsg/QXRO4w/QpleEHZ4lZNmdT2x0qk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5259 (0x148b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD125E5EF8E7748600FAAEF554EDF1DB687AE33B
Validity
Not Before: Apr 26 11:08:10 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=22D1F32B3F30F870552B043788E09DA1DFC71F35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:36:28:a8:40:9e:67:3d:6d:69:7a:05:77:
b1:97:60:6e:a1:ee:51:93:45:93:59:52:e7:5d:9e:
46:b4:8a:5c:73:95:6d:03:8d:c4:78:23:46:9e:69:
cf:00:f2:57:4c:e5:6f:fb:c7:0e:ac:65:ed:5e:48:
23:f0:85:2d:05:cc:bd:33:9b:95:54:1f:94:7f:c2:
03:73:c6:53:e4:00:89:a7:03:73:7f:dd:62:5b:5f:
f5:c8:58:75:f2:2e:50:4e:f0:8b:d2:32:47:fd:53:
28:fb:44:15:69:78:b0:c6:4f:be:e1:1a:42:3c:f2:
00:59:26:db:2d:eb:a7:23:61:5a:10:b0:45:20:5a:
be:84:b8:37:54:e8:02:b3:c6:6b:2a:fe:32:ee:73:
32:81:bf:bb:d4:d4:91:5d:14:df:69:db:52:6c:ac:
6d:36:88:db:31:df:7a:e3:23:70:ca:8e:ef:66:fc:
39:36:85:18:0c:b4:38:ea:5e:1c:29:03:fd:21:b2:
c0:4d:54:27:3d:5e:64:04:e5:9e:fd:24:ba:cc:a9:
59:1e:2e:73:2c:9a:73:ac:cc:85:2d:fa:a5:35:03:
0f:d8:2e:f3:62:81:ba:27:d5:10:7e:2f:c2:74:c2:
f6:48:71:8e:29:fa:4b:9e:0a:32:43:51:b3:fa:21:
e4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D1:F3:2B:3F:30:F8:70:55:2B:04:37:88:E0:9D:A1:DF:C7:1F:35
X509v3 Authority Key Identifier:
keyid:DD:12:5E:5E:F8:E7:74:86:00:FA:AE:F5:54:ED:F1:DB:68:7A:E3:3B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/189/3RJeXvjndIYA-q71VO3x22h64zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3RJeXvjndIYA-q71VO3x22h64zs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/189/3RJeXvjndIYA-q71VO3x22h64zs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:60:19:fc:44:65:b9:a5:09:0c:e1:99:1e:c2:17:34:cd:73:
28:25:13:36:8f:7c:0c:71:c1:3e:ea:20:f0:26:f1:e3:81:7d:
dd:5c:49:a0:ff:7b:f4:00:a3:0b:a5:07:9e:f2:48:3b:59:dd:
70:81:87:55:ac:b0:aa:c2:b7:e8:aa:d4:9c:3f:f5:47:ae:99:
f3:c2:b2:13:9e:60:ad:f5:70:3f:a0:bc:fb:17:d0:42:7b:27:
35:a7:3c:72:f0:bb:7a:85:65:95:05:dd:f2:a5:ed:df:a8:8d:
2a:56:30:4b:f6:89:1b:de:f7:27:5a:79:34:42:9a:03:11:cc:
c9:30:a3:fa:6b:f2:78:26:d0:ba:28:9a:6a:f0:f3:77:15:d3:
05:a5:7e:ee:8c:a9:81:05:0f:43:fb:53:0c:f5:1e:5d:af:c8:
e2:6b:29:7f:0e:aa:97:2a:39:3f:56:70:c8:64:20:35:72:62:
dd:99:bd:6a:b6:1e:4a:49:f4:bc:43:bc:b1:2b:5a:98:31:5e:
ba:e7:fe:12:0f:97:b4:ab:3e:cd:58:cf:2e:e8:52:71:e2:6b:
46:8f:04:ee:03:7b:26:e7:e3:6f:8a:b7:f5:52:1b:27:59:1d:
f1:db:a7:95:20:b2:89:ab:c7:3a:68:2d:c4:7d:84:47:3b:24:
a4:93:8e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:48 2025 by rpki-client