Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft
File: JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft (raw, json)
Hash identifier: p3Lr3Uq2cV6k+u/19gGepyxRoG+DXc41bmvjjXGRYVA=
Subject key identifier: 8F:DA:8E:1F:76:2C:31:87:57:64:20:B9:E9:29:48:47:5E:97:BB:9E
Authority key identifier: 24:6B:8D:86:9C:83:01:89:45:DF:9F:99:00:93:42:90:3D:07:64:71
Certificate issuer: /CN=246B8D869C83018945DF9F99009342903D076471
Certificate serial: 0D09
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JGuNhpyDAYlF35-ZAJNCkD0HZHE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft
Manifest number: 0D09
Signing time: Sat 26 Apr 2025 14:36:46 +0000
Manifest this update: Sat 26 Apr 2025 14:36:46 +0000
Manifest next update: Sat 26 Apr 2025 20:36:46 +0000
Files and hashes: 1: JGuNhpyDAYlF35-ZAJNCkD0HZHE.crl (hash: G6FLkVYyMbJEZ46co+VaqsAtqoQjdyr5iIa2C5TE31s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3337 (0xd09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246B8D869C83018945DF9F99009342903D076471
Validity
Not Before: Apr 26 14:36:46 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=8FDA8E1F762C3187576420B9E92948475E97BB9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:41:ef:79:37:1e:c4:f8:1c:e5:0e:71:9d:
c9:14:b5:45:c8:aa:4a:b6:7f:b6:64:6d:9c:c5:b4:
9d:64:a4:5d:ae:e0:ed:5a:99:90:d5:ed:c7:09:85:
0b:c6:66:ea:de:08:3b:27:c5:cf:0c:8c:3f:54:ad:
62:47:28:69:25:ab:e7:ba:5c:a2:35:85:40:00:ca:
db:57:06:09:65:3d:dd:07:b0:1b:9b:da:10:2f:f3:
9a:68:b7:36:09:06:0a:4a:aa:1b:46:6f:b1:e6:45:
d8:1a:ea:3f:5c:63:42:76:05:d5:24:29:3b:9b:7e:
1b:eb:34:ff:53:23:ab:6e:da:9a:59:45:35:96:30:
93:60:cb:65:9d:a8:c8:1b:e3:ab:f7:c7:ec:b0:b3:
da:48:9c:79:e5:ac:6f:fc:af:ec:2b:30:f4:69:7a:
5b:07:4e:6a:5f:49:a9:b0:d5:ac:08:92:3f:c5:6e:
0a:fd:89:aa:7b:61:23:03:8e:ba:cd:f3:07:2e:54:
c1:d9:42:92:6d:36:57:70:93:04:79:95:a2:d4:f7:
c0:6c:c6:dd:1a:1c:88:96:b8:36:74:cf:47:aa:f9:
ea:58:a5:1b:b4:05:52:37:ba:62:65:7b:4b:4f:39:
a9:19:cf:aa:b3:fc:e9:18:0f:6c:f6:2f:52:2b:d1:
99:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DA:8E:1F:76:2C:31:87:57:64:20:B9:E9:29:48:47:5E:97:BB:9E
X509v3 Authority Key Identifier:
keyid:24:6B:8D:86:9C:83:01:89:45:DF:9F:99:00:93:42:90:3D:07:64:71
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JGuNhpyDAYlF35-ZAJNCkD0HZHE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:a3:ed:ad:f9:42:e9:32:5c:02:04:04:41:df:47:0e:f4:5e:
af:1e:10:4d:41:0f:a0:bd:86:98:89:08:c1:85:68:91:40:a7:
6f:f0:cc:ff:e0:7f:c5:74:ed:50:84:1c:2a:50:8d:86:f4:56:
04:6e:63:b6:7d:26:9b:43:a3:4b:51:f8:13:6a:0c:5d:42:07:
54:76:0a:e1:a6:f4:3f:84:de:ca:b9:e7:36:07:a2:ec:1f:3c:
95:03:d0:4c:59:62:7c:5d:c4:58:db:23:e9:03:15:ea:12:30:
64:fd:ae:5a:2f:f0:64:7e:3a:26:c8:7e:2f:60:3a:07:4f:63:
6f:32:88:05:03:4e:df:bd:3d:1a:19:54:e3:07:6f:a1:ab:ab:
a9:b2:bd:92:c2:f6:3e:48:72:9b:88:90:98:75:dc:21:08:a5:
62:3f:58:e2:15:8f:46:40:3b:80:d2:19:cb:4b:e8:61:ee:1f:
ce:ec:8d:69:aa:3a:8a:81:4d:08:2b:06:b9:69:eb:7f:aa:73:
2b:73:f7:43:dd:40:61:e9:ec:75:77:d5:8a:f8:40:51:f0:89:
40:08:f9:16:ae:f1:df:99:4e:1e:1e:0d:4f:42:cf:c9:f6:d6:
09:68:64:a3:09:f4:50:a9:39:b9:a2:3f:af:34:09:24:10:35:
70:4e:5e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:15:42 2025 by rpki-client