Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft
File: M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft (raw, json)
Hash identifier: i4YnFky/2+eW/W1gEFk7ZeqP+Rx/FDUIF6rBWgq2QEk=
Subject key identifier: ED:36:A9:4A:5A:D0:EC:FE:0D:6E:81:AD:B7:E3:75:D2:E5:C2:40:13
Authority key identifier: 33:46:8F:56:82:61:F2:D8:08:F7:03:0E:09:CF:AB:BE:1E:E0:ED:14
Certificate issuer: /CN=33468F568261F2D808F7030E09CFABBE1EE0ED14
Certificate serial: 0C96
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft
Manifest number: 0C96
Signing time: Sat 26 Apr 2025 13:10:16 +0000
Manifest this update: Sat 26 Apr 2025 13:10:16 +0000
Manifest next update: Sat 26 Apr 2025 19:10:16 +0000
Files and hashes: 1: M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl (hash: j0tWxKrHGK26pWhwZz1Xlme2Dm+6s9vcHqPkJ154wpM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3222 (0xc96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33468F568261F2D808F7030E09CFABBE1EE0ED14
Validity
Not Before: Apr 26 13:10:16 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=ED36A94A5AD0ECFE0D6E81ADB7E375D2E5C24013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6b:a7:6e:3b:c7:5d:17:9a:a4:66:67:49:8c:
6a:96:c6:86:41:c0:df:00:c5:aa:1d:9f:cd:8f:62:
a1:d7:c3:2f:89:8c:e0:4f:59:ca:44:40:6a:4b:a5:
2b:bc:5e:bc:0b:07:9d:c2:69:d4:c5:1c:06:40:04:
54:50:5b:87:2e:b5:d0:ac:33:3d:0a:01:c6:e0:03:
df:f7:b2:1d:fa:03:e7:b1:f5:49:f7:e3:5c:0f:db:
c6:b0:39:08:01:78:6f:88:49:65:a4:09:de:b5:a2:
30:06:d6:68:8a:15:bf:f7:51:77:74:df:33:df:32:
00:a2:42:d8:01:3d:fe:d5:93:52:27:3b:e5:35:92:
4c:45:67:b6:37:18:65:94:0e:d8:e7:72:70:cb:d1:
6d:44:ef:98:1c:23:8e:2b:7f:7b:52:8f:7d:11:ac:
c4:41:29:a3:17:a3:de:47:14:a3:9b:98:ea:70:b4:
24:61:d8:c3:cd:d4:66:77:36:c0:dd:f0:9f:8c:9c:
fc:58:57:ed:10:a5:47:51:58:58:54:c7:80:82:42:
8e:b9:c7:9e:51:6a:f5:b9:31:2a:24:9d:e4:8f:cc:
30:fd:24:1e:ae:04:42:cf:ae:7f:40:28:b1:23:03:
1d:7c:1d:9e:a6:8e:47:49:50:1d:e8:19:80:5e:18:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:36:A9:4A:5A:D0:EC:FE:0D:6E:81:AD:B7:E3:75:D2:E5:C2:40:13
X509v3 Authority Key Identifier:
keyid:33:46:8F:56:82:61:F2:D8:08:F7:03:0E:09:CF:AB:BE:1E:E0:ED:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:84:80:b2:2b:e3:bf:92:b1:26:64:e1:44:42:d8:2f:00:92:
69:c8:c8:44:8c:e6:f8:b9:6c:b9:a1:d5:fb:90:4c:ea:89:88:
21:21:1f:29:25:5e:68:33:05:28:b7:dd:2e:d9:82:29:ef:6f:
86:c5:78:dc:ed:84:84:f7:0e:ea:1a:a6:8f:e9:91:61:52:e5:
1b:1f:49:7f:88:26:44:b7:58:0c:d1:16:ce:6d:f5:91:95:4c:
5c:65:2e:8d:f0:5a:30:c6:c0:83:67:62:66:eb:b7:6d:f4:06:
b9:22:38:72:73:09:e4:98:3b:7f:83:79:1f:27:84:8a:1e:f9:
0a:f8:08:b5:d0:33:37:de:e0:f1:c4:5c:84:bf:a1:c1:fd:18:
5c:2d:6a:fc:7f:0a:7d:9c:e4:da:a4:b0:64:32:bf:1a:70:2b:
b1:93:ea:d9:6d:18:3a:df:aa:81:02:61:e9:31:84:44:9c:81:
7a:c7:d9:c8:f5:6c:d4:67:e3:69:3a:e3:94:74:d7:20:a0:20:
42:bb:15:52:b8:98:79:de:e0:4a:62:65:2e:07:99:35:f1:66:
de:84:c1:6d:38:a7:63:1c:a2:05:a7:58:7a:6a:09:f8:21:c8:
28:c0:97:fd:b8:25:0c:92:5c:86:d5:c5:0d:8a:00:a0:30:d7:
30:08:ae:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:26:25 2025 by rpki-client