Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3256/pl1CGRJdc3FK-EHeL23UGrlPAE0.mft
File: pl1CGRJdc3FK-EHeL23UGrlPAE0.mft (raw, json)
Hash identifier: 5/Qdz6FSjxfxnEHSpbCTdl2Fs+miwJdTeb8H41JMrw8=
Subject key identifier: 23:3D:51:48:65:33:D4:D5:8F:08:56:D3:40:E1:D3:37:58:F6:BD:BF
Authority key identifier: A6:5D:42:19:12:5D:73:71:4A:F8:41:DE:2F:6D:D4:1A:B9:4F:00:4D
Certificate issuer: /CN=A65D4219125D73714AF841DE2F6DD41AB94F004D
Certificate serial: 0A41
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pl1CGRJdc3FK-EHeL23UGrlPAE0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/pl1CGRJdc3FK-EHeL23UGrlPAE0.mft
Manifest number: 0A41
Signing time: Sat 21 Jun 2025 15:42:34 +0000
Manifest this update: Sat 21 Jun 2025 15:42:34 +0000
Manifest next update: Sat 21 Jun 2025 21:42:34 +0000
Files and hashes: 1: pl1CGRJdc3FK-EHeL23UGrlPAE0.crl (hash: KvGmv0gBncxRjnOdFb5MArGjv1dAqqdKv9rVCfiX6Bs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2625 (0xa41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A65D4219125D73714AF841DE2F6DD41AB94F004D
Validity
Not Before: Jun 21 15:42:34 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=233D51486533D4D58F0856D340E1D33758F6BDBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:aa:fd:08:73:70:b5:6c:d8:e0:a6:e3:ed:
8f:3c:f7:ec:0a:aa:38:3b:f8:e5:01:12:95:bf:3c:
e1:d7:02:09:cb:34:6b:74:33:59:72:40:16:86:9f:
2c:80:1e:72:75:32:7f:1d:c9:f3:86:e5:97:58:e8:
f9:1f:1f:92:01:f3:23:22:e2:5c:4d:c1:2f:c3:91:
8b:a9:0a:bf:94:46:ea:0d:4b:4b:8b:64:8a:ba:6e:
2f:80:fc:11:da:8d:2b:c1:4f:fd:7c:cb:81:15:fa:
03:7a:f7:b4:c2:e6:70:1f:52:e5:cd:57:dd:b8:c3:
92:56:dd:82:1e:1e:6b:a1:77:48:b7:7f:92:b8:4b:
b9:cd:a6:b7:ec:d1:7d:2c:bc:5e:6a:2c:3a:c2:af:
11:b3:c6:36:64:c3:60:df:df:96:9e:5a:cc:c5:12:
61:43:0a:ac:22:a3:5b:0f:50:d8:f0:42:2d:e1:59:
d0:9f:a6:88:2c:b9:d3:78:0f:3f:e3:03:f6:05:e0:
00:de:26:8a:d1:53:b8:53:9c:13:f7:be:f1:ff:fb:
4c:90:d6:a3:96:fc:5d:1b:79:e7:27:08:78:0b:e5:
15:6c:9e:e6:67:7e:ea:75:4b:db:89:a0:1b:15:e5:
be:21:f5:12:3a:78:93:6b:55:88:a8:ac:f3:71:d2:
4f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3D:51:48:65:33:D4:D5:8F:08:56:D3:40:E1:D3:37:58:F6:BD:BF
X509v3 Authority Key Identifier:
keyid:A6:5D:42:19:12:5D:73:71:4A:F8:41:DE:2F:6D:D4:1A:B9:4F:00:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/pl1CGRJdc3FK-EHeL23UGrlPAE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pl1CGRJdc3FK-EHeL23UGrlPAE0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/pl1CGRJdc3FK-EHeL23UGrlPAE0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:97:26:31:6c:96:60:9d:89:5a:38:ae:dc:2e:f0:d6:f4:6b:
44:c6:45:cc:d0:3c:d5:84:a6:53:1c:a1:6c:62:85:11:e3:67:
3a:b9:6d:f2:eb:eb:e5:df:ad:12:3b:b3:02:d0:a0:9f:f2:f6:
e8:f9:9c:00:fb:bc:1b:18:61:e8:42:1a:ed:77:6c:eb:af:d5:
35:96:0c:93:9a:76:46:4a:e9:6a:fb:4f:fe:05:02:07:3d:06:
35:82:f5:ca:0c:f2:46:3c:92:c8:01:b0:8b:3b:08:44:53:f2:
fe:ac:b8:28:e3:5a:ad:c3:06:1f:bf:75:9e:c8:d4:02:4f:f9:
28:d5:91:17:e6:ab:3c:d9:20:79:8b:a3:d4:52:b1:df:0f:77:
ce:79:1d:9c:55:ac:5c:ac:fd:65:5d:62:1c:74:e8:7b:3f:a9:
38:4b:88:d7:d6:69:a5:a9:5e:c7:62:e4:f0:d3:96:58:2f:5b:
84:f2:c1:7e:b8:66:e6:63:b6:8f:a3:32:c3:6a:4a:78:fe:1f:
da:be:8e:89:fd:59:69:86:0d:05:7b:f7:4b:84:12:07:fd:5b:
8f:ac:5e:81:10:da:7b:1f:86:69:02:b4:d0:f7:ab:be:b9:6e:
0f:e4:a1:0e:7d:e0:dd:aa:ef:49:59:4e:eb:e7:ca:17:c6:48:
6f:ca:c8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 19:54:43 2025 by rpki-client