Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft
File: jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft (raw, json)
Hash identifier: F1irBCyinEjvpV44vVzfAvS6OGJIYTX7GdJpFyDaZ9o=
Subject key identifier: 02:2D:FC:C8:B8:C5:8B:CB:6C:A5:2C:39:7D:4F:72:1A:EE:FB:22:F3
Authority key identifier: 8D:0A:AD:C3:51:85:06:5D:87:BC:4F:20:D8:C4:A6:B8:89:31:A8:B9
Certificate issuer: /CN=8D0AADC35185065D87BC4F20D8C4A6B88931A8B9
Certificate serial: 08F5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jQqtw1GFBl2HvE8g2MSmuIkxqLk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft
Manifest number: 08F5
Signing time: Sat 26 Apr 2025 13:10:31 +0000
Manifest this update: Sat 26 Apr 2025 13:10:31 +0000
Manifest next update: Sat 26 Apr 2025 19:10:31 +0000
Files and hashes: 1: jQqtw1GFBl2HvE8g2MSmuIkxqLk.crl (hash: vCI1m5go2jme9CgcaaFK2f3jGTtEZubFpaSBEf2kKWo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2293 (0x8f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D0AADC35185065D87BC4F20D8C4A6B88931A8B9
Validity
Not Before: Apr 26 13:10:31 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=022DFCC8B8C58BCB6CA52C397D4F721AEEFB22F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:36:0a:02:16:fd:27:bb:ee:28:4b:34:c2:
c3:be:b8:6d:d8:bc:e4:71:40:84:97:df:29:b5:23:
42:29:fe:6e:ec:3d:a9:f6:98:bb:c9:4c:3f:4f:12:
ba:d6:89:77:92:25:5b:fa:af:16:ff:c5:5c:4e:67:
06:5b:a0:64:ac:a8:9b:f7:ea:ef:7a:44:a8:fd:32:
16:b5:d7:28:1f:a2:aa:84:91:15:64:a8:3b:fa:b1:
4f:73:c3:0b:c0:43:8c:a4:16:59:d7:e6:4e:de:7f:
c4:e7:b4:db:f5:7f:c5:e9:38:74:d9:cb:92:d3:1a:
e0:3e:a2:9f:66:5d:91:1c:a4:91:bf:07:08:a6:42:
ab:41:44:05:eb:5a:14:c2:dd:80:78:38:50:d5:d6:
90:ec:e5:87:2c:8b:b3:c7:44:eb:e4:45:e5:6d:b7:
d2:c2:aa:f9:08:0a:2c:43:32:27:f2:93:77:dd:61:
17:ec:3e:df:bd:50:ae:a5:19:4a:5a:a5:0b:f9:fa:
e4:6b:88:2e:92:02:be:8d:22:6c:98:9b:ff:1e:9f:
53:07:b7:32:91:14:d1:8e:13:fb:e8:06:16:8e:d7:
45:58:d6:39:57:3e:ba:17:e1:ad:73:ac:85:08:9b:
c1:00:68:ff:9c:2b:2b:09:89:11:cc:c3:fe:b7:78:
87:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2D:FC:C8:B8:C5:8B:CB:6C:A5:2C:39:7D:4F:72:1A:EE:FB:22:F3
X509v3 Authority Key Identifier:
keyid:8D:0A:AD:C3:51:85:06:5D:87:BC:4F:20:D8:C4:A6:B8:89:31:A8:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jQqtw1GFBl2HvE8g2MSmuIkxqLk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:61:52:63:be:fc:90:f2:ae:3e:36:fe:e2:f8:24:35:a6:4c:
78:58:bf:94:48:38:18:03:74:41:cb:2b:37:0f:b2:1f:b4:65:
b0:dc:b9:99:e5:e8:5b:66:da:f7:cf:97:de:21:28:a0:7f:de:
c2:fa:ee:ec:9c:5b:2e:f0:ff:36:37:0c:a4:8c:86:ba:0e:70:
aa:fe:9f:53:6d:ce:ad:ba:6f:36:65:7d:6d:00:7a:d2:6a:60:
2a:1a:f4:42:a3:36:9a:aa:f1:36:43:12:88:da:6b:64:18:97:
72:ff:e0:1a:4a:ac:ff:ab:4e:a8:7d:d1:fe:94:24:92:5c:da:
00:e7:0c:dc:25:d5:cf:9a:5e:ae:49:57:02:ad:e7:cd:0f:b3:
2f:46:a3:fe:fe:e8:63:5c:29:dd:41:3f:49:64:1f:ba:e8:0d:
a3:53:c5:2d:61:dd:68:89:cb:5a:18:67:5a:fa:90:28:3b:87:
15:1e:9b:7f:68:c2:0f:64:c2:e4:cf:95:33:5e:a1:1c:e2:ce:
f9:10:87:73:a6:ef:d2:19:34:4b:7c:ac:85:a8:02:2f:49:71:
bd:88:ed:ba:8d:c2:ec:16:37:1c:53:5a:f2:80:d3:1c:77:d2:
5d:ff:42:a8:d9:79:89:8f:1b:52:78:71:00:84:9d:b8:b5:5d:
e5:de:62:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:15:56 2025 by rpki-client