Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3262/XTqAkIy6pPTbBrykx87XLMcmN7o.mft
File: XTqAkIy6pPTbBrykx87XLMcmN7o.mft (raw, json)
Hash identifier: xc5/3ap8vLfq9beqcvbuwLvG7PGpHxcREXdf5aaP5Dg=
Subject key identifier: F6:FC:D7:55:B5:12:EC:99:04:3E:E1:14:15:FF:4A:BB:E5:63:EB:3E
Authority key identifier: 5D:3A:80:90:8C:BA:A4:F4:DB:06:BC:A4:C7:CE:D7:2C:C7:26:37:BA
Certificate issuer: /CN=5D3A80908CBAA4F4DB06BCA4C7CED72CC72637BA
Certificate serial: 0872
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XTqAkIy6pPTbBrykx87XLMcmN7o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/XTqAkIy6pPTbBrykx87XLMcmN7o.mft
Manifest number: 0872
Signing time: Wed 09 Apr 2025 01:06:10 +0000
Manifest this update: Wed 09 Apr 2025 01:06:10 +0000
Manifest next update: Wed 09 Apr 2025 07:06:10 +0000
Files and hashes: 1: XTqAkIy6pPTbBrykx87XLMcmN7o.crl (hash: M/N36rAGKi3jG3US7nOOFuWrbNDp7B4Y3bnbQpIwDNE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2162 (0x872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D3A80908CBAA4F4DB06BCA4C7CED72CC72637BA
Validity
Not Before: Apr 9 01:06:10 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F6FCD755B512EC99043EE11415FF4ABBE563EB3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:19:da:92:43:10:d7:c4:a1:4f:73:90:c9:
44:db:f6:7a:0a:fb:24:93:95:00:85:95:26:34:24:
47:56:82:4b:a3:30:a8:16:ce:3b:18:f3:48:f2:d9:
20:90:3c:0b:75:a9:8e:cf:10:0c:8f:fc:03:d1:29:
96:63:fa:61:a6:d9:ac:f0:8b:d2:6d:92:ab:51:22:
91:bc:bf:0f:67:e6:74:6b:ee:aa:b4:e8:8a:45:29:
8d:a0:e8:2d:97:0a:19:78:be:c9:40:57:3d:e8:b6:
ea:23:dd:9e:87:54:e9:a3:3c:ff:d3:59:9f:ab:f1:
50:47:97:34:f2:a0:b9:b4:83:b4:e1:0f:22:cb:1c:
2a:1e:f0:93:2e:e1:af:26:b1:32:7a:b9:89:bb:6a:
a6:22:98:d2:f3:bd:3c:2d:ee:0d:d3:5e:2c:1a:b7:
fa:e1:1c:ab:af:58:05:f6:70:fc:9f:bb:b1:73:70:
b7:4c:21:fc:c2:9a:77:ab:86:7d:44:61:90:5c:7c:
86:30:34:ed:93:02:e6:7e:b0:ec:b8:85:4a:47:1f:
77:1b:67:76:b9:f4:59:5f:a9:4d:8a:06:10:14:b6:
19:7b:65:3d:f7:0b:00:85:90:ac:2a:d7:b3:13:14:
28:5c:b8:e1:9b:73:cb:65:dd:5c:95:5e:ad:ae:50:
95:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FC:D7:55:B5:12:EC:99:04:3E:E1:14:15:FF:4A:BB:E5:63:EB:3E
X509v3 Authority Key Identifier:
keyid:5D:3A:80:90:8C:BA:A4:F4:DB:06:BC:A4:C7:CE:D7:2C:C7:26:37:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/XTqAkIy6pPTbBrykx87XLMcmN7o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XTqAkIy6pPTbBrykx87XLMcmN7o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/XTqAkIy6pPTbBrykx87XLMcmN7o.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b2:ff:d8:0c:1e:e7:f4:dd:a9:95:13:9e:13:33:9b:68:42:
31:35:ae:4f:ff:e4:9a:1d:ae:6d:83:a7:39:60:98:94:3a:a3:
80:63:4b:08:3f:a8:03:48:d9:31:7c:7c:f7:fb:3d:5f:e5:c1:
ba:b2:1f:03:7e:7b:63:87:be:f7:a8:0f:b2:bf:fc:45:12:ac:
9e:3f:eb:53:40:f3:83:2a:f3:c6:c5:cf:14:67:25:61:bf:ee:
06:c2:10:82:11:b1:ce:77:31:7d:a6:72:bc:68:18:da:7e:69:
87:fa:d9:f3:87:0a:b8:ac:9a:a2:cb:e4:bb:4c:44:54:29:32:
c8:16:24:b0:09:a7:e1:75:00:10:22:b4:cf:a4:0e:34:8c:61:
26:45:f7:3b:52:45:56:ed:68:55:79:c3:d5:0b:e5:5a:fd:8f:
95:e5:65:57:b2:b2:00:61:37:5e:fe:c9:b5:9b:0a:97:f1:59:
0c:03:f5:f8:fc:e2:65:8d:a9:38:68:b0:23:84:21:17:37:49:
09:ec:a3:23:9a:fb:57:1b:0d:8d:c6:19:25:80:6b:14:b5:f0:
ed:d9:28:d8:18:db:88:eb:a6:d0:d2:d9:e9:31:24:ab:13:ae:
c2:73:46:0f:ef:6e:fd:6e:94:aa:2f:90:e0:7f:8e:7c:a2:a7:
b2:98:a3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:25:54 2025 by rpki-client