Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.mft
File: 43TDfhgAlB4aNVhdEMhLffz80nA.mft (raw, json)
Hash identifier: sQ+Dw4E2x9K977JZn54tuhM5oV8eZ4/VakeYehJ7gWo=
Subject key identifier: 11:52:0E:60:37:D0:A6:11:A8:27:11:98:00:48:10:55:01:88:24:E6
Authority key identifier: E3:74:C3:7E:18:00:94:1E:1A:35:58:5D:10:C8:4B:7D:FC:FC:D2:70
Certificate issuer: /CN=E374C37E1800941E1A35585D10C84B7DFCFCD270
Certificate serial: 06AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/43TDfhgAlB4aNVhdEMhLffz80nA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.mft
Manifest number: 06AA
Signing time: Sat 26 Apr 2025 08:38:39 +0000
Manifest this update: Sat 26 Apr 2025 08:38:39 +0000
Manifest next update: Sat 26 Apr 2025 14:38:39 +0000
Files and hashes: 1: 43TDfhgAlB4aNVhdEMhLffz80nA.crl (hash: hKZ3eQnyxxqoZdjs+vsQ8WMU4pFLN1JSe6OqFMDhKRg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1706 (0x6aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E374C37E1800941E1A35585D10C84B7DFCFCD270
Validity
Not Before: Apr 26 08:38:39 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=11520E6037D0A611A827119800481055018824E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:3c:14:d4:b4:c9:b8:5b:fc:8f:0f:f1:7e:
b7:3a:11:64:67:35:74:a7:b6:fa:2b:74:ad:96:63:
76:be:a2:ec:3a:10:f5:d4:d3:45:3d:6a:96:76:5d:
61:c6:3e:91:97:c9:5f:83:fa:ab:c0:ce:04:b6:f4:
4a:53:2a:72:12:28:13:c0:58:49:7e:82:7c:80:20:
22:6b:04:4e:ac:f6:31:cc:1b:e9:eb:0c:8a:65:b0:
60:1e:dd:f5:0f:a0:61:e0:9e:98:c8:1f:11:9b:2c:
62:18:5e:e4:4e:47:cc:53:a9:21:5e:b5:22:5d:a2:
84:29:fe:76:ae:f9:e2:de:a1:0f:5d:c5:09:0b:7f:
54:18:3b:c5:34:77:58:20:70:2f:61:43:0c:cd:e2:
bd:fb:c1:dc:9b:15:d4:06:15:af:bc:43:03:80:60:
87:e8:4b:aa:9c:c2:b9:e6:fb:26:0b:57:5e:c5:82:
03:bf:88:6f:dc:a9:77:f0:46:98:d3:ec:ed:d6:f2:
3c:38:4e:02:52:28:7e:23:71:79:f9:09:60:e9:70:
8f:c8:a4:96:81:9d:22:c3:5d:37:a1:b5:6c:42:53:
71:c8:0b:14:ba:1e:34:cf:60:8d:33:5e:38:77:ea:
e3:06:a5:a8:1f:36:19:61:89:e3:b1:de:3b:ec:54:
e2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:52:0E:60:37:D0:A6:11:A8:27:11:98:00:48:10:55:01:88:24:E6
X509v3 Authority Key Identifier:
keyid:E3:74:C3:7E:18:00:94:1E:1A:35:58:5D:10:C8:4B:7D:FC:FC:D2:70
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/43TDfhgAlB4aNVhdEMhLffz80nA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:ab:b3:05:a6:bb:f2:5c:12:94:6e:e1:ce:20:18:39:cf:e0:
ab:ac:51:89:c8:73:7d:a4:3d:8c:38:07:2b:89:40:96:42:eb:
e1:d7:1d:ff:04:9c:af:a3:81:b7:e3:4c:06:69:3b:13:4c:48:
c6:ac:7e:33:09:c0:95:84:89:2b:02:a3:8e:e3:92:da:07:b1:
c6:3e:f6:32:36:50:3f:99:bb:51:68:98:27:96:34:3e:4d:c9:
68:1b:72:6e:80:67:6b:ce:f5:24:84:fe:be:c7:93:d3:c2:7e:
59:94:2d:07:63:69:89:db:86:93:86:9a:6d:c2:a4:1e:7d:2c:
6e:98:ed:2a:ab:43:32:43:c7:d3:e0:00:a2:1e:78:b4:92:0a:
68:76:9f:eb:52:73:cf:32:49:2b:07:97:fb:d4:42:1b:c6:5d:
ea:16:6b:ca:9e:54:4e:ca:93:fa:44:f3:72:7f:95:c5:e2:17:
18:f1:a6:71:ab:9e:1d:be:98:08:53:8a:90:98:10:3b:57:2c:
43:ee:ec:9b:ba:3b:5e:12:bd:e6:f7:a5:07:ea:0e:4a:8f:40:
b6:40:e9:91:fd:1f:56:bb:2f:c7:f3:6b:5d:df:53:fb:d6:e7:
46:96:3c:95:d8:32:9c:3c:1f:13:79:7a:ee:0c:1d:a2:57:d0:
ff:55:95:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:06:33 2025 by rpki-client