Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3286/Um3mirHCXqVTIWuhLuNonNVrlkU.mft
File: Um3mirHCXqVTIWuhLuNonNVrlkU.mft (raw, json)
Hash identifier: gj9CJAwDOLjAZYsyr8j8L0g9OkNd2opnM6FlCOPmlwc=
Subject key identifier: 7C:42:1E:2B:98:95:EB:7D:14:57:6D:3B:48:EC:0F:A2:E3:BA:01:C9
Authority key identifier: 52:6D:E6:8A:B1:C2:5E:A5:53:21:6B:A1:2E:E3:68:9C:D5:6B:96:45
Certificate issuer: /CN=526DE68AB1C25EA553216BA12EE3689CD56B9645
Certificate serial: 0672
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Um3mirHCXqVTIWuhLuNonNVrlkU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3286/Um3mirHCXqVTIWuhLuNonNVrlkU.mft
Manifest number: 0672
Signing time: Sat 26 Apr 2025 11:07:57 +0000
Manifest this update: Sat 26 Apr 2025 11:07:57 +0000
Manifest next update: Sat 26 Apr 2025 17:07:57 +0000
Files and hashes: 1: Um3mirHCXqVTIWuhLuNonNVrlkU.crl (hash: q5E3/ri7IpH2kpJu1SZy/MO99ApCutVpUS/ebgC0iZI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1650 (0x672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=526DE68AB1C25EA553216BA12EE3689CD56B9645
Validity
Not Before: Apr 26 11:07:57 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=7C421E2B9895EB7D14576D3B48EC0FA2E3BA01C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:85:48:fa:6f:7f:9c:68:9e:ca:02:0a:ce:7e:
95:59:ba:0a:78:73:7e:a0:23:91:0e:2d:74:82:1b:
57:27:cc:a6:8a:8f:ac:fa:a0:f2:15:9c:5f:5b:8c:
cf:cb:4e:ac:90:39:ad:b2:bd:41:9d:de:08:a6:34:
bf:36:b4:1e:cc:9a:af:9e:81:a8:ae:29:e8:03:14:
d8:e9:04:5b:50:a8:a7:db:b5:b2:63:80:d6:5f:f0:
95:90:2f:8b:e2:eb:ee:8b:32:1f:d0:9c:cd:d6:93:
12:04:6f:a5:82:bd:15:aa:a9:b0:a7:8f:fb:f9:50:
0b:0a:e6:74:93:a3:6e:d6:8a:a6:09:69:d1:74:5d:
79:40:a7:1b:1b:e9:32:c5:46:60:c2:29:ca:7a:8f:
a2:f3:48:a9:41:78:af:91:80:ab:9e:f0:c5:e4:8f:
6d:d5:4f:55:03:27:11:d2:05:3b:78:be:31:3b:a7:
9a:ba:0b:38:f8:f9:e5:51:e8:1e:f4:1a:3d:90:17:
36:0e:2b:0c:42:e3:9e:39:d3:9c:c0:04:54:07:8e:
86:d3:d2:da:db:24:1c:6f:52:e2:34:89:3b:e7:1e:
4c:93:76:27:ed:f0:a4:20:fd:a9:24:7c:f4:71:ec:
a0:31:c9:dc:af:5c:a5:fd:aa:f6:e8:0b:36:df:0d:
97:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:42:1E:2B:98:95:EB:7D:14:57:6D:3B:48:EC:0F:A2:E3:BA:01:C9
X509v3 Authority Key Identifier:
keyid:52:6D:E6:8A:B1:C2:5E:A5:53:21:6B:A1:2E:E3:68:9C:D5:6B:96:45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3286/Um3mirHCXqVTIWuhLuNonNVrlkU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Um3mirHCXqVTIWuhLuNonNVrlkU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3286/Um3mirHCXqVTIWuhLuNonNVrlkU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:68:6d:53:81:72:ac:03:58:54:be:1a:20:77:7c:cf:a7:b7:
da:97:76:fd:84:69:a0:47:80:ce:20:3e:2b:17:4a:d6:27:27:
34:33:c8:3b:73:29:98:1a:8b:c3:32:a9:5b:34:fd:b4:91:a2:
d9:1e:5c:1c:bc:f2:56:b8:0b:e6:d7:ea:15:b0:45:09:44:d9:
7c:57:56:20:37:7f:8f:68:e5:ca:11:8f:3a:ec:ed:18:b0:28:
13:dc:4a:f2:61:b3:0c:8f:56:5d:05:fb:95:b3:d7:f4:c8:e6:
6e:78:86:e8:17:9d:cd:32:13:8f:14:b5:00:fd:d1:16:35:c7:
67:c0:8e:9f:9c:cb:92:15:db:60:a0:98:55:2d:4d:10:a1:06:
59:5d:03:76:8f:a6:1c:d1:bb:e2:05:53:e2:dc:f4:7c:db:78:
bd:83:6b:bc:3e:b0:f0:36:69:e9:7b:64:f4:6a:a6:21:f6:d6:
59:24:87:8b:4c:34:61:0b:99:a2:91:ee:f5:2e:e7:c5:e9:9c:
12:cb:a8:ac:7b:61:dc:73:51:c4:cf:95:f6:17:6f:60:17:9d:
55:a7:40:b4:c5:4a:e1:57:dd:08:d3:9b:4a:be:a3:c9:4f:b6:
3b:c1:17:1e:29:22:76:e4:1d:22:17:c3:af:48:e5:9e:59:ef:
91:4b:92:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:46 2025 by rpki-client