Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3287/5qax0ev1JRCDGd41iz_X5BE8_HU.mft
File: 5qax0ev1JRCDGd41iz_X5BE8_HU.mft (raw, json)
Hash identifier: k8Zbi/SRsi6HwoUN4Nm+LFKdhTr3mOycXGiYdrdOSX8=
Subject key identifier: 5B:5D:7D:9D:92:48:9C:8F:66:8D:5C:91:04:D3:23:2D:73:98:D3:09
Authority key identifier: E6:A6:B1:D1:EB:F5:25:10:83:19:DE:35:8B:3F:D7:E4:11:3C:FC:75
Certificate issuer: /CN=E6A6B1D1EBF525108319DE358B3FD7E4113CFC75
Certificate serial: 0670
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5qax0ev1JRCDGd41iz_X5BE8_HU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3287/5qax0ev1JRCDGd41iz_X5BE8_HU.mft
Manifest number: 0670
Signing time: Sat 26 Apr 2025 11:06:42 +0000
Manifest this update: Sat 26 Apr 2025 11:06:42 +0000
Manifest next update: Sat 26 Apr 2025 17:06:42 +0000
Files and hashes: 1: 5qax0ev1JRCDGd41iz_X5BE8_HU.crl (hash: p9AGY39qq1ixpy5LeOtha9yiQkBF8/Q9jhhiU8XqVGM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1648 (0x670)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6A6B1D1EBF525108319DE358B3FD7E4113CFC75
Validity
Not Before: Apr 26 11:06:42 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5B5D7D9D92489C8F668D5C9104D3232D7398D309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:41:68:37:14:03:55:30:ae:36:0d:cf:5a:
5a:ba:c7:b2:12:ea:9d:20:1b:28:b4:65:8a:98:85:
ba:bc:b9:1c:74:e1:9d:67:a2:b7:27:2e:a0:46:b5:
6a:f8:56:5d:f6:21:5b:42:c7:bf:16:3d:82:3c:b2:
97:94:e0:06:2d:90:dc:00:b9:13:bc:94:8a:26:f0:
50:35:1a:37:02:2c:31:08:6e:cd:97:c6:0c:90:75:
55:88:6b:88:5f:fd:45:33:90:b8:db:ff:c4:4b:3f:
24:32:d6:f4:69:35:d4:bf:f9:68:3b:ed:9d:6e:d7:
34:2e:96:d5:c2:6b:8b:44:f3:a2:dc:64:9a:bd:67:
69:c2:fa:bc:0c:94:45:75:df:17:ef:03:16:d6:34:
40:15:8a:d7:41:02:28:72:b6:ab:66:82:97:ad:41:
5d:c4:aa:d6:23:39:49:b2:d3:9b:ec:77:22:61:87:
d5:42:d3:9b:79:a2:11:63:67:8c:2d:ff:6e:bc:64:
52:5b:41:fb:6b:0a:31:28:9b:4d:ca:80:08:bf:a8:
e8:9c:74:67:9d:7d:11:02:21:85:50:9d:64:be:bf:
f6:e6:d5:2b:e8:fb:62:65:b0:9a:cd:60:20:2b:a3:
63:1b:c2:af:b7:07:96:20:75:f9:65:ec:59:6f:11:
99:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5D:7D:9D:92:48:9C:8F:66:8D:5C:91:04:D3:23:2D:73:98:D3:09
X509v3 Authority Key Identifier:
keyid:E6:A6:B1:D1:EB:F5:25:10:83:19:DE:35:8B:3F:D7:E4:11:3C:FC:75
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3287/5qax0ev1JRCDGd41iz_X5BE8_HU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5qax0ev1JRCDGd41iz_X5BE8_HU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3287/5qax0ev1JRCDGd41iz_X5BE8_HU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:f1:00:44:07:b6:a9:f4:9b:06:99:88:9a:e0:75:94:64:a8:
1f:19:dd:a9:b3:e2:03:3f:b1:24:06:c2:30:a2:b9:0a:8e:5d:
0d:e9:6f:fd:cf:f4:70:30:6c:bd:1f:1e:32:eb:40:98:84:4c:
62:7d:11:91:3b:24:0c:35:f0:df:2d:00:5a:54:75:26:e3:98:
21:04:4c:9a:19:dc:10:86:eb:2f:be:3e:94:62:8c:6b:85:43:
4b:11:68:0f:cf:fc:df:08:b6:30:1e:4a:9a:22:b8:ac:48:8a:
5a:dd:da:c5:19:b4:dc:f4:fd:7c:34:e6:1e:be:cd:87:26:13:
c1:b9:d0:9c:39:0c:b1:a2:a9:a7:12:14:16:a2:db:a6:03:43:
47:4d:30:fd:3e:c5:8d:2f:0e:57:2d:85:b0:eb:1a:0f:0a:d6:
fe:eb:40:8f:fc:70:ed:a2:b4:bd:52:28:49:05:b5:d7:cf:31:
ae:2c:d6:21:82:7a:04:94:98:ae:8a:4f:76:65:c1:a7:b0:ce:
ec:59:fe:99:66:e2:5a:b7:ce:66:b1:b8:09:20:e4:ea:12:c1:
e9:71:aa:12:64:32:6d:ac:07:8e:e3:e0:8a:67:48:9c:22:4b:
2d:fc:1b:ce:39:6c:c1:09:8a:8d:37:8c:30:9d:c0:3e:eb:1f:
ea:5c:85:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:22:04 2025 by rpki-client