
Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3288/20kOavCkTf-CaNSAeFjUum7WBtk.mft
File: 20kOavCkTf-CaNSAeFjUum7WBtk.mft (raw, json)
Hash identifier: 1bFyYf2LJKK4s503EU2umrObVh/XaKwuXhL+zNm3umQ=
Subject key identifier: 4D:97:94:07:C5:7C:64:38:66:39:BA:F7:B7:31:97:0F:D5:BE:CF:78
Authority key identifier: DB:49:0E:6A:F0:A4:4D:FF:82:68:D4:80:78:58:D4:BA:6E:D6:06:D9
Certificate issuer: /CN=DB490E6AF0A44DFF8268D4807858D4BA6ED606D9
Certificate serial: 064C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/20kOavCkTf-CaNSAeFjUum7WBtk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3288/20kOavCkTf-CaNSAeFjUum7WBtk.mft
Manifest number: 064C
Signing time: Sat 26 Apr 2025 13:08:43 +0000
Manifest this update: Sat 26 Apr 2025 13:08:43 +0000
Manifest next update: Sat 26 Apr 2025 19:08:43 +0000
Files and hashes: 1: 20kOavCkTf-CaNSAeFjUum7WBtk.crl (hash: zMMqWztVkd/1rivvDqD3suKqOkybXx5SBMFn7y2mYRg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1612 (0x64c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB490E6AF0A44DFF8268D4807858D4BA6ED606D9
Validity
Not Before: Apr 26 13:08:43 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4D979407C57C64386639BAF7B731970FD5BECF78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:93:53:e3:24:b9:d9:4b:58:0f:74:13:3b:a7:
d2:d4:ad:38:1a:c0:a2:a8:28:9f:c8:b7:a1:70:70:
18:84:67:63:22:9b:6e:e3:8d:a5:23:33:e7:3b:6e:
73:3c:15:b4:93:03:89:a4:3f:e2:74:8e:e0:42:ed:
92:7e:ff:73:76:b7:8c:c9:83:22:9d:88:69:cb:37:
30:4b:e3:80:0b:c2:14:73:1b:e1:c4:4a:09:24:3f:
de:06:04:60:a0:03:4c:cd:35:36:9e:b4:cb:56:c9:
56:dd:4c:c4:c0:ff:56:54:56:e6:81:05:57:75:16:
ef:65:3e:5a:2c:b9:83:4f:ac:e7:2b:e9:0a:ab:ec:
1e:15:03:cf:fe:f9:43:f0:19:c7:eb:fe:70:95:94:
f8:42:cd:1e:2e:76:1f:a7:81:e6:8c:d3:5e:d3:f1:
6c:19:cf:b4:30:62:d7:0f:aa:99:f6:47:c3:a7:f6:
ad:bc:ee:17:e4:48:77:ae:43:e1:0a:fc:ae:37:91:
e2:f6:14:bc:59:45:4d:cf:21:09:2c:3c:bf:5e:b8:
48:59:26:fb:b1:52:67:7a:a7:58:78:f2:e0:70:28:
81:52:83:f7:be:f0:8a:47:55:00:85:52:ae:e2:0f:
d3:85:e9:b0:b9:bd:d2:54:f6:df:00:e0:68:a7:2d:
a2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:97:94:07:C5:7C:64:38:66:39:BA:F7:B7:31:97:0F:D5:BE:CF:78
X509v3 Authority Key Identifier:
keyid:DB:49:0E:6A:F0:A4:4D:FF:82:68:D4:80:78:58:D4:BA:6E:D6:06:D9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3288/20kOavCkTf-CaNSAeFjUum7WBtk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/20kOavCkTf-CaNSAeFjUum7WBtk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3288/20kOavCkTf-CaNSAeFjUum7WBtk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2f:28:4f:d3:f0:fd:8a:25:76:8f:15:6e:cf:d8:c9:19:e7:
be:1d:2f:1f:26:79:a3:35:00:69:0d:7a:4a:42:df:b7:a3:99:
40:dc:19:01:a6:37:8e:37:84:3c:5f:e2:aa:db:00:3c:73:9f:
d2:f8:cd:de:bb:76:6f:cd:0f:23:b7:4a:7a:ab:f1:5a:41:e6:
d3:a9:3d:6f:58:ef:a9:92:f0:26:3b:86:09:bb:c6:8c:d1:c5:
fa:a6:e0:c8:85:cd:64:f6:56:63:d0:2b:18:5c:12:9d:2d:02:
05:f1:a8:4b:46:5f:12:59:fb:d4:e6:77:32:d2:30:44:dc:08:
b3:2d:fe:75:9b:70:25:d7:65:48:52:e2:20:ad:4f:ce:85:d5:
10:f8:a0:01:81:97:a4:f9:11:73:f7:c1:55:a6:ac:a1:fc:11:
b2:a9:6f:f7:3e:d9:c6:62:62:86:21:c5:7f:e4:93:d4:41:74:
a0:8d:ae:ce:df:b6:f6:91:17:a3:b4:60:62:63:06:8b:b4:9e:
6e:d6:95:50:79:96:8f:91:5e:a5:4c:af:7a:f0:11:d6:75:4b:
0e:43:f6:d1:e0:1c:05:6b:27:79:e6:d6:1b:39:1e:1b:21:a6:
83:0c:9f:22:c1:32:00:6c:45:da:be:a3:20:05:db:3b:53:b4:
2d:e9:e4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:02:04 2025 by rpki-client