Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft
File: ZpmXJxYiITikWjnrC_qoFJaDQK4.mft (raw, json)
Hash identifier: FsMBhtbpFJ4BpDHmC/vO44OauNkVHxO4dCMi57HVPQg=
Subject key identifier: 67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1
Authority key identifier: 66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE
Certificate issuer: /CN=6699972716222138A45A39EB0BFAA814968340AE
Certificate serial: 04D9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft
Manifest number: 04D9
Signing time: Sat 26 Apr 2025 14:36:39 +0000
Manifest this update: Sat 26 Apr 2025 14:36:39 +0000
Manifest next update: Sat 26 Apr 2025 20:36:39 +0000
Files and hashes: 1: ZpmXJxYiITikWjnrC_qoFJaDQK4.crl (hash: XNk+O3S72esviafPypsGA4Aals9IrEfOX504O5yNFE4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1241 (0x4d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6699972716222138A45A39EB0BFAA814968340AE
Validity
Not Before: Apr 26 14:36:39 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=67114EE963B683F8CC94FE97BBEACE592E4020C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:4d:a1:bd:23:f1:5f:1f:47:b6:95:7b:04:
90:3c:3e:af:9e:a5:ab:24:d8:cb:8c:01:86:f3:c1:
27:ae:28:97:17:16:92:d2:ea:38:dd:11:28:19:d3:
a4:c2:43:b3:82:28:ad:ae:9f:0e:de:1d:81:9b:32:
04:87:a9:26:6f:5c:19:a8:fa:15:c7:a6:7a:3e:e9:
2d:c7:56:5f:e2:66:fa:a2:a3:ee:68:e2:f7:a9:7e:
af:3a:f3:b3:81:54:90:a4:30:64:5b:e5:23:61:4f:
45:cb:15:b3:e3:85:56:e8:ee:87:1a:9e:11:5f:a5:
8c:5f:0e:ab:9f:2d:a8:a1:57:3d:9f:99:fe:ef:53:
48:9d:58:bd:11:4f:7e:f1:d0:f8:3a:9b:e4:c6:ca:
0d:d7:d5:d3:46:10:de:0d:1b:2e:3f:3e:c2:57:f8:
5d:cc:56:b9:df:08:43:e0:f3:16:03:16:cf:8b:2b:
19:3e:ef:ef:24:59:dc:bc:79:2d:56:0d:fe:9d:03:
2e:47:2f:ea:37:5c:d2:39:df:95:7f:9e:13:63:93:
68:ff:64:78:c2:67:57:27:86:89:88:c2:eb:c7:55:
a2:72:78:a4:35:9c:a4:af:44:35:fd:e1:9e:b2:61:
ea:41:74:08:28:9b:62:62:2c:49:fa:14:20:dd:f7:
50:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1
X509v3 Authority Key Identifier:
keyid:66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:2a:33:f6:2c:fa:a6:44:2d:49:68:a5:26:b7:69:a8:e4:51:
11:62:a6:b9:89:03:b8:91:59:fd:a7:88:c6:ea:8d:b3:89:79:
2e:60:23:bd:24:6e:9c:57:09:df:bd:c9:62:e6:43:2f:b6:3f:
82:8f:fa:0c:43:da:16:a7:e7:cd:df:fa:41:d6:46:eb:bb:40:
52:9d:b6:ce:e8:68:0f:55:ca:31:5d:5d:b1:b1:d8:bb:70:d5:
3a:a5:bb:79:ae:f3:fa:dc:39:7a:b4:17:cc:39:23:c5:25:8c:
9f:49:0d:24:fe:03:15:f9:e7:3b:cd:9e:c2:56:52:3e:f9:fb:
14:4a:14:39:59:51:86:9d:7c:bd:08:87:1c:b7:d1:7b:32:fd:
8e:5a:84:f7:bd:78:c5:9e:e3:cf:cc:b3:5f:b9:13:fe:a7:3d:
fc:91:12:17:36:a4:d6:19:4e:39:30:c8:11:d5:86:56:42:31:
a7:38:10:4e:40:a1:2e:91:83:b7:b0:58:ba:f6:17:11:05:3c:
38:ee:a2:3c:7a:76:3c:d0:0e:93:a5:cb:b9:e1:8e:7d:42:2a:
e7:e4:ab:0e:62:75:75:eb:7c:04:c5:c5:83:67:a5:a7:74:55:
18:3b:1a:d6:97:42:ba:fe:ad:7e:b0:9d:01:46:ff:5b:11:79:
3f:7a:67:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:04:39 2025 by rpki-client