Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
File: nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft (raw, json)
Hash identifier: 8dKzqg0IHrLJe+ESMMMJLFITV7ohAg+1HBbn1yzhjvs=
Subject key identifier: 7A:57:21:AF:CD:60:A6:A8:A6:05:AF:B2:ED:2F:29:0C:DB:87:3B:07
Authority key identifier: 9C:03:80:B9:17:46:0C:50:70:37:F3:CA:7F:53:B4:2B:C2:B8:2D:E7
Certificate issuer: /CN=9C0380B917460C507037F3CA7F53B42BC2B82DE7
Certificate serial: 04B3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nAOAuRdGDFBwN_PKf1O0K8K4Lec.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
Manifest number: 04B3
Signing time: Sat 26 Apr 2025 13:10:50 +0000
Manifest this update: Sat 26 Apr 2025 13:10:50 +0000
Manifest next update: Sat 26 Apr 2025 19:10:50 +0000
Files and hashes: 1: nAOAuRdGDFBwN_PKf1O0K8K4Lec.crl (hash: y8gW8JKDIcyGVy8tjiLRpPeW8Q5zXNNJfRf3iUqRDSs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1203 (0x4b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C0380B917460C507037F3CA7F53B42BC2B82DE7
Validity
Not Before: Apr 26 13:10:50 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=7A5721AFCD60A6A8A605AFB2ED2F290CDB873B07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b1:d9:92:c7:fd:89:93:04:00:e3:6d:1f:f9:
8d:7a:54:07:e3:48:eb:59:16:8a:db:e3:6f:93:b3:
49:bf:1f:ed:1f:41:03:4e:ae:18:7b:1b:cc:7e:ee:
2f:28:96:5f:f4:27:03:d6:ed:14:5f:23:bf:70:17:
71:72:1e:a1:ff:74:9c:09:59:6a:b4:f3:d3:cb:de:
43:68:17:f0:c9:b7:b9:f2:3a:d9:1d:25:78:6a:19:
2a:71:0b:06:e7:82:88:f0:48:72:32:fb:fc:92:fe:
91:62:b9:15:ed:84:92:a0:28:f6:4d:b5:c6:0b:e5:
3d:c2:19:de:17:8d:73:2f:98:b8:3e:a6:1d:ea:a4:
20:df:82:f0:1b:3f:c1:20:51:fb:cd:ff:48:ec:1a:
5b:e1:82:14:dd:dd:f9:70:bd:b9:97:73:3a:93:36:
40:c4:d2:40:75:1a:e9:23:9a:22:7c:62:99:a9:e7:
3e:9d:f3:2d:e6:da:90:57:de:50:a2:cb:7d:1d:cf:
d5:fd:45:32:45:b3:e0:3e:5d:39:ba:06:12:4a:c9:
d3:2a:00:75:95:0c:ee:93:5f:c4:a3:3c:94:4c:a1:
94:11:fa:2a:4b:71:10:d6:fd:d4:a9:7e:12:be:f5:
7f:9b:92:ee:c8:81:9f:c4:2e:37:ef:c9:ce:9f:d9:
12:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:57:21:AF:CD:60:A6:A8:A6:05:AF:B2:ED:2F:29:0C:DB:87:3B:07
X509v3 Authority Key Identifier:
keyid:9C:03:80:B9:17:46:0C:50:70:37:F3:CA:7F:53:B4:2B:C2:B8:2D:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nAOAuRdGDFBwN_PKf1O0K8K4Lec.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:6a:a9:e6:0f:e7:ea:e0:5a:47:34:d4:7b:84:cf:78:5f:4f:
15:ef:af:d9:cb:b5:f0:d5:ef:ff:06:f7:a6:62:3c:ab:2c:50:
7f:b1:59:e1:dd:57:88:29:40:74:60:ba:a4:99:45:76:68:86:
8d:80:e6:0c:61:f5:15:5b:e0:ef:8c:fd:4e:5e:00:18:5b:22:
b5:ee:f3:b2:63:e8:a1:27:9e:86:d0:a6:aa:03:23:ae:16:71:
e6:65:98:1b:c7:ab:ea:7e:14:14:28:58:1b:84:f1:6d:3c:ed:
c7:d3:56:aa:cc:fb:25:95:96:65:e8:72:fd:b9:9f:8e:97:70:
14:47:77:6d:3d:d4:ff:ef:1c:8c:c4:15:e6:42:c4:82:fe:f3:
ef:b7:72:40:6f:d2:88:ab:bb:60:37:ca:f2:df:2c:cb:c4:66:
33:b1:0d:80:f0:ce:b1:8c:b8:8b:72:7d:04:85:77:c2:fe:f0:
83:e2:ed:2f:cf:bd:cb:52:b4:97:d0:5f:bb:06:76:a9:17:c8:
38:1e:3a:ba:29:1a:9b:55:90:42:dc:a0:55:1d:57:9d:f8:62:
5f:dc:1f:f0:bd:a8:e8:55:6e:bc:6d:d7:83:cc:3a:f8:06:01:
01:db:9b:cb:16:9e:be:c0:b6:5a:1c:d9:be:b8:d8:fd:f8:b7:
a5:56:ed:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:06:17 2025 by rpki-client