Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3324/5YkdtdPXtHQRybPkcdIJS_vpE2Y.mft
File: 5YkdtdPXtHQRybPkcdIJS_vpE2Y.mft (raw, json)
Hash identifier: JMvecdodHIAcYvWH0yM7GUm26I9vkYQW8Zy+bDu3jBU=
Subject key identifier: 37:4E:6D:A2:15:F1:94:64:19:17:8E:FB:EB:B0:CF:09:CC:B6:56:47
Authority key identifier: E5:89:1D:B5:D3:D7:B4:74:11:C9:B3:E4:71:D2:09:4B:FB:E9:13:66
Certificate issuer: /CN=E5891DB5D3D7B47411C9B3E471D2094BFBE91366
Certificate serial: 04A6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5YkdtdPXtHQRybPkcdIJS_vpE2Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/5YkdtdPXtHQRybPkcdIJS_vpE2Y.mft
Manifest number: 04A6
Signing time: Sun 15 Jun 2025 07:22:11 +0000
Manifest this update: Sun 15 Jun 2025 07:22:11 +0000
Manifest next update: Sun 15 Jun 2025 13:22:11 +0000
Files and hashes: 1: 5YkdtdPXtHQRybPkcdIJS_vpE2Y.crl (hash: WBtiTyO2i2raN3wAmzibwb1F+tvs8LMsqIrYq9WAehM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1190 (0x4a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5891DB5D3D7B47411C9B3E471D2094BFBE91366
Validity
Not Before: Jun 15 07:22:11 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=374E6DA215F1946419178EFBEBB0CF09CCB65647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:ca:54:e7:4d:73:5a:ac:22:15:83:51:f6:
43:e8:dd:9a:c7:9f:fe:1f:a4:b0:fd:60:db:38:de:
23:ce:ed:f3:d0:2f:e1:da:2b:96:de:79:fe:8b:63:
a5:9f:a9:6b:d4:36:96:c6:4e:d9:9d:a3:cd:ee:35:
eb:36:0b:01:1c:fc:82:e0:39:ce:01:65:aa:66:28:
31:e6:19:f1:4e:5a:23:80:48:79:2d:7e:32:34:af:
6c:5e:cf:3d:63:eb:3d:4c:59:35:53:ca:1c:10:53:
4b:e7:64:e7:6f:21:ee:87:8b:4d:63:7f:3d:15:3d:
78:23:4a:9b:70:2d:8b:48:3d:77:20:d0:d9:44:25:
0e:a3:db:07:c4:29:27:fc:c0:c4:4c:83:86:f7:8d:
10:95:a8:55:0e:27:0f:88:15:69:fe:93:d1:da:67:
ec:55:1e:07:be:f7:93:03:9e:58:76:ae:5b:12:d0:
5d:08:60:d6:5b:0e:00:e1:6d:32:1d:ba:80:dc:47:
13:ca:5a:8f:63:f5:35:eb:6e:74:82:ed:87:76:93:
a0:e4:5d:65:d9:28:11:2f:e3:45:f1:5c:ef:8c:40:
1b:49:69:6f:d4:6b:f9:dd:2a:b9:7f:9a:75:f8:a4:
30:a7:44:03:21:61:7e:00:40:70:b4:36:0f:f2:3b:
da:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4E:6D:A2:15:F1:94:64:19:17:8E:FB:EB:B0:CF:09:CC:B6:56:47
X509v3 Authority Key Identifier:
keyid:E5:89:1D:B5:D3:D7:B4:74:11:C9:B3:E4:71:D2:09:4B:FB:E9:13:66
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/5YkdtdPXtHQRybPkcdIJS_vpE2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5YkdtdPXtHQRybPkcdIJS_vpE2Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/5YkdtdPXtHQRybPkcdIJS_vpE2Y.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d8:78:24:a9:4c:65:b9:73:3a:e1:80:b6:c1:14:99:bb:78:
76:a1:fb:d6:09:0f:d2:45:cd:8f:90:2f:6f:78:44:5b:1d:a5:
ba:18:98:66:a7:96:a5:0d:11:f5:08:20:cc:3f:95:24:ab:bc:
a5:7c:ac:78:11:ba:e4:88:21:c0:61:81:fc:68:92:af:13:76:
a3:16:2f:b6:76:d8:8a:c9:b1:87:9e:1e:5d:bd:57:af:f7:e2:
b4:23:38:1e:9b:3d:2d:fa:a3:10:fb:a4:03:1c:08:5d:b9:a0:
d5:61:40:a2:91:30:d1:ef:c4:2b:fb:a6:60:9c:38:5c:ab:5f:
ed:36:d9:ba:f7:df:c4:19:83:36:5c:d5:55:45:32:8b:4b:df:
b2:6d:e2:1a:16:ce:82:5b:4f:b3:d9:cd:0f:2d:d8:8a:56:35:
33:12:f3:66:2b:13:7f:4d:ed:d1:c2:7e:c0:38:66:85:07:21:
c4:6c:1b:bf:d6:7d:05:3f:e9:b7:f6:bc:f5:ab:8a:7d:ad:79:
f3:09:b4:63:29:6f:f1:df:b8:dd:bc:df:82:12:42:36:fe:34:
8d:89:69:08:4d:6b:0e:10:cf:7e:a7:32:c7:c4:48:f9:e5:78:
43:4c:92:57:bd:6f:db:19:a4:25:17:e8:33:0b:0d:a2:01:6e:
72:40:dd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:10:59 2025 by rpki-client