Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3324/5YkdtdPXtHQRybPkcdIJS_vpE2Y.mft
File: 5YkdtdPXtHQRybPkcdIJS_vpE2Y.mft (raw, json)
Hash identifier: gZczqDdT/GTtVFFz0hbNrVfHtwHB2Wkkoqk4WVBaJ5M=
Subject key identifier: 37:4E:6D:A2:15:F1:94:64:19:17:8E:FB:EB:B0:CF:09:CC:B6:56:47
Authority key identifier: E5:89:1D:B5:D3:D7:B4:74:11:C9:B3:E4:71:D2:09:4B:FB:E9:13:66
Certificate issuer: /CN=E5891DB5D3D7B47411C9B3E471D2094BFBE91366
Certificate serial: 03B0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5YkdtdPXtHQRybPkcdIJS_vpE2Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/5YkdtdPXtHQRybPkcdIJS_vpE2Y.mft
Manifest number: 03B0
Signing time: Sat 26 Apr 2025 13:07:56 +0000
Manifest this update: Sat 26 Apr 2025 13:07:56 +0000
Manifest next update: Sat 26 Apr 2025 19:07:56 +0000
Files and hashes: 1: 5YkdtdPXtHQRybPkcdIJS_vpE2Y.crl (hash: UbiVjUHHvm23DH3EZBqMMIJ8w7L39HBv3mNAnzlS54E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 944 (0x3b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5891DB5D3D7B47411C9B3E471D2094BFBE91366
Validity
Not Before: Apr 26 13:07:56 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=374E6DA215F1946419178EFBEBB0CF09CCB65647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:ca:54:e7:4d:73:5a:ac:22:15:83:51:f6:
43:e8:dd:9a:c7:9f:fe:1f:a4:b0:fd:60:db:38:de:
23:ce:ed:f3:d0:2f:e1:da:2b:96:de:79:fe:8b:63:
a5:9f:a9:6b:d4:36:96:c6:4e:d9:9d:a3:cd:ee:35:
eb:36:0b:01:1c:fc:82:e0:39:ce:01:65:aa:66:28:
31:e6:19:f1:4e:5a:23:80:48:79:2d:7e:32:34:af:
6c:5e:cf:3d:63:eb:3d:4c:59:35:53:ca:1c:10:53:
4b:e7:64:e7:6f:21:ee:87:8b:4d:63:7f:3d:15:3d:
78:23:4a:9b:70:2d:8b:48:3d:77:20:d0:d9:44:25:
0e:a3:db:07:c4:29:27:fc:c0:c4:4c:83:86:f7:8d:
10:95:a8:55:0e:27:0f:88:15:69:fe:93:d1:da:67:
ec:55:1e:07:be:f7:93:03:9e:58:76:ae:5b:12:d0:
5d:08:60:d6:5b:0e:00:e1:6d:32:1d:ba:80:dc:47:
13:ca:5a:8f:63:f5:35:eb:6e:74:82:ed:87:76:93:
a0:e4:5d:65:d9:28:11:2f:e3:45:f1:5c:ef:8c:40:
1b:49:69:6f:d4:6b:f9:dd:2a:b9:7f:9a:75:f8:a4:
30:a7:44:03:21:61:7e:00:40:70:b4:36:0f:f2:3b:
da:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4E:6D:A2:15:F1:94:64:19:17:8E:FB:EB:B0:CF:09:CC:B6:56:47
X509v3 Authority Key Identifier:
keyid:E5:89:1D:B5:D3:D7:B4:74:11:C9:B3:E4:71:D2:09:4B:FB:E9:13:66
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/5YkdtdPXtHQRybPkcdIJS_vpE2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5YkdtdPXtHQRybPkcdIJS_vpE2Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/5YkdtdPXtHQRybPkcdIJS_vpE2Y.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:67:c9:cb:e9:85:0b:d3:10:87:d8:17:4d:5a:13:6a:5e:a8:
73:eb:76:25:49:e1:df:82:bc:05:0a:5e:a3:91:9e:bf:ea:f3:
fe:7e:97:d2:39:e4:bd:55:24:58:06:71:1a:82:1e:3a:e5:e0:
98:2b:28:8e:d0:ff:9b:7d:3e:a8:71:81:dc:1b:d8:dd:72:5a:
e4:43:79:7d:4a:10:e0:22:3e:35:88:23:b9:d6:03:78:cd:b8:
b7:9c:1a:0f:4f:db:1e:b0:03:e9:00:61:4d:08:6e:f6:ac:b0:
63:25:ae:c4:eb:82:ca:a9:fd:4d:63:e0:96:d5:2d:0e:9a:dd:
85:2e:44:d9:95:b6:d0:b1:24:f1:1c:1b:ad:24:92:54:2b:59:
4f:3a:92:42:2a:34:c9:b3:0b:54:20:16:fa:93:7a:78:97:77:
4a:b5:4b:93:86:c3:e5:16:03:c7:83:10:8c:b3:dd:12:37:05:
d4:1b:43:78:2d:3d:c2:9b:9a:1c:f8:34:49:2f:d2:dc:03:8b:
ea:2d:16:50:de:b7:ac:6a:65:d4:9f:3b:f6:63:cd:19:5a:1f:
a1:25:1c:50:a9:58:5e:a3:1c:43:e5:a4:33:c4:33:b3:0a:6f:
59:9f:d2:ae:af:20:b7:0d:c4:30:ff:8a:c7:1a:d0:00:10:8a:
36:a9:6b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:07:05 2025 by rpki-client