Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft
File: hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft (raw, json)
Hash identifier: DTd5lMFhUsuKpUJxVC7Vkgm2SDVIkYUIe0X6rDjyZLQ=
Subject key identifier: BE:D9:25:DE:39:2A:E8:6E:11:81:56:16:4F:49:12:59:38:4C:5C:5A
Authority key identifier: 85:3C:52:D1:A8:41:42:13:79:81:B9:05:1E:92:4A:4B:32:91:5C:66
Certificate issuer: /CN=853C52D1A84142137981B9051E924A4B32915C66
Certificate serial: 0357
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hTxS0ahBQhN5gbkFHpJKSzKRXGY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft
Manifest number: 0357
Signing time: Sat 26 Apr 2025 13:08:50 +0000
Manifest this update: Sat 26 Apr 2025 13:08:50 +0000
Manifest next update: Sat 26 Apr 2025 19:08:50 +0000
Files and hashes: 1: hTxS0ahBQhN5gbkFHpJKSzKRXGY.crl (hash: AODJ0mHuEBTfTJo+c1l/1QRYH6VQJBiPR9z6HHJM0ck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 855 (0x357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853C52D1A84142137981B9051E924A4B32915C66
Validity
Not Before: Apr 26 13:08:50 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=BED925DE392AE86E118156164F491259384C5C5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:4c:3b:16:5a:51:15:14:ad:a8:2c:93:64:
4a:3e:6e:88:fd:04:ea:22:b3:8d:d4:6c:4f:43:7a:
f1:99:c4:0f:4a:c7:7b:77:ac:d9:1c:8b:8c:f6:86:
53:29:47:2e:39:30:3b:22:77:5d:ba:04:09:b2:bf:
42:58:53:1c:18:43:9f:d5:34:7e:4c:1b:e7:85:73:
51:fa:33:f3:d2:75:cf:39:5e:3f:13:3d:e9:0c:ce:
ed:33:af:4c:63:cd:2e:c7:08:2a:07:5a:6d:64:d5:
54:9f:d2:58:bd:99:a4:f1:b4:cb:b4:d8:e8:ad:ca:
61:f8:ca:ff:bc:6d:36:91:08:40:d3:b6:c9:b6:4d:
cd:e1:35:1b:7e:14:21:76:dc:db:58:ef:d0:48:9e:
bb:ff:25:19:05:6d:f5:32:fa:52:8b:3f:42:21:0a:
f7:05:84:f7:b5:5c:73:9b:3c:aa:8c:ab:1b:4e:98:
3f:32:db:28:18:b5:86:3b:63:cf:fb:fb:87:70:c4:
68:a1:86:c5:b7:9a:39:b8:92:d8:38:54:ef:15:29:
21:50:6d:bd:12:5e:70:65:e4:da:dd:66:3a:9e:76:
46:b8:8b:d7:58:c2:7a:9e:fd:da:72:a9:ac:27:aa:
4f:c9:be:4b:f6:42:64:e1:16:b9:d9:b8:11:ff:dd:
b0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D9:25:DE:39:2A:E8:6E:11:81:56:16:4F:49:12:59:38:4C:5C:5A
X509v3 Authority Key Identifier:
keyid:85:3C:52:D1:A8:41:42:13:79:81:B9:05:1E:92:4A:4B:32:91:5C:66
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hTxS0ahBQhN5gbkFHpJKSzKRXGY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/hTxS0ahBQhN5gbkFHpJKSzKRXGY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:3f:ee:73:87:0f:3d:87:2e:86:97:c9:1e:58:33:eb:ff:3f:
54:ea:e3:77:d3:a5:6e:76:b8:42:a6:74:29:ab:02:08:9e:42:
4e:96:af:44:94:91:76:d8:13:21:8c:95:66:d6:e7:78:84:c3:
23:b8:21:d3:66:6e:56:79:88:9a:a2:41:8c:9b:78:52:26:56:
28:f3:af:ae:06:39:24:97:3b:15:bd:26:77:fd:62:a1:29:f9:
0c:a1:d5:0f:70:d9:64:5f:7f:3d:52:f8:fe:e1:1f:e2:b5:51:
86:18:f3:ec:9f:15:ca:0d:fd:ef:e5:9f:d4:ba:f3:c8:62:e7:
ec:96:96:79:94:6f:50:37:8e:c6:fd:d3:2d:dd:0c:9a:e8:f9:
4a:4e:ac:c5:3f:d9:9a:9f:e9:c5:9c:7a:b1:5d:74:e3:a7:47:
58:97:d8:f0:d4:4b:bc:17:d4:31:6f:1a:4c:b5:cd:06:54:af:
5f:05:2f:70:45:c8:f9:6c:aa:5f:20:2a:e4:a6:74:31:51:a7:
9c:6a:27:95:64:23:88:cf:f9:cc:97:a3:4f:bc:1b:d7:15:ee:
99:dd:be:13:06:da:d9:98:a2:ec:89:9c:e8:2a:eb:8d:70:66:
8d:16:a0:65:cf:f4:5b:2e:be:d7:95:88:e5:d7:22:e4:c0:37:
ee:ae:6d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:28:38 2025 by rpki-client