Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3332/oSxs0hrGVXPbWxQ4_6vayraf5iM.mft
File: oSxs0hrGVXPbWxQ4_6vayraf5iM.mft (raw, json)
Hash identifier: i0UsqmX+XE2Ybmo79jES9G50pq+cqsExROod+T+LBn4=
Subject key identifier: 3F:DB:5E:8F:A3:C5:11:FB:A2:D7:6C:6F:0A:3D:F4:9A:7B:4D:47:66
Authority key identifier: A1:2C:6C:D2:1A:C6:55:73:DB:5B:14:38:FF:AB:DA:CA:B6:9F:E6:23
Certificate issuer: /CN=A12C6CD21AC65573DB5B1438FFABDACAB69FE623
Certificate serial: 0236
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oSxs0hrGVXPbWxQ4_6vayraf5iM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/oSxs0hrGVXPbWxQ4_6vayraf5iM.mft
Manifest number: 0236
Signing time: Fri 21 Mar 2025 00:28:47 +0000
Manifest this update: Fri 21 Mar 2025 00:28:47 +0000
Manifest next update: Fri 21 Mar 2025 06:28:47 +0000
Files and hashes: 1: oSxs0hrGVXPbWxQ4_6vayraf5iM.crl (hash: eYRXbUOvJZ3AzawxZIvm9tOTHVjplNUQ/Q5Y+v+Fm9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 566 (0x236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A12C6CD21AC65573DB5B1438FFABDACAB69FE623
Validity
Not Before: Mar 21 00:28:47 2025 GMT
Not After : Nov 27 00:59:02 2025 GMT
Subject: CN=3FDB5E8FA3C511FBA2D76C6F0A3DF49A7B4D4766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d3:fc:88:e3:33:99:53:0e:7f:db:76:02:ae:
a9:d3:ae:60:28:96:a3:6d:cd:90:4d:c7:03:c9:a0:
b2:f0:18:ca:1d:b2:58:d7:f7:fc:c4:91:53:ce:24:
72:d3:b0:36:22:96:cc:a7:c1:29:2d:5a:d6:23:07:
10:f9:e0:9a:9e:14:96:c5:ef:f1:b5:c2:e7:3d:63:
b2:9d:91:84:49:e6:0f:66:2c:5f:e9:1e:51:ae:ae:
18:37:bf:5e:63:a1:ab:df:0d:c2:fe:2d:7f:48:50:
fb:05:4f:9d:df:5a:07:63:2e:ab:0d:c1:3b:c2:5a:
df:bb:96:6e:2d:0f:2a:ac:9d:7c:0b:3c:75:f1:1c:
7f:59:4f:17:d4:c7:32:f6:e2:d5:cc:15:f1:9f:46:
25:f6:b3:62:44:7a:16:5c:26:a9:c4:83:30:16:fa:
34:c7:33:04:77:f2:fd:a7:b8:9d:f1:7e:b5:af:1f:
a9:24:55:bf:a5:43:9c:ca:d0:ce:e6:ae:52:2e:0b:
20:28:81:88:73:fe:18:31:c4:9e:22:4d:49:33:b1:
5a:ae:3f:ea:99:f9:a1:e6:24:48:73:ec:16:44:cf:
1e:a9:dd:ae:a8:62:82:ac:ed:f3:ea:58:7b:11:90:
e8:ea:9f:c6:08:4d:e7:ab:87:00:6a:7d:13:f8:f0:
9d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DB:5E:8F:A3:C5:11:FB:A2:D7:6C:6F:0A:3D:F4:9A:7B:4D:47:66
X509v3 Authority Key Identifier:
keyid:A1:2C:6C:D2:1A:C6:55:73:DB:5B:14:38:FF:AB:DA:CA:B6:9F:E6:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/oSxs0hrGVXPbWxQ4_6vayraf5iM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oSxs0hrGVXPbWxQ4_6vayraf5iM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/oSxs0hrGVXPbWxQ4_6vayraf5iM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:06:69:ae:6c:59:b2:8c:98:f0:71:75:9b:26:9d:9b:db:ea:
63:9c:70:84:62:19:da:6e:b9:23:95:38:81:9d:db:23:15:a4:
e3:81:0c:eb:b4:8b:45:ff:6b:af:51:f5:8f:25:b6:43:07:c7:
42:39:d9:c9:fa:9a:12:37:78:68:cb:f9:73:0b:88:f0:06:48:
8e:ea:08:4d:73:16:e5:4b:9c:ca:31:42:99:45:f6:a7:29:2a:
53:79:ec:ac:a7:48:b0:39:6a:bb:d0:4d:4a:f0:fd:33:07:d5:
af:c2:d1:00:b6:13:b1:0d:07:c7:f1:fe:44:dd:84:6e:4b:19:
cc:4b:dc:0b:32:44:42:34:bd:8d:8e:fa:62:c3:0a:8f:10:5c:
df:da:37:4f:83:30:18:18:d5:1d:6b:19:08:79:9e:1b:7e:a2:
f9:f4:bf:be:e6:af:b0:93:18:07:57:37:a8:2c:7e:68:a6:48:
6e:3a:8b:cc:10:4d:f5:ac:6c:36:ac:a1:c5:b6:24:1d:ea:3e:
8b:bd:84:59:0b:49:d4:60:df:7d:62:87:e1:f3:cd:8d:54:bf:
72:46:54:e1:78:2e:44:86:b9:88:16:76:76:8c:8e:a4:9a:32:
5f:1d:c3:56:8e:f7:20:b8:43:b6:0a:12:9e:19:c2:e6:42:1d:
a2:8d:20:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:36:58 2025 by rpki-client