Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3341/QZthcvWyvCKKx7p4s58CMyghqKg.mft
File: QZthcvWyvCKKx7p4s58CMyghqKg.mft (raw, json)
Hash identifier: Sf2uGTq8jh61wVb+dL5SQujcx/Ce9vsn8oudT98OZHM=
Subject key identifier: 18:CB:0F:98:CA:04:AC:25:C7:1A:5C:E2:22:5B:38:C8:6D:85:10:90
Authority key identifier: 41:9B:61:72:F5:B2:BC:22:8A:C7:BA:78:B3:9F:02:33:28:21:A8:A8
Certificate issuer: /CN=419B6172F5B2BC228AC7BA78B39F02332821A8A8
Certificate serial: 01B4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QZthcvWyvCKKx7p4s58CMyghqKg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/QZthcvWyvCKKx7p4s58CMyghqKg.mft
Manifest number: 01B4
Signing time: Fri 21 Mar 2025 00:32:12 +0000
Manifest this update: Fri 21 Mar 2025 00:32:12 +0000
Manifest next update: Fri 21 Mar 2025 06:32:12 +0000
Files and hashes: 1: QZthcvWyvCKKx7p4s58CMyghqKg.crl (hash: Lewr7fjyFlddFVv9W1LDxuojGIq4hInkM/8fchRXWyM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419B6172F5B2BC228AC7BA78B39F02332821A8A8
Validity
Not Before: Mar 21 00:32:12 2025 GMT
Not After : Dec 23 06:03:57 2025 GMT
Subject: CN=18CB0F98CA04AC25C71A5CE2225B38C86D851090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0d:5f:64:1e:37:c7:69:0d:8f:08:d7:81:7f:
1f:53:13:6f:8a:e9:d0:ca:24:ad:16:4f:9b:c7:d1:
60:2b:13:8f:ad:20:66:d6:4d:a1:26:1c:87:09:fa:
18:05:1b:40:21:92:7e:04:c2:d8:f2:ad:75:49:dc:
62:6d:f5:cd:de:be:81:d0:9b:1a:eb:2d:83:06:f7:
ba:10:d8:69:30:d0:bd:8e:54:a6:df:35:4a:30:cd:
5e:e5:49:8e:4a:07:7a:1e:23:0a:67:18:d7:0c:fe:
88:18:20:d7:e5:2f:43:62:3a:02:8f:4e:cf:7b:fc:
92:db:b8:ca:1b:3e:00:f4:a3:92:56:25:21:24:6b:
c2:5a:05:8e:ea:bd:b2:f9:a2:10:0b:57:cd:8e:ab:
24:8b:51:97:c3:dd:ee:d2:04:1f:79:f7:7c:05:f6:
67:e2:fd:c8:3d:85:cf:00:7e:f9:21:9f:d0:e5:c6:
f8:32:70:5a:ec:ed:83:8e:30:ce:32:59:b3:95:9d:
6c:7f:94:b6:b7:56:1c:41:51:de:27:29:bd:c0:39:
62:bc:e5:ca:7b:f8:72:af:aa:ea:74:73:73:49:81:
df:50:d6:b0:4c:d7:ef:85:a4:fe:72:9f:a0:7f:5c:
0a:a7:3d:cf:1b:aa:b7:3f:3d:7d:c5:f7:4d:d8:e1:
27:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CB:0F:98:CA:04:AC:25:C7:1A:5C:E2:22:5B:38:C8:6D:85:10:90
X509v3 Authority Key Identifier:
keyid:41:9B:61:72:F5:B2:BC:22:8A:C7:BA:78:B3:9F:02:33:28:21:A8:A8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/QZthcvWyvCKKx7p4s58CMyghqKg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QZthcvWyvCKKx7p4s58CMyghqKg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/QZthcvWyvCKKx7p4s58CMyghqKg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:23:16:06:50:92:41:d1:01:de:ee:64:c8:e6:93:35:d3:ca:
19:a3:d8:9e:28:00:fa:13:8c:62:f6:31:0a:18:d7:dc:bb:0c:
2a:0d:4e:d7:f2:c8:d9:b4:9a:eb:0a:51:63:42:c5:08:9c:cd:
db:83:75:e1:36:a2:af:14:02:d8:0b:cd:37:79:1d:c0:1c:05:
d4:f1:fa:32:d8:f3:9b:a4:b4:de:96:73:8d:ae:a0:59:75:33:
be:05:b4:df:dc:1a:4c:f3:b3:07:bd:fe:54:b7:11:aa:15:2f:
b8:ab:04:35:a9:32:c7:c9:ad:8e:40:9d:89:e5:a3:52:cb:07:
1e:c2:b9:d1:b8:64:42:61:0a:b5:36:7a:62:a4:7c:19:6a:53:
fe:37:22:dd:56:0e:12:85:da:ca:7b:c7:3b:2a:86:5f:71:00:
7a:4c:3e:f2:a7:57:2d:60:b9:1d:4f:2d:16:31:db:2c:5c:a5:
ac:25:30:08:ce:6c:59:5b:79:0c:e7:10:5f:05:9f:2a:34:02:
82:f3:47:58:25:ba:a4:04:a7:33:cd:a0:06:13:03:dc:b7:ba:
c8:7b:9e:1f:b3:88:0d:ab:d5:ca:dc:54:b4:b5:b0:21:ec:7f:
bb:72:24:a8:e0:6b:26:7e:38:d7:00:73:b4:87:00:e5:cf:08:
4a:9c:1b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:12:55 2025 by rpki-client