Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3346/_On9lvjAopmBn-sARGCn2GHQu3I.mft
File: _On9lvjAopmBn-sARGCn2GHQu3I.mft (raw, json)
Hash identifier: 6ixa4/zydpa/1auiyihEt0I498Ae6DOrR7MZdrdXEp0=
Subject key identifier: 07:45:AC:3C:4A:E9:B8:10:CF:F0:61:DA:83:70:00:77:BD:31:79:A8
Authority key identifier: FC:E9:FD:96:F8:C0:A2:99:81:9F:EB:00:44:60:A7:D8:61:D0:BB:72
Certificate issuer: /CN=FCE9FD96F8C0A299819FEB004460A7D861D0BB72
Certificate serial: 017E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_On9lvjAopmBn-sARGCn2GHQu3I.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/_On9lvjAopmBn-sARGCn2GHQu3I.mft
Manifest number: 017E
Signing time: Fri 21 Mar 2025 00:32:23 +0000
Manifest this update: Fri 21 Mar 2025 00:32:23 +0000
Manifest next update: Fri 21 Mar 2025 06:32:23 +0000
Files and hashes: 1: _On9lvjAopmBn-sARGCn2GHQu3I.crl (hash: Vp1ZPlIjVoguqmuPIfcEcFiBfEgCHJkJBdJQbwKmzXs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCE9FD96F8C0A299819FEB004460A7D861D0BB72
Validity
Not Before: Mar 21 00:32:23 2025 GMT
Not After : Jan 3 02:04:14 2026 GMT
Subject: CN=0745AC3C4AE9B810CFF061DA83700077BD3179A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f9:fe:40:86:68:d8:c8:57:39:76:8e:60:33:
27:ae:4c:2a:dc:67:26:77:c7:36:b9:49:4d:aa:98:
7e:ff:9c:a7:b5:44:90:4a:bf:5b:15:56:41:9e:9c:
e8:84:2d:46:f9:47:79:18:96:8e:5c:2c:90:0e:15:
f9:2a:db:90:d3:73:d9:71:ab:73:61:1c:bd:77:11:
28:58:65:25:02:c9:ee:ca:cc:0c:50:78:72:b9:41:
05:d6:7e:9c:78:8a:1f:49:31:43:11:65:b4:62:1f:
95:ff:e1:18:bd:a5:eb:f1:d4:63:f2:c6:a3:e2:50:
69:0a:22:df:d8:1a:c6:b1:bb:a0:23:4f:b8:aa:83:
35:49:39:ee:73:88:e0:0a:7e:fd:09:ef:7b:d0:23:
d3:58:5e:c2:4a:0b:b5:1e:f9:28:a2:8b:b8:58:7e:
a9:19:26:e6:a2:b8:be:93:0d:e0:48:92:f0:cc:c7:
76:f0:dc:bd:6f:c2:3e:a0:ce:5f:c6:5d:00:94:d8:
49:b3:3f:40:41:9e:6d:e4:bf:0d:7b:83:96:15:d2:
f5:b3:41:5d:da:29:f7:5b:5e:11:cc:74:ed:29:78:
45:34:d8:eb:c6:ca:42:1b:55:81:13:0f:ca:4c:3e:
f2:28:4e:1f:f8:b0:f2:92:c2:1c:c5:bb:de:ec:99:
e2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:45:AC:3C:4A:E9:B8:10:CF:F0:61:DA:83:70:00:77:BD:31:79:A8
X509v3 Authority Key Identifier:
keyid:FC:E9:FD:96:F8:C0:A2:99:81:9F:EB:00:44:60:A7:D8:61:D0:BB:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/_On9lvjAopmBn-sARGCn2GHQu3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_On9lvjAopmBn-sARGCn2GHQu3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/_On9lvjAopmBn-sARGCn2GHQu3I.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:fd:eb:d5:e4:82:1b:f8:91:62:71:52:6f:cb:36:53:68:86:
f6:f3:45:a5:ba:8f:41:f6:d5:49:b9:b4:99:8f:33:e4:b0:1c:
cf:24:cd:9e:33:d6:74:0a:35:ad:c6:cd:c2:76:c3:82:bd:34:
5d:de:74:bd:f9:29:aa:43:c6:f2:65:aa:82:57:a5:72:62:46:
84:82:25:75:d5:a6:95:0f:c5:c6:0e:47:6e:66:8e:b7:39:36:
25:90:64:26:28:84:66:d5:64:9f:c2:87:db:0a:e6:f9:8a:4a:
12:fe:31:4d:5c:99:ea:44:02:68:ba:de:7d:6c:11:b0:7f:17:
50:23:12:24:5d:3a:d4:8a:25:1f:6b:c3:11:8e:69:89:43:33:
e5:2a:af:21:46:89:30:73:f8:94:a0:8e:3c:52:a9:25:6c:c0:
5a:1a:fc:35:d5:fd:ce:c6:81:86:af:f1:a7:28:97:f1:73:77:
28:0c:31:4f:a3:9f:f6:68:cf:7b:d3:f2:0b:25:be:b0:45:0c:
43:8a:25:5a:7c:06:ac:68:b1:a2:03:5c:99:b2:ec:48:cf:7c:
e6:41:db:74:e0:34:03:f8:70:52:8b:cd:cb:fc:40:5b:c5:ef:
01:39:a4:c4:b2:d8:bc:34:64:af:fd:e6:9f:9e:16:a2:8d:c8:
3b:92:48:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:04:05 2025 by rpki-client