Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3361/jbFPZUPvPEVbsB1hyJB3FKsH_sM.mft
File: jbFPZUPvPEVbsB1hyJB3FKsH_sM.mft (raw, json)
Hash identifier: gCB11Q1sEqHYVE0eBWS6gzboDj3/N/mD5480zOcEaTE=
Subject key identifier: 5A:DF:6F:39:60:5F:CD:BF:E6:D8:7A:99:71:1F:D1:27:18:DA:4A:E6
Authority key identifier: 8D:B1:4F:65:43:EF:3C:45:5B:B0:1D:61:C8:90:77:14:AB:07:FE:C3
Certificate issuer: /CN=8DB14F6543EF3C455BB01D61C8907714AB07FEC3
Certificate serial: 2B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jbFPZUPvPEVbsB1hyJB3FKsH_sM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3361/jbFPZUPvPEVbsB1hyJB3FKsH_sM.mft
Manifest number: 2B
Signing time: Thu 24 Apr 2025 05:06:15 +0000
Manifest this update: Thu 24 Apr 2025 05:06:15 +0000
Manifest next update: Thu 24 Apr 2025 11:06:15 +0000
Files and hashes: 1: jbFPZUPvPEVbsB1hyJB3FKsH_sM.crl (hash: idcAE42w3Fzb9vPIe8eMbG0SCoGVcWNOEuVVcgWldhk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DB14F6543EF3C455BB01D61C8907714AB07FEC3
Validity
Not Before: Apr 24 05:06:15 2025 GMT
Not After : Apr 10 05:37:38 2026 GMT
Subject: CN=5ADF6F39605FCDBFE6D87A99711FD12718DA4AE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:52:40:4d:c3:77:21:d5:0b:44:84:37:f0:
45:f0:32:17:0f:a8:dd:ab:92:22:2b:13:0b:8f:eb:
6f:7b:6a:77:81:2b:e2:6e:41:0f:29:c6:24:a8:d1:
f8:dd:aa:ed:62:ec:a2:ef:0c:6c:ca:44:37:f5:9a:
f4:1b:95:18:79:e3:a7:2e:24:73:3f:3f:9a:f6:25:
31:3c:7c:c8:d1:a5:e4:34:f3:4a:29:f9:ab:e2:78:
54:01:d3:2a:54:b6:c2:fd:a8:8f:5b:2e:73:76:8f:
18:70:e9:10:36:26:b3:f8:0d:43:f8:c6:1e:48:93:
65:4e:96:d9:9f:b4:0d:f0:65:c8:69:14:34:f9:1d:
c6:35:67:20:9c:23:0e:97:c8:2c:db:60:ed:0b:0c:
26:ad:81:49:3e:ac:32:34:8a:fb:07:97:0c:07:c0:
34:03:10:0b:95:99:53:83:1e:2f:b7:a2:bf:9c:d6:
b3:27:6c:c3:d2:af:59:02:4e:92:9c:50:b4:fb:6a:
56:00:a7:2e:4c:26:bc:24:b4:f7:f2:0b:ef:4b:5e:
ae:28:d2:17:28:4e:d6:d9:cf:9c:5c:a8:45:9a:5c:
07:91:c5:bd:15:e7:5e:c9:ba:fb:40:2e:c9:d2:35:
96:84:0e:10:58:e0:83:e4:0b:1d:c6:54:e5:0d:39:
fc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DF:6F:39:60:5F:CD:BF:E6:D8:7A:99:71:1F:D1:27:18:DA:4A:E6
X509v3 Authority Key Identifier:
keyid:8D:B1:4F:65:43:EF:3C:45:5B:B0:1D:61:C8:90:77:14:AB:07:FE:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3361/jbFPZUPvPEVbsB1hyJB3FKsH_sM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jbFPZUPvPEVbsB1hyJB3FKsH_sM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3361/jbFPZUPvPEVbsB1hyJB3FKsH_sM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:54:df:04:bf:14:99:2d:61:01:e4:ac:c2:47:bd:41:09:76:
0f:e8:69:91:1b:bd:1d:67:7d:a4:0e:6a:ba:b3:ac:90:db:84:
26:de:4e:db:af:67:01:93:7f:26:8d:87:80:a9:32:9b:ba:e6:
f5:32:67:00:40:46:1d:c6:f7:df:74:83:0f:3e:19:d6:a5:91:
6f:8a:19:80:62:8c:9f:c1:13:50:3a:22:75:35:68:4c:36:57:
00:55:9a:a1:8d:a1:5a:5f:98:4d:af:f8:ff:77:6d:ec:fa:51:
03:9a:08:f7:2f:c7:ae:5f:ed:50:8c:13:57:9f:a7:d0:48:54:
2e:c4:fe:ad:a0:a7:e8:fb:9f:4d:be:6f:17:37:10:f4:25:ad:
99:40:7b:b7:db:9d:db:fb:13:07:27:f3:ed:f5:bf:6f:f0:2f:
49:eb:61:06:ba:68:f4:65:c4:45:39:9e:ce:90:37:ed:a5:37:
28:99:f2:57:aa:1f:1d:cb:ac:22:60:09:9f:b0:ce:d1:f0:02:
ea:58:43:44:ce:d8:e6:ed:63:a2:59:67:3d:2c:a2:c7:1f:af:
88:89:99:ed:b9:23:da:7c:5c:59:81:87:78:a5:88:c3:0a:ad:
b8:a7:5f:28:ea:3d:e1:a8:f9:72:8f:f8:95:f8:fa:8c:9e:d0:
fd:83:bd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:09:53 2025 by rpki-client