Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft
File: O3WyLEecFpumBZHB3tRCDFNoHbo.mft (raw, json)
Hash identifier: 9HcLJErLLWvLuV917mFB56nzD/tRg3KPzGLCXMqwfH0=
Subject key identifier: 61:99:02:73:76:5A:15:69:FB:91:24:EC:D4:1D:1E:65:A3:BC:E2:4A
Authority key identifier: 3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA
Certificate issuer: /CN=3B75B22C479C169BA60591C1DED4420C53681DBA
Certificate serial: 3631
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft
Manifest number: 3631
Signing time: Sat 26 Apr 2025 11:07:19 +0000
Manifest this update: Sat 26 Apr 2025 11:07:19 +0000
Manifest next update: Sat 26 Apr 2025 17:07:19 +0000
Files and hashes: 1: O3WyLEecFpumBZHB3tRCDFNoHbo.crl (hash: VRDKRHMBxJsrXeFmb3ZrgPalRGR6ujLrubCvVHImvrg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13873 (0x3631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B75B22C479C169BA60591C1DED4420C53681DBA
Validity
Not Before: Apr 26 11:07:19 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=61990273765A1569FB9124ECD41D1E65A3BCE24A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:70:c3:51:fc:45:f6:3c:42:41:cc:6c:c6:
f6:3b:10:a6:ea:4b:8e:1f:ba:3c:c1:40:0d:be:20:
29:e6:25:c3:ca:cb:c3:76:ac:d2:25:66:29:21:46:
eb:59:9c:04:f5:69:a0:fa:f2:b1:89:20:64:58:c2:
5e:33:bd:dd:5f:69:6b:f3:f7:a0:79:01:9f:40:cc:
9f:b1:20:ea:97:1e:de:52:46:dc:2e:5b:be:59:77:
e1:1f:85:64:97:c8:5c:de:26:9e:79:50:a4:42:c7:
b0:05:b2:6a:7b:80:97:0a:00:0d:8a:64:a3:cd:8d:
5e:18:f5:6c:3b:7f:6f:27:5f:27:5d:42:99:f6:d9:
96:9e:11:90:35:96:31:9f:a2:5f:4a:3b:20:19:c6:
33:3a:1a:0e:4a:73:79:e5:75:75:9e:4c:9b:c7:c5:
d2:ae:88:5a:d9:98:aa:2b:6d:50:19:c7:bd:86:11:
fa:c6:05:27:aa:e9:15:56:e6:61:7c:63:07:53:6f:
5b:9c:99:0c:db:35:a5:78:b7:e9:1e:2f:6b:1d:6d:
e7:7a:ae:54:ba:24:fe:8a:ed:ad:90:21:a2:f7:15:
11:11:cb:4a:53:ba:79:08:99:27:53:ae:af:d2:aa:
e7:cb:25:89:ec:b1:50:fe:77:31:69:09:85:6a:6f:
07:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:99:02:73:76:5A:15:69:FB:91:24:EC:D4:1D:1E:65:A3:BC:E2:4A
X509v3 Authority Key Identifier:
keyid:3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:c4:0c:66:f9:6b:fc:27:30:4b:34:3a:72:40:bd:7d:0c:12:
e0:d9:a5:3a:ee:61:42:ad:53:5c:25:2e:e5:45:cb:56:fe:49:
0a:bd:b7:e1:8d:e7:37:e4:fc:db:e6:d7:dc:c3:38:8d:bd:49:
90:65:f8:3f:14:db:ac:ce:2b:f2:c6:a0:68:a9:d8:c7:5f:b6:
71:03:1b:8c:18:63:06:b0:a1:7b:c1:53:da:4e:77:a6:1c:ac:
2f:6e:ac:2e:c3:31:b2:88:b0:04:73:46:a3:d1:45:de:86:4b:
4f:bd:63:9d:51:4a:3b:5d:ae:90:98:c4:d5:10:81:d5:84:da:
69:82:90:4b:cd:af:1d:74:86:75:c5:87:b4:b2:08:b5:a9:71:
59:8b:46:fe:31:21:cc:92:e2:c9:71:84:62:2a:97:32:81:8b:
46:40:3b:29:4d:d8:e3:cb:be:99:45:19:47:3c:a2:61:dd:03:
d9:70:3b:6a:41:35:ce:da:f9:e8:45:27:7c:52:ac:72:e8:94:
1a:f7:e5:00:f5:89:c5:da:4f:53:0c:80:d1:2c:86:d3:70:3e:
be:ee:20:f3:4c:98:fa:00:c8:3b:ab:a8:16:d8:44:03:6f:cb:
b1:46:8e:d2:7c:96:af:6e:e5:8c:07:ca:d0:f7:d4:13:ee:9e:
4f:a2:f3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:11:54 2025 by rpki-client