Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft
File: hPLNDLUaQjf34fOuhRnjzCZEi38.mft (raw, json)
Hash identifier: G9qOIQiSdFhav2D0FpVj+Y+EJRXsSRaQfrXlOKqweyg=
Subject key identifier: 45:D7:AF:E0:26:C8:57:0C:15:6C:22:E7:C7:BB:2B:A9:05:E9:1F:14
Authority key identifier: 84:F2:CD:0C:B5:1A:42:37:F7:E1:F3:AE:85:19:E3:CC:26:44:8B:7F
Certificate issuer: /CN=84F2CD0CB51A4237F7E1F3AE8519E3CC26448B7F
Certificate serial: 15A5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft
Manifest number: 15A5
Signing time: Sat 21 Jun 2025 06:45:12 +0000
Manifest this update: Sat 21 Jun 2025 06:45:12 +0000
Manifest next update: Sat 21 Jun 2025 12:45:12 +0000
Files and hashes: 1: hPLNDLUaQjf34fOuhRnjzCZEi38.crl (hash: aS6ROLXCNOlyG3WG0EsVz759d8NoN90z2zX4q4zQbhU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5541 (0x15a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F2CD0CB51A4237F7E1F3AE8519E3CC26448B7F
Validity
Not Before: Jun 21 06:45:12 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=45D7AFE026C8570C156C22E7C7BB2BA905E91F14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:81:29:9b:33:04:d8:e0:06:be:7b:f6:7f:
c6:b1:b8:45:75:d2:d8:ba:d8:83:ce:d8:e2:f7:e9:
30:9b:ba:8e:82:1a:4b:6c:f3:c2:11:24:d1:0a:d4:
42:b5:91:00:a8:ff:1c:0d:26:a7:74:21:dc:50:3e:
7b:5c:fe:01:d6:32:15:54:12:e5:08:02:19:4c:c1:
b2:04:ad:76:0a:35:04:a3:9d:37:f7:7e:66:a0:9b:
b5:08:a5:6d:66:65:97:57:3f:47:8c:03:59:db:55:
da:14:e5:84:43:00:91:be:e2:44:b5:cc:a9:30:7f:
5e:e6:25:fb:7d:89:ec:2d:b6:f1:f9:c1:dc:9b:b7:
da:d7:81:e5:d9:2e:a9:54:2f:8d:3d:bf:39:b6:e3:
a1:b7:4b:85:57:f4:87:ba:79:21:0d:62:9e:60:d0:
9e:fe:a6:8a:c2:04:22:aa:2b:8a:fc:41:dc:c9:48:
f5:74:fe:d8:25:73:d3:40:d9:f0:a1:1a:6a:7d:54:
f1:04:53:ea:bd:a2:48:4d:a8:3d:ad:bd:d4:1f:7d:
89:3d:51:70:7c:3e:ef:ef:b2:90:86:55:07:37:66:
f2:a8:17:9c:1d:93:41:5e:e4:1b:40:84:6a:87:fe:
68:02:df:a0:40:10:47:6d:39:c4:44:ce:53:2d:0e:
c8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D7:AF:E0:26:C8:57:0C:15:6C:22:E7:C7:BB:2B:A9:05:E9:1F:14
X509v3 Authority Key Identifier:
keyid:84:F2:CD:0C:B5:1A:42:37:F7:E1:F3:AE:85:19:E3:CC:26:44:8B:7F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3e:24:bd:b9:da:6e:9b:d0:73:45:b7:31:35:d8:a7:76:6d:
53:66:89:61:95:dc:18:fc:a2:f3:b8:7a:0b:ad:07:be:8c:31:
9d:15:55:52:42:36:28:74:a1:e5:68:b1:b8:eb:a4:49:f3:d6:
f6:ea:e1:fc:e8:f8:3b:35:9f:c9:08:70:45:15:14:c0:36:f6:
18:43:a9:3c:72:ab:74:51:d2:f9:16:c1:89:b3:4b:cc:ec:ed:
35:48:9c:bd:38:33:6f:e8:d8:27:e1:36:92:ca:15:42:22:ad:
40:e5:e3:aa:e9:76:1a:62:39:d7:0f:09:73:10:1b:ba:30:9e:
0d:7e:45:b2:0e:93:44:73:bf:8d:3c:89:f7:09:6b:2d:e0:f7:
a0:de:8e:e8:7b:a7:8d:4a:34:7d:ad:37:24:6a:2a:2b:de:61:
02:29:5d:d7:ac:1e:18:6a:05:ac:dc:16:33:f2:95:4f:72:f6:
81:a9:f7:28:e9:ed:44:f4:cc:1e:b3:22:54:e9:19:f8:c7:55:
3d:1e:eb:94:c2:b9:ca:16:4e:8e:3f:be:dd:10:f3:e6:04:45:
c0:4e:19:76:ff:06:20:dc:32:e9:6a:aa:3f:93:b0:3a:ee:d6:
5c:79:0f:70:dc:a1:9c:b9:72:a2:5e:2f:d3:93:f5:14:07:50:
11:e5:c4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 10:28:08 2025 by rpki-client