Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft
File: jm3DpYneR53ZjpODO_zBYddCgiQ.mft (raw, json)
Hash identifier: LqTeajcf3cvgQzCILW6LDQk/oxRaJy2VSivweUKkk74=
Subject key identifier: D7:5F:B0:66:20:B7:0B:A3:A0:FF:0F:4F:A2:32:9D:1A:AC:8F:21:31
Authority key identifier: 8E:6D:C3:A5:89:DE:47:9D:D9:8E:93:83:3B:FC:C1:61:D7:42:82:24
Certificate issuer: /CN=8E6DC3A589DE479DD98E93833BFCC161D7428224
Certificate serial: 1DD0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jm3DpYneR53ZjpODO_zBYddCgiQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft
Manifest number: 1DD0
Signing time: Sat 26 Apr 2025 13:10:10 +0000
Manifest this update: Sat 26 Apr 2025 13:10:10 +0000
Manifest next update: Sat 26 Apr 2025 19:10:10 +0000
Files and hashes: 1: jm3DpYneR53ZjpODO_zBYddCgiQ.crl (hash: ikCWKi8qw8h7rz/xTGw27wJMiC2xGGFv33J0opAJqNg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7632 (0x1dd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E6DC3A589DE479DD98E93833BFCC161D7428224
Validity
Not Before: Apr 26 13:10:10 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D75FB06620B70BA3A0FF0F4FA2329D1AAC8F2131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:83:79:5d:b6:9a:ea:98:0e:97:0d:79:e7:b8:
2b:a6:e9:eb:40:e9:2f:31:d5:3b:8f:4e:74:ce:64:
c0:8c:71:e7:75:d1:44:47:5b:88:d6:d8:32:2a:e6:
7c:56:0e:f3:a6:89:10:14:70:4d:fa:7f:9b:c0:26:
19:d7:c2:9a:c2:cf:74:26:90:25:69:0c:4a:26:63:
86:10:65:78:e9:60:7f:5e:61:10:75:cf:b6:b2:d7:
d0:72:52:5d:16:61:7d:00:be:18:f4:0d:04:ea:13:
89:9b:74:56:b7:c4:8c:20:81:27:ef:e6:e7:35:fe:
fe:3e:b4:c0:fa:1d:d1:d7:60:3c:56:1d:bc:b9:92:
44:47:27:a4:5a:12:9e:4f:c4:72:01:d7:be:48:ca:
43:a8:a0:19:4e:e6:07:a8:13:39:26:20:61:5b:ed:
6f:6d:a3:d1:da:64:5d:1b:6e:9d:dc:ba:b5:38:09:
a7:f4:49:a6:b0:49:3f:ef:57:81:0c:13:a8:2f:58:
50:38:45:90:74:3a:4b:5a:b3:f3:b3:01:05:e7:07:
01:85:24:71:76:f1:6a:37:36:d5:d1:3d:82:65:51:
c8:66:93:fa:12:7d:57:c7:a3:8c:86:e7:51:f9:73:
1f:ba:a8:db:d5:2a:10:d4:e6:dd:cd:e7:e4:8d:9b:
6e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5F:B0:66:20:B7:0B:A3:A0:FF:0F:4F:A2:32:9D:1A:AC:8F:21:31
X509v3 Authority Key Identifier:
keyid:8E:6D:C3:A5:89:DE:47:9D:D9:8E:93:83:3B:FC:C1:61:D7:42:82:24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jm3DpYneR53ZjpODO_zBYddCgiQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:f5:94:32:76:28:67:9a:3d:d4:35:c4:d2:0b:b4:ae:70:4c:
6b:24:ad:ae:06:7b:e9:dc:26:e2:e3:a3:cb:f4:bf:8f:ef:3f:
da:27:85:fe:6d:ee:ee:92:8b:d5:0a:98:58:9a:78:e0:6e:de:
3e:c0:f8:85:21:2e:9a:ce:bd:4a:79:8b:08:da:08:df:c4:11:
71:7c:01:de:37:94:38:fc:56:97:e5:54:f7:99:b7:33:f1:5f:
4c:89:ff:54:ea:5f:02:e8:ce:95:da:4a:ae:8f:b7:43:ea:d1:
61:0c:cf:57:39:03:1f:68:0a:50:e3:ab:9d:b7:86:87:71:4c:
25:5c:35:ec:e3:64:ea:58:8d:57:23:31:a4:a3:40:de:81:21:
3d:1e:51:d7:0a:82:63:50:23:19:c4:2f:f7:46:2d:ed:b5:16:
80:80:a4:82:fd:2a:56:bf:4c:af:6b:a3:99:8f:18:32:85:8d:
13:72:67:54:83:c3:57:af:ac:24:99:a7:6a:03:ae:ee:ca:74:
1b:96:6b:2f:9d:64:29:8d:ce:b0:ea:fd:50:55:6d:05:f3:60:
32:59:d9:bb:b5:64:fe:64:ad:0b:f7:36:d9:90:ff:ac:e1:56:
3a:21:12:da:05:92:23:59:96:28:77:b8:e3:ff:c8:49:fe:76:
a6:c9:41:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:26:23 2025 by rpki-client