Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1377/kcYSZfVhPXbfBBk7-onPLVTfiVE.mft
File: kcYSZfVhPXbfBBk7-onPLVTfiVE.mft (raw, json)
Hash identifier: o/+i0Wd+pGfuXOElM4Ez0lITolRD6Ky4qLXK8jUiSAc=
Subject key identifier: 06:DA:D7:47:B6:C9:43:4A:7A:0F:8A:BE:A2:2D:78:BF:E2:B4:45:3B
Authority key identifier: 91:C6:12:65:F5:61:3D:76:DF:04:19:3B:FA:89:CF:2D:54:DF:89:51
Certificate issuer: /CN=91C61265F5613D76DF04193BFA89CF2D54DF8951
Certificate serial: 1079
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kcYSZfVhPXbfBBk7-onPLVTfiVE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1377/kcYSZfVhPXbfBBk7-onPLVTfiVE.mft
Manifest number: 1079
Signing time: Tue 17 Sep 2024 07:17:18 +0000
Manifest this update: Tue 17 Sep 2024 07:17:17 +0000
Manifest next update: Tue 17 Sep 2024 13:17:17 +0000
Files and hashes: 1: kcYSZfVhPXbfBBk7-onPLVTfiVE.crl (hash: v830YFtq1b8CcW97ltim5LvwYOgQy90L7/IhX2Qcb9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4217 (0x1079)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C61265F5613D76DF04193BFA89CF2D54DF8951
Validity
Not Before: Sep 17 07:17:17 2024 GMT
Not After : Sep 17 08:06:57 2024 GMT
Subject: CN=06DAD747B6C9434A7A0F8ABEA22D78BFE2B4453B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d7:54:87:fa:14:9c:90:1e:21:dd:22:ed:12:
6e:f2:4b:90:b8:36:b2:57:ea:c3:04:a5:1c:9e:5c:
98:e3:d8:63:f8:9d:a7:71:7d:cf:f7:3a:43:32:2f:
b8:fc:22:74:11:be:a0:db:e4:54:b9:9f:3d:db:26:
d6:e6:1c:3a:e2:b8:77:86:23:c1:f4:98:bb:18:82:
d8:9f:41:f0:e8:2c:95:dc:81:89:be:44:41:af:52:
52:f9:06:95:62:8c:b1:be:4f:b0:da:dc:f9:37:20:
71:e9:8d:30:98:40:2d:b2:40:86:09:d2:ed:d8:76:
d4:7c:a2:00:e3:c4:0f:fb:4a:56:6c:a4:9e:33:2d:
3c:65:8e:42:a0:33:d5:e8:6b:a9:52:19:5e:b6:0e:
43:ae:f1:d2:a8:f9:92:41:90:4d:57:10:7e:0b:5b:
27:83:ff:41:58:7d:4a:df:79:f4:44:a1:5b:1d:33:
a0:0e:3f:78:17:96:11:9c:a5:f2:3d:b8:19:6d:97:
ed:0c:76:0d:7c:52:be:4f:be:83:6a:25:28:cb:11:
85:b2:ea:2d:b8:59:34:23:49:40:d7:33:90:8c:f5:
ce:bb:ed:41:e8:1e:bd:d9:51:87:28:ec:ff:e2:09:
53:a1:5b:a3:0d:44:a2:9c:8f:64:65:c4:7f:38:ff:
42:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DA:D7:47:B6:C9:43:4A:7A:0F:8A:BE:A2:2D:78:BF:E2:B4:45:3B
X509v3 Authority Key Identifier:
keyid:91:C6:12:65:F5:61:3D:76:DF:04:19:3B:FA:89:CF:2D:54:DF:89:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1377/kcYSZfVhPXbfBBk7-onPLVTfiVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kcYSZfVhPXbfBBk7-onPLVTfiVE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1377/kcYSZfVhPXbfBBk7-onPLVTfiVE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:ae:c9:79:e5:89:18:d7:34:46:80:7b:a6:53:26:6b:e9:63:
93:26:c4:99:cd:29:bb:fa:3b:21:30:64:e3:ad:ea:95:06:63:
9f:be:71:4e:52:65:90:d4:47:1f:b8:38:d4:77:75:69:cd:08:
5e:07:61:e7:a1:2f:87:51:70:9e:fc:28:09:90:37:a4:c0:1d:
8d:77:36:37:69:74:f1:8b:14:32:8c:67:8b:35:ae:d9:9e:12:
e3:7a:54:ea:c3:52:f7:71:77:99:c7:8e:02:1a:bb:e0:85:3c:
5c:4e:40:c8:77:cc:aa:f1:7f:e5:52:c0:88:1a:b7:93:e7:d1:
ee:e7:c7:cc:41:5e:0f:4e:9d:12:ce:16:6b:b1:d4:4e:a0:cf:
7c:14:f7:2c:85:8f:0c:06:4d:2c:8b:e9:0e:5c:88:43:e0:31:
fd:7b:e7:5c:9a:e7:20:e4:82:c3:eb:2d:af:d7:57:5c:c1:43:
ff:60:df:ec:a0:7e:b1:74:be:13:c6:a0:fe:11:8f:12:c8:46:
cc:2d:22:76:8e:bf:5d:46:ff:0c:e1:c0:a1:4f:e3:16:6a:00:
92:78:7f:73:fb:ca:a3:98:0c:7d:c5:bb:49:45:24:ad:33:b3:
79:b3:8f:ca:d2:d2:a3:55:51:4b:ec:32:10:2b:27:c8:bc:3e:
eb:29:83:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 01:35:07 2025 by rpki-client