Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft
File: yZxuUM1dFkZVP-VT5x64vu2RUKo.mft (raw, json)
Hash identifier: 56yTQBGy/0ISIZlutdHKS/McoEUs5g2OvObcHLI6Rzw=
Subject key identifier: 67:72:01:A6:62:82:30:D0:D6:33:B6:E4:1A:A4:EA:04:F1:27:C1:8D
Authority key identifier: C9:9C:6E:50:CD:5D:16:46:55:3F:E5:53:E7:1E:B8:BE:ED:91:50:AA
Certificate issuer: /CN=C99C6E50CD5D1646553FE553E71EB8BEED9150AA
Certificate serial: 1DF7
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft
Manifest number: 1DF7
Signing time: Sat 17 May 2025 17:40:08 +0000
Manifest this update: Sat 17 May 2025 17:40:08 +0000
Manifest next update: Sat 17 May 2025 23:40:08 +0000
Files and hashes: 1: yZxuUM1dFkZVP-VT5x64vu2RUKo.crl (hash: q2OxDqCAncEFRoqFG5IBVPjvHAwyaxmKBxl3oM6272g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7671 (0x1df7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C99C6E50CD5D1646553FE553E71EB8BEED9150AA
Validity
Not Before: May 17 17:40:08 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=677201A6628230D0D633B6E41AA4EA04F127C18D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:88:c7:7c:50:81:f4:7e:df:0b:fd:f4:0e:76:
24:1c:17:31:c1:3b:df:fe:96:84:35:f6:a5:1d:83:
b6:df:67:63:94:53:eb:e3:1d:3b:a7:24:4b:c3:df:
09:fe:24:f4:f1:9e:27:7c:36:75:2b:ed:54:62:e9:
66:e3:14:7b:db:a7:d9:9e:1d:27:06:b7:9b:c7:84:
e7:95:6c:78:68:d8:e9:ce:51:41:52:79:f2:1c:f1:
72:90:57:2b:05:a5:99:3a:ed:a9:e1:bb:3e:9b:f9:
ff:da:34:39:a5:d2:56:fb:64:14:74:3f:86:cf:97:
7e:fb:89:38:af:f7:98:55:e1:d5:e3:61:5b:78:7e:
70:0f:9c:81:3b:37:fd:5e:db:9e:5f:e3:e8:0b:8f:
88:0b:d8:b4:fb:4e:22:96:cd:e2:d3:9a:7d:bd:8b:
8c:83:d7:e4:c3:7d:0a:e0:09:e8:fa:18:e0:db:f3:
8f:64:4b:21:e9:fa:57:88:21:82:de:6d:77:0f:fb:
cb:69:12:d8:bf:87:7b:02:fc:77:b5:7a:ec:d0:93:
c6:01:00:a6:a7:5a:bd:7d:fa:e4:ec:32:b7:47:e6:
c0:42:f3:ef:df:84:9d:d0:1d:54:ff:51:9a:8e:d5:
5c:0d:f8:d7:11:b3:c2:16:a5:27:0d:01:3e:d2:c1:
ca:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:72:01:A6:62:82:30:D0:D6:33:B6:E4:1A:A4:EA:04:F1:27:C1:8D
X509v3 Authority Key Identifier:
keyid:C9:9C:6E:50:CD:5D:16:46:55:3F:E5:53:E7:1E:B8:BE:ED:91:50:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:72:bd:0e:09:12:99:ce:25:eb:bf:68:fb:39:0e:c7:7d:a8:
4f:e6:21:c4:71:63:ba:25:75:e1:c9:5b:f6:9f:b8:81:2a:f0:
16:2a:c0:d3:2a:5e:f2:82:1f:55:1d:91:1d:8a:c1:fa:3b:28:
7c:72:06:ff:a5:99:68:ac:1a:ef:e5:c8:74:7a:a9:b9:2b:ae:
4e:eb:02:b6:4f:ae:40:11:71:55:48:0e:23:53:35:16:84:da:
94:48:0a:58:1d:ff:f7:3f:e0:f8:00:a4:e7:34:88:a0:e0:e2:
51:b7:02:9e:14:48:ba:8a:ae:f8:a0:77:9b:b5:84:fe:1d:9a:
03:c4:16:36:0e:67:db:7f:85:eb:70:3e:b4:49:e2:34:d3:18:
ab:64:ee:42:13:e4:99:cc:a7:56:b6:f9:a0:15:99:40:92:5c:
8c:09:67:d9:89:51:7b:35:19:21:b9:df:c7:b0:67:fb:3b:8a:
2d:eb:af:0f:12:f3:cd:16:da:e2:d1:d0:cc:06:e6:62:1a:c8:
53:db:ae:e0:54:1f:ae:75:c3:f6:e3:80:2b:02:20:a9:e1:ae:
7b:38:9e:c9:fa:56:e4:48:5b:c7:9f:b5:6b:10:a8:e6:32:98:
3f:4f:8c:5e:cb:04:47:2a:d3:76:48:75:1a:b1:2c:b4:77:31:
80:3b:54:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:44:03 2025 by rpki-client