Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3364/8t0vOax2MXqpGoijKYFSZy0mmP8.mft
File: 8t0vOax2MXqpGoijKYFSZy0mmP8.mft (raw, json)
Hash identifier: PTP5ljn1lXiTg3swUFvXltUL8583sFmoonu9qfk+8PI=
Subject key identifier: BC:1D:E0:F2:57:AE:40:40:64:D1:61:95:D1:83:49:B7:3A:68:FC:52
Authority key identifier: F2:DD:2F:39:AC:76:31:7A:A9:1A:88:A3:29:81:52:67:2D:26:98:FF
Certificate issuer: /CN=F2DD2F39AC76317AA91A88A3298152672D2698FF
Certificate serial: 2B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8t0vOax2MXqpGoijKYFSZy0mmP8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3364/8t0vOax2MXqpGoijKYFSZy0mmP8.mft
Manifest number: 2B
Signing time: Thu 24 Apr 2025 06:06:16 +0000
Manifest this update: Thu 24 Apr 2025 06:06:16 +0000
Manifest next update: Thu 24 Apr 2025 12:06:16 +0000
Files and hashes: 1: 8t0vOax2MXqpGoijKYFSZy0mmP8.crl (hash: tTc5YI1PIuv+AjWlTfJPehr2K8SOaNB7g+/DjPMjpwc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2DD2F39AC76317AA91A88A3298152672D2698FF
Validity
Not Before: Apr 24 06:06:16 2025 GMT
Not After : Apr 14 03:10:51 2026 GMT
Subject: CN=BC1DE0F257AE404064D16195D18349B73A68FC52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:ed:b9:12:e7:6a:74:6c:49:2e:4f:66:58:
e6:92:f4:4b:f6:de:f4:a6:2e:4e:31:ec:e4:f8:77:
32:f1:e0:50:31:a1:ea:ed:6d:38:d1:2f:19:bd:6a:
e9:a1:8f:29:6a:91:8e:50:a9:ca:f2:96:2f:6c:44:
3b:e3:f0:c0:f5:10:94:6e:66:f3:44:a1:3b:da:14:
b5:7e:fa:50:2e:17:dc:28:a9:25:9c:2f:9f:47:51:
ee:ba:cc:53:ea:40:c8:c2:10:f3:a9:4e:87:87:f4:
0a:21:b3:75:d9:b4:1b:1d:f2:63:50:f1:24:dd:3d:
b5:ee:37:a0:0c:3d:29:37:18:88:cf:76:83:ae:a8:
a5:ab:51:28:43:8b:65:08:1c:61:da:11:33:eb:f5:
10:24:c1:41:41:da:79:6b:2e:0b:d6:94:3d:c6:52:
e9:20:d5:ce:01:31:a4:f7:b4:06:e9:61:13:04:20:
2d:04:1b:99:22:e6:ee:d1:09:83:51:c4:6f:ec:df:
df:99:25:de:91:a3:d9:4d:96:24:2f:54:b7:40:7c:
17:eb:d2:2e:84:6f:b0:fe:8f:26:79:75:8e:55:39:
44:e1:7a:fb:f7:8b:30:78:4f:d6:21:b2:33:7b:94:
93:b0:32:7f:c6:95:91:f0:94:06:3c:0a:c9:1c:1a:
c8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1D:E0:F2:57:AE:40:40:64:D1:61:95:D1:83:49:B7:3A:68:FC:52
X509v3 Authority Key Identifier:
keyid:F2:DD:2F:39:AC:76:31:7A:A9:1A:88:A3:29:81:52:67:2D:26:98:FF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3364/8t0vOax2MXqpGoijKYFSZy0mmP8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8t0vOax2MXqpGoijKYFSZy0mmP8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3364/8t0vOax2MXqpGoijKYFSZy0mmP8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:8f:96:e8:0e:1b:76:eb:4d:59:d7:4a:d7:55:39:f1:0b:18:
9e:88:12:bc:3c:d9:88:eb:73:d6:10:9e:b4:57:ce:ff:44:28:
77:0f:3a:98:ba:46:fc:09:a0:49:2f:95:3d:f4:88:bb:b0:49:
7b:f3:cc:f7:a7:4a:ec:49:b4:8e:90:68:ff:ad:99:c4:04:d1:
95:eb:83:d4:f5:92:64:2b:a9:c3:d1:76:18:bd:8e:bc:77:85:
17:e9:e1:5a:22:bb:bd:d9:88:de:69:45:82:8f:4b:86:f0:21:
fb:1c:18:a0:2e:7a:a2:7b:39:75:45:e8:f4:83:b9:9e:65:85:
43:e1:96:36:69:7f:f9:a4:2b:7a:00:77:4f:23:1a:a7:bb:35:
52:9a:25:e6:b9:db:fc:4b:d6:3f:b9:c0:12:78:ad:56:b4:0b:
32:96:22:ab:73:36:de:52:cd:d7:c8:7d:c7:93:d2:1b:f4:91:
4a:32:26:f0:e2:5b:34:f5:f3:18:96:ea:8c:3b:60:31:1e:67:
a0:8e:3c:dc:fc:79:8c:67:9e:8f:bb:f2:9a:73:7a:94:23:db:
72:7b:d1:29:45:1a:04:f6:80:90:4b:07:dd:ed:71:92:0b:c8:
29:85:c1:f5:da:69:86:9e:5b:d5:9e:ff:f7:c1:7c:2f:ce:e5:
6a:05:2c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:01:38 2025 by rpki-client