Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/73/pA1lo5gglIcI0bteqCt6TVTUS4U.mft
File: pA1lo5gglIcI0bteqCt6TVTUS4U.mft (raw, json)
Hash identifier: NW97HiOykrFhQfpVYaZsRph5H7jyF61m319g3yUmJ74=
Subject key identifier: BD:60:D2:80:CD:32:92:12:5E:67:AF:B5:5C:77:08:FE:5B:F3:E7:B4
Authority key identifier: A4:0D:65:A3:98:20:94:87:08:D1:BB:5E:A8:2B:7A:4D:54:D4:4B:85
Certificate issuer: /CN=A40D65A39820948708D1BB5EA82B7A4D54D44B85
Certificate serial: 2AA1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pA1lo5gglIcI0bteqCt6TVTUS4U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/pA1lo5gglIcI0bteqCt6TVTUS4U.mft
Manifest number: 2AA1
Signing time: Sun 18 May 2025 03:39:05 +0000
Manifest this update: Sun 18 May 2025 03:39:05 +0000
Manifest next update: Sun 18 May 2025 09:39:05 +0000
Files and hashes: 1: pA1lo5gglIcI0bteqCt6TVTUS4U.crl (hash: 09yjzR5f/U+g1lmcC+UwT+EyeD9qT3JIGO+xrfwFcV8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10913 (0x2aa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A40D65A39820948708D1BB5EA82B7A4D54D44B85
Validity
Not Before: May 18 03:39:05 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=BD60D280CD3292125E67AFB55C7708FE5BF3E7B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2d:20:01:54:ae:bf:a5:82:f7:7f:e3:e4:b0:
97:16:a8:27:c2:a5:53:50:9c:04:0c:a9:3e:f1:68:
49:8c:36:fb:73:04:13:0b:6f:f2:e9:e9:3f:b6:c0:
c3:ca:90:92:63:e0:65:ce:a4:1c:4d:27:5d:c8:cd:
1b:7c:3c:99:b1:c6:f2:bb:a4:f3:5f:b5:7a:7b:53:
a5:2f:e8:59:8b:04:8d:90:c0:4c:1f:30:24:2c:a9:
99:2f:c7:e1:5d:01:e1:8f:dd:cc:04:35:a8:77:b8:
78:5b:c6:61:70:72:91:94:16:6a:b5:15:7a:32:c3:
6f:af:d0:5b:7b:ca:f7:1e:bd:59:e1:cc:6e:fb:4b:
b4:f7:96:82:a6:8f:4d:a8:58:e4:76:86:58:3c:99:
35:87:1a:1e:69:a6:c7:c1:d8:32:56:04:10:a2:30:
5c:63:5b:a5:df:ee:55:aa:ee:d6:ca:79:80:e3:31:
fe:5c:a0:d7:bb:c6:5a:18:07:e7:97:42:58:07:63:
58:0f:c6:00:23:5f:f6:96:cc:d7:45:48:56:52:2f:
70:1b:b5:eb:8c:68:ec:1e:59:3f:00:14:37:72:5b:
e9:bd:2c:80:6b:a2:74:67:49:da:78:2d:62:95:0c:
10:59:65:a8:1a:d9:9d:38:a0:39:5a:4e:bd:bb:fc:
86:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:60:D2:80:CD:32:92:12:5E:67:AF:B5:5C:77:08:FE:5B:F3:E7:B4
X509v3 Authority Key Identifier:
keyid:A4:0D:65:A3:98:20:94:87:08:D1:BB:5E:A8:2B:7A:4D:54:D4:4B:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/pA1lo5gglIcI0bteqCt6TVTUS4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pA1lo5gglIcI0bteqCt6TVTUS4U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/pA1lo5gglIcI0bteqCt6TVTUS4U.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:36:38:0b:61:e3:ac:a8:e8:21:0c:66:9c:6d:51:96:97:6f:
74:89:89:ce:c5:64:98:39:21:a7:21:9c:c3:15:3e:1f:fd:8e:
8b:f3:d7:b9:6b:9e:be:c1:82:94:55:40:83:18:16:ef:c0:bd:
9c:f6:f9:9e:f6:0d:81:44:9b:5b:b7:8a:45:2e:be:2a:9d:f0:
a6:05:4a:73:31:8a:83:80:7f:bc:0d:6e:6b:52:a8:76:2b:ae:
01:e2:ea:ef:7b:5a:c8:68:65:02:7c:5a:86:52:5b:64:95:72:
12:24:6f:e7:30:8f:29:4f:7e:a4:31:64:dc:bf:59:fd:4a:00:
09:2d:58:44:28:30:91:77:67:b3:61:60:69:3b:cc:22:04:18:
ce:ac:32:d3:9d:ee:55:ba:e9:b0:57:8b:09:43:76:21:23:4c:
16:04:5b:73:13:9d:c3:2f:f5:af:f7:22:dd:3f:df:2a:cf:86:
28:47:fd:fd:14:c1:bc:80:c6:55:3a:78:2d:cc:3b:6c:30:6f:
ac:22:d1:90:8b:39:42:75:2e:9e:84:6c:43:d2:5a:a5:41:85:
dd:32:4a:a2:c9:2d:a1:23:4f:c7:de:01:ee:e1:2f:e8:b2:23:
24:f6:05:20:c7:a5:c4:3e:f8:d3:dd:69:ab:f9:1d:8e:a5:f5:
a7:27:a0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 06:23:20 2025 by rpki-client