Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3263/jKUFZzApbEGdb3sKeKTpEenwOXY.mft
File: jKUFZzApbEGdb3sKeKTpEenwOXY.mft (raw, json)
Hash identifier: rSiWW159eBSz4ZyGqRgJ1YrJq38mBs/stdS+Pl/DTcs=
Subject key identifier: 53:88:12:A4:94:9E:01:F7:D5:AA:7F:6B:68:BC:C7:FF:E2:06:8F:97
Authority key identifier: 8C:A5:05:67:30:29:6C:41:9D:6F:7B:0A:78:A4:E9:11:E9:F0:39:76
Certificate issuer: /CN=8CA5056730296C419D6F7B0A78A4E911E9F03976
Certificate serial: 0710
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jKUFZzApbEGdb3sKeKTpEenwOXY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/jKUFZzApbEGdb3sKeKTpEenwOXY.mft
Manifest number: 0710
Signing time: Fri 31 Jan 2025 15:27:12 +0000
Manifest this update: Fri 31 Jan 2025 15:27:12 +0000
Manifest next update: Fri 31 Jan 2025 21:27:12 +0000
Files and hashes: 1: jKUFZzApbEGdb3sKeKTpEenwOXY.crl (hash: DqM7/ivH+EbrqFfUFcnMrmjA6EpzBcznJebRvx60nAc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1808 (0x710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CA5056730296C419D6F7B0A78A4E911E9F03976
Validity
Not Before: Jan 31 15:27:12 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=538812A4949E01F7D5AA7F6B68BCC7FFE2068F97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:b9:e2:92:e1:2f:2a:32:f0:dd:c6:89:d8:
91:11:c7:e2:d3:50:b0:c3:30:ce:8b:48:ce:1f:36:
6c:19:5d:85:a8:8a:c7:e6:1e:ee:26:04:a0:e4:1e:
62:d8:07:02:1c:53:e0:9a:ad:01:93:06:94:88:c9:
58:e6:b7:1b:5d:b8:aa:3a:1e:e4:03:7d:c7:cf:fd:
3b:30:bc:d6:ef:95:68:d6:e4:13:cb:8e:c7:1b:08:
dd:88:b5:13:11:5a:f0:6e:3d:b8:70:43:cf:ec:1c:
94:f3:25:ba:f6:92:f9:dc:dd:09:17:78:e2:f3:67:
12:94:e3:80:cf:63:57:5c:c1:87:4f:cf:ef:67:ea:
75:15:85:17:79:05:40:f8:24:f1:f5:f3:a0:5d:25:
0d:88:99:0c:24:41:01:15:9f:8f:ca:ef:f5:5a:b8:
b9:ef:d9:70:d5:27:67:b4:aa:a7:f8:29:59:49:fb:
c2:9e:31:b7:10:cc:c3:8c:8b:80:b5:62:09:2d:32:
e7:7a:ec:b4:b9:32:7e:7a:2d:85:6d:e3:7f:8a:54:
cd:b4:ea:72:28:3a:3f:ec:b1:11:04:73:36:b3:83:
53:5e:fe:e9:f6:53:eb:83:06:7b:01:d0:2b:cc:8f:
8d:03:23:8d:f4:33:19:52:f4:61:a1:fb:48:83:93:
5d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:88:12:A4:94:9E:01:F7:D5:AA:7F:6B:68:BC:C7:FF:E2:06:8F:97
X509v3 Authority Key Identifier:
keyid:8C:A5:05:67:30:29:6C:41:9D:6F:7B:0A:78:A4:E9:11:E9:F0:39:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/jKUFZzApbEGdb3sKeKTpEenwOXY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jKUFZzApbEGdb3sKeKTpEenwOXY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/jKUFZzApbEGdb3sKeKTpEenwOXY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:73:96:e5:64:6f:88:08:b4:d3:51:09:34:3a:9d:68:9c:5f:
c6:f9:97:6c:24:29:da:a1:0d:7a:d0:01:23:d1:ff:b0:c3:49:
1e:20:ee:12:19:e1:e0:e7:ae:fd:c1:99:55:6b:30:bd:ba:76:
59:68:10:fb:dd:2f:75:a5:bd:44:27:1b:0c:b3:c0:bf:a9:09:
0a:51:db:54:9b:36:9c:db:1b:c3:5f:60:72:b2:c6:33:af:e0:
1c:48:5d:20:3d:a2:e1:42:62:96:a8:d4:9d:b5:14:85:be:fd:
8e:54:2a:09:d8:36:15:99:94:f3:c9:34:f7:d4:ae:d8:25:60:
3f:f9:20:17:ac:a1:3c:99:e7:ef:51:8a:07:5b:62:03:e1:39:
97:53:83:a9:19:06:e4:17:58:1a:41:bd:c8:2f:57:d1:ec:8a:
ec:75:89:ae:da:db:36:eb:d2:26:ea:81:a7:07:18:03:62:0d:
9b:2a:1e:c7:13:e6:5a:ef:e1:cd:a2:41:09:2f:28:5d:5e:62:
5b:41:4f:0f:10:63:dd:01:0b:58:52:b2:7b:e9:c6:21:a3:47:
e2:fb:04:cb:5a:d8:f7:56:91:7a:9b:b8:a9:27:35:4c:02:7f:
82:04:b8:fb:8d:12:70:87:ae:9a:fe:25:ca:86:4f:4b:02:03:
ac:8c:c7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:20:28 2025 by rpki-client