Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3284/2P0wEmBd2oDHj4k1lkjXtICZzc4.mft
File: 2P0wEmBd2oDHj4k1lkjXtICZzc4.mft (raw, json)
Hash identifier: ThylSHBQH/gWU6lqRcgL6l9IxDDoJuQu0D29MAbimSo=
Subject key identifier: 51:3F:E2:43:95:62:FC:44:2E:73:87:27:B4:AC:8F:7A:27:88:F0:99
Authority key identifier: D8:FD:30:12:60:5D:DA:80:C7:8F:89:35:96:48:D7:B4:80:99:CD:CE
Certificate issuer: /CN=D8FD3012605DDA80C78F89359648D7B48099CDCE
Certificate serial: 0508
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2P0wEmBd2oDHj4k1lkjXtICZzc4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/2P0wEmBd2oDHj4k1lkjXtICZzc4.mft
Manifest number: 0508
Signing time: Fri 31 Jan 2025 15:27:17 +0000
Manifest this update: Fri 31 Jan 2025 15:27:17 +0000
Manifest next update: Fri 31 Jan 2025 21:27:17 +0000
Files and hashes: 1: 2P0wEmBd2oDHj4k1lkjXtICZzc4.crl (hash: nddqjr8rNXKJT0HGnYvApt6hK5vZOlxKR0xFau8ghlM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1288 (0x508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8FD3012605DDA80C78F89359648D7B48099CDCE
Validity
Not Before: Jan 31 15:27:17 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=513FE2439562FC442E738727B4AC8F7A2788F099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:40:83:c5:bc:c7:46:28:3c:7b:b5:44:b0:30:
ae:6f:b7:e1:af:2c:41:c0:34:11:57:ce:18:87:f5:
80:f4:5b:63:12:00:df:a3:9c:d9:8f:ac:9c:3f:4d:
05:0e:76:dc:9b:6f:c2:31:38:58:04:32:cd:85:f8:
5b:5b:4d:f9:8f:8e:6c:49:e4:77:b9:21:cd:93:dc:
5f:76:88:2d:ad:9b:bf:80:05:0d:86:b8:2a:b4:54:
45:b2:75:0a:70:de:3b:3f:f6:21:ae:e1:10:6c:62:
aa:44:51:8e:4d:07:0f:90:08:b6:36:49:f9:c3:9e:
38:8f:10:32:cf:e2:8d:a8:ea:69:af:f0:b6:f7:89:
be:f7:5f:50:65:44:0a:17:62:c8:29:d2:b2:30:fa:
98:a8:3e:da:62:71:74:c8:fa:76:73:26:07:43:29:
b9:e6:74:fb:bd:28:27:df:0f:d5:bc:b7:70:f7:8f:
27:93:ec:a9:1f:ad:5d:c8:2f:58:df:b2:37:6b:8c:
88:3c:ff:69:36:0d:48:8b:f5:a0:cb:23:11:e4:1e:
38:cf:df:f8:2e:40:85:5c:7e:ec:d5:e3:95:bd:64:
95:6c:7d:f6:31:e9:03:d0:1f:a0:d2:00:aa:16:a2:
74:bd:75:28:37:1a:af:5b:bf:81:a0:83:19:df:8d:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3F:E2:43:95:62:FC:44:2E:73:87:27:B4:AC:8F:7A:27:88:F0:99
X509v3 Authority Key Identifier:
keyid:D8:FD:30:12:60:5D:DA:80:C7:8F:89:35:96:48:D7:B4:80:99:CD:CE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/2P0wEmBd2oDHj4k1lkjXtICZzc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2P0wEmBd2oDHj4k1lkjXtICZzc4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/2P0wEmBd2oDHj4k1lkjXtICZzc4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b7:7e:93:c5:37:49:22:d7:32:e2:01:fa:8c:60:e7:40:76:
ef:96:60:18:38:ad:af:23:e8:d6:fd:81:f6:b4:7b:90:4e:01:
6d:3b:f7:ef:44:dc:30:3e:62:09:62:16:20:ce:28:9a:65:c4:
45:70:6f:2e:1f:37:ea:fe:de:97:86:96:f6:4e:43:8d:27:d5:
44:2e:ac:3b:e9:0d:3e:74:6a:f5:4d:24:6d:0d:6f:98:57:b4:
e7:57:cd:42:24:cd:c6:35:a7:57:ec:9f:18:cc:0e:06:18:2d:
09:4e:d3:aa:e0:2e:4d:03:ba:e4:c1:ab:5a:db:f9:92:5d:6d:
85:f2:cb:ef:fc:d5:cf:db:42:f2:8e:e2:8e:45:45:1e:67:c2:
9b:18:a8:f0:5a:81:8f:94:ef:60:3d:b7:b0:73:67:af:8c:17:
7b:0b:fb:8d:e9:ed:9d:89:f5:93:8d:49:0a:f3:d7:89:81:f8:
c5:6c:96:f2:da:28:8a:54:ec:b5:0f:97:8d:2f:3c:9a:48:c5:
22:82:e8:31:6b:58:ff:74:37:f0:8b:ec:75:12:5f:65:a5:5b:
c9:b5:b9:8a:e3:99:d4:cd:ef:85:64:56:05:a3:9d:80:ff:4e:
64:80:b3:01:51:57:67:b0:8f:8c:7c:0e:cb:f0:16:cb:d1:81:
0f:e1:8f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:17:33 2025 by rpki-client