Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3285/qmXpFa-Nrt6rqnw2bEzO5KHBslA.mft
File: qmXpFa-Nrt6rqnw2bEzO5KHBslA.mft (raw, json)
Hash identifier: /MNNBi3BGrM+clccz/yE7cuhILXL9iZQtnCDwO5NIeQ=
Subject key identifier: FE:DB:A2:61:8B:07:11:BE:BA:19:8E:77:E5:CB:4B:8D:7D:50:54:CB
Authority key identifier: AA:65:E9:15:AF:8D:AE:DE:AB:AA:7C:36:6C:4C:CE:E4:A1:C1:B2:50
Certificate issuer: /CN=AA65E915AF8DAEDEABAA7C366C4CCEE4A1C1B250
Certificate serial: 04E4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qmXpFa-Nrt6rqnw2bEzO5KHBslA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/qmXpFa-Nrt6rqnw2bEzO5KHBslA.mft
Manifest number: 04E4
Signing time: Fri 31 Jan 2025 15:27:29 +0000
Manifest this update: Fri 31 Jan 2025 15:27:29 +0000
Manifest next update: Fri 31 Jan 2025 21:27:29 +0000
Files and hashes: 1: qmXpFa-Nrt6rqnw2bEzO5KHBslA.crl (hash: t6ZRuwNZjARRIjKvTWaCqaVis0ygY5lUnIj8sjaWr5w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1252 (0x4e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA65E915AF8DAEDEABAA7C366C4CCEE4A1C1B250
Validity
Not Before: Jan 31 15:27:29 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FEDBA2618B0711BEBA198E77E5CB4B8D7D5054CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:4b:48:5e:48:2a:c8:f8:21:ab:d5:43:b2:
23:06:38:ca:a1:5f:19:7d:9f:4e:7b:43:85:be:b5:
16:0d:ed:a3:39:ec:94:66:15:4e:bc:7f:49:9c:28:
d0:a4:51:00:64:da:a9:f7:9d:c9:5e:a8:f4:58:61:
ca:d4:19:9b:6e:20:04:c6:87:d6:64:98:a1:b7:77:
78:a8:78:26:11:3a:e0:08:d1:83:a5:0e:92:7a:32:
a5:6e:2b:d5:9d:42:63:d4:12:a2:b1:dd:43:1a:a6:
f6:3f:63:6a:90:c2:a2:72:e5:16:da:7d:b3:94:45:
11:7f:81:f2:fd:ea:b6:d2:07:16:f1:c6:53:b9:a6:
a8:a2:08:1f:77:2b:d8:bc:51:42:fa:3e:50:78:ae:
d5:a0:75:9a:e6:5d:ae:cf:cf:d7:9e:bb:84:11:55:
86:b5:9d:f8:7f:61:00:af:11:69:78:85:8a:e8:a4:
1e:77:db:fa:3b:70:80:58:b9:48:c5:6b:67:be:6c:
db:04:b2:22:f5:fe:c4:f1:e2:ce:ff:0f:03:df:fb:
a8:8c:7b:8a:90:02:9f:b4:cb:59:30:59:07:36:b4:
30:68:0d:4e:84:9f:18:c5:f0:0d:96:61:cb:7a:ac:
e4:7f:b5:f2:7a:4f:a4:06:6f:9f:65:99:78:b8:e7:
98:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DB:A2:61:8B:07:11:BE:BA:19:8E:77:E5:CB:4B:8D:7D:50:54:CB
X509v3 Authority Key Identifier:
keyid:AA:65:E9:15:AF:8D:AE:DE:AB:AA:7C:36:6C:4C:CE:E4:A1:C1:B2:50
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/qmXpFa-Nrt6rqnw2bEzO5KHBslA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qmXpFa-Nrt6rqnw2bEzO5KHBslA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/qmXpFa-Nrt6rqnw2bEzO5KHBslA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:69:a8:fb:d6:df:24:25:02:aa:ec:e7:88:5e:00:ab:fa:e9:
85:d3:89:72:b6:db:51:17:bb:df:98:41:c2:cd:e2:2c:78:26:
71:42:c0:2b:44:c4:8d:37:27:35:85:46:8e:a0:ce:98:d1:51:
ae:92:8f:31:cf:a6:8a:1b:3d:c8:27:4c:24:db:21:ce:57:f2:
5d:75:f1:c5:6f:96:02:c4:e1:20:c2:67:89:79:a1:c0:39:0f:
d0:cc:d1:8b:f7:e0:49:38:3b:81:d1:b1:80:68:39:ee:bd:94:
35:ef:8e:27:26:7c:87:d2:bd:63:87:98:2a:68:f8:66:98:6f:
e7:98:29:23:9c:38:f3:ca:7c:b9:39:97:8f:85:73:99:1f:66:
e6:43:3f:a9:c4:75:3e:43:21:58:b1:7d:d2:6c:16:51:b8:62:
1b:7b:7d:36:74:45:b8:2f:9d:bb:6d:cd:74:80:19:49:e4:8b:
8a:9f:e2:71:f5:8f:0e:d5:43:35:69:db:66:41:5f:62:5b:fb:
72:da:25:cf:1f:ba:26:08:d6:55:b6:61:66:f0:35:cd:21:a8:
47:89:14:aa:06:15:14:38:f7:48:2a:b7:5e:e2:cb:d7:e7:a2:
51:ee:90:31:a6:55:3f:70:0b:94:6b:5d:79:ee:df:44:f4:8e:
a6:b7:2e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:22:26 2025 by rpki-client