Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3286/fnoIxQq5v7LbFff2L1wXNDC-NQo.mft
File: fnoIxQq5v7LbFff2L1wXNDC-NQo.mft (raw, json)
Hash identifier: K7HPMA68EN+RH/TL+nrDiBFxqGrY98BTcQBTfRkRraQ=
Subject key identifier: A6:06:0D:B1:9D:84:7B:5F:74:E8:92:5D:07:07:D5:82:2E:5B:5B:80
Authority key identifier: 7E:7A:08:C5:0A:B9:BF:B2:DB:15:F7:F6:2F:5C:17:34:30:BE:35:0A
Certificate issuer: /CN=7E7A08C50AB9BFB2DB15F7F62F5C173430BE350A
Certificate serial: 04CD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fnoIxQq5v7LbFff2L1wXNDC-NQo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3286/fnoIxQq5v7LbFff2L1wXNDC-NQo.mft
Manifest number: 04CD
Signing time: Fri 31 Jan 2025 15:24:41 +0000
Manifest this update: Fri 31 Jan 2025 15:24:41 +0000
Manifest next update: Fri 31 Jan 2025 21:24:41 +0000
Files and hashes: 1: fnoIxQq5v7LbFff2L1wXNDC-NQo.crl (hash: Uj1iLw/j7UenRXL1RrVbU1tvS61MkHhE0gNCbtuemuw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1229 (0x4cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E7A08C50AB9BFB2DB15F7F62F5C173430BE350A
Validity
Not Before: Jan 31 15:24:41 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A6060DB19D847B5F74E8925D0707D5822E5B5B80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4b:fd:11:14:f7:29:98:4e:f8:83:6f:0d:c7:
07:53:0c:40:c4:ed:67:af:6e:de:eb:50:94:65:9b:
d3:c4:82:46:1f:74:6e:d3:5e:bf:43:31:66:e8:ec:
20:50:2f:86:82:d1:e4:6f:a7:c6:7f:7b:c0:c2:d1:
32:7f:e1:43:19:cb:73:1b:6d:fc:ba:70:35:98:30:
e8:d9:da:5a:28:1c:d5:83:55:f9:f1:c3:de:21:9a:
1e:a3:e7:ca:9f:c1:37:e3:6d:e4:b4:ce:f2:1f:0c:
0e:43:24:5c:66:a3:32:3c:ea:bb:a9:b3:7a:08:37:
05:f8:99:15:66:1f:ff:0f:db:09:64:11:9f:73:50:
3a:6d:00:fc:c7:89:0b:a6:ce:b8:8e:54:f7:42:08:
47:93:70:1d:fa:8c:d0:0f:c0:e4:eb:d0:e7:bd:6c:
58:cf:51:a1:67:6d:a6:db:9e:ad:43:da:75:95:bc:
f9:25:7b:c3:50:1b:a1:41:cc:4d:b6:5a:63:db:1d:
3e:02:8e:8d:03:03:15:60:d1:4d:49:1d:4f:2e:50:
b7:64:36:50:b1:bb:7a:23:63:4b:9f:c8:54:f8:ed:
fc:dd:9d:cf:87:ee:f1:08:c5:0d:13:ff:fd:4a:d5:
10:68:8c:4f:f7:2c:0a:09:d0:2b:eb:a2:65:51:07:
10:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:06:0D:B1:9D:84:7B:5F:74:E8:92:5D:07:07:D5:82:2E:5B:5B:80
X509v3 Authority Key Identifier:
keyid:7E:7A:08:C5:0A:B9:BF:B2:DB:15:F7:F6:2F:5C:17:34:30:BE:35:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3286/fnoIxQq5v7LbFff2L1wXNDC-NQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fnoIxQq5v7LbFff2L1wXNDC-NQo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3286/fnoIxQq5v7LbFff2L1wXNDC-NQo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:72:06:f1:dd:02:e3:31:42:cd:2a:05:c8:50:a4:14:93:29:
63:f2:02:98:92:40:12:a5:f8:18:13:b8:8a:e7:fa:a9:76:74:
4d:e4:78:ab:7b:66:31:20:5c:b9:5d:d4:47:6b:e8:7c:c6:0d:
fc:5f:4e:06:9d:65:f9:00:52:0f:2f:6a:2d:8d:e3:79:6d:39:
4f:5d:0b:fa:21:8c:8a:9f:3c:42:d0:3a:7d:cb:b5:cd:2c:1d:
a1:f9:8b:b0:3d:28:46:28:c9:f4:4c:a5:16:2f:80:3a:0e:95:
99:35:b5:05:78:af:d3:c1:3b:52:9e:fa:a5:2f:d2:b8:f0:a2:
1e:33:c2:2d:04:4b:ca:a0:10:77:0b:2c:ad:83:19:8d:75:e6:
aa:ef:9d:0d:58:38:f4:df:e8:30:71:36:42:3f:98:f1:19:90:
88:0e:a2:7e:fb:3f:ec:2a:e1:a0:3e:7c:bb:b3:e5:83:a8:32:
d3:95:25:53:cc:d1:22:a6:3a:c5:2f:17:a2:57:b4:53:08:98:
d8:22:f2:d8:78:7b:a2:d0:d9:65:55:2c:5b:0d:ed:66:47:cb:
9b:a9:55:2b:a3:59:8e:71:d0:36:f0:e4:24:d0:6e:49:e0:64:
8d:e0:1b:67:ed:37:c4:25:0c:8a:7c:21:26:1f:05:3f:4a:6a:
4b:e8:f7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:02:50 2025 by rpki-client