Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3294/V9fgeB2zyP-T6Dnqsn4DX09EurI.mft
File: V9fgeB2zyP-T6Dnqsn4DX09EurI.mft (raw, json)
Hash identifier: VEodI3MWIvpGK9WzlYYzEZbdYUNQ19AFNMJi+s2ivhw=
Subject key identifier: 13:39:57:F9:74:E1:0B:EC:24:65:6C:FE:1F:9C:21:33:1D:81:13:62
Authority key identifier: 57:D7:E0:78:1D:B3:C8:FF:93:E8:39:EA:B2:7E:03:5F:4F:44:BA:B2
Certificate issuer: /CN=57D7E0781DB3C8FF93E839EAB27E035F4F44BAB2
Certificate serial: 046C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/V9fgeB2zyP-T6Dnqsn4DX09EurI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/V9fgeB2zyP-T6Dnqsn4DX09EurI.mft
Manifest number: 046C
Signing time: Fri 31 Jan 2025 17:24:12 +0000
Manifest this update: Fri 31 Jan 2025 17:24:12 +0000
Manifest next update: Fri 31 Jan 2025 23:24:12 +0000
Files and hashes: 1: V9fgeB2zyP-T6Dnqsn4DX09EurI.crl (hash: QVZDCXw+upOkLKDXUNqSF09/sYZKzQsGzwiApmk9Jns=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1132 (0x46c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57D7E0781DB3C8FF93E839EAB27E035F4F44BAB2
Validity
Not Before: Jan 31 17:24:12 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=133957F974E10BEC24656CFE1F9C21331D811362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:02:b1:02:a9:f2:44:90:32:6c:97:73:a6:
d0:02:8c:12:19:88:81:8b:72:c2:e0:25:c4:d1:d9:
c0:a6:6e:ab:5f:aa:c0:7c:8a:ce:52:5f:be:4c:09:
f1:64:c5:49:75:87:fb:b3:32:4f:d5:6b:e7:58:7f:
68:83:dd:63:97:77:51:b4:f8:2a:b6:b3:84:b8:ee:
d1:67:06:da:e2:aa:2b:88:ff:ce:f3:ba:dc:34:b1:
a6:f5:04:44:ae:f7:8c:93:00:50:23:67:69:d4:c7:
ee:51:ac:ff:e9:9f:c5:4e:f3:c8:e0:ec:c0:3e:8c:
a8:64:79:fa:a8:9f:e5:11:65:44:1d:75:c3:6c:58:
ae:12:35:94:5b:58:d7:cd:26:b4:e1:e6:93:fa:41:
a0:2c:31:f7:7f:bb:24:f5:a6:e4:b0:70:a1:3e:9e:
a6:a0:19:6d:b1:06:86:4a:fa:de:83:91:ee:6c:a6:
73:92:3d:ca:18:fe:73:49:fc:f2:4c:bd:92:4b:a2:
90:45:d1:85:84:c0:16:57:dc:3b:82:71:69:db:66:
c1:63:0e:65:05:21:5d:fd:80:fe:23:f6:c1:b0:d5:
99:56:16:a3:b4:e5:ae:07:9b:d6:15:7e:2f:99:d5:
51:ad:a9:56:17:f6:ae:fc:15:81:a2:25:1f:29:71:
2f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:39:57:F9:74:E1:0B:EC:24:65:6C:FE:1F:9C:21:33:1D:81:13:62
X509v3 Authority Key Identifier:
keyid:57:D7:E0:78:1D:B3:C8:FF:93:E8:39:EA:B2:7E:03:5F:4F:44:BA:B2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/V9fgeB2zyP-T6Dnqsn4DX09EurI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/V9fgeB2zyP-T6Dnqsn4DX09EurI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/V9fgeB2zyP-T6Dnqsn4DX09EurI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:ec:0a:25:43:78:d8:f2:d8:10:6e:47:d4:c1:72:63:31:31:
25:20:2d:f5:ae:50:3c:78:b7:ac:29:9b:59:ec:ec:9e:2d:ae:
14:4d:47:1a:7f:11:ee:eb:ad:04:20:7c:84:a8:27:fb:25:da:
ee:5a:d5:8c:41:fd:40:c6:36:49:ff:9e:b4:c6:68:54:21:1a:
a1:d8:25:91:b5:1f:63:af:30:fa:13:60:2a:7e:5d:99:4f:66:
f0:a4:3b:1b:92:30:b3:b4:fa:9b:44:11:15:ea:3e:0e:ad:a0:
d2:af:cd:fb:f5:2d:28:a4:86:a7:7b:08:45:94:83:b7:2a:a2:
af:65:2b:cd:f9:54:0d:f8:77:3f:cf:1a:cf:7a:5e:40:8d:c2:
b1:a5:e7:df:f4:f7:aa:c4:b5:8c:ed:b1:07:59:9a:b0:3f:57:
a8:c3:cd:2d:d0:d7:9d:55:22:67:a9:d6:40:9a:25:db:1d:5f:
fe:51:9d:81:21:d4:1d:7e:40:df:40:23:c1:04:c0:ae:6d:db:
f3:84:e4:9c:b5:d2:9f:2e:4e:45:8c:32:a8:5a:02:3f:79:11:
3b:a1:5b:2f:2f:35:74:64:fd:d7:a0:1e:98:1c:e3:4c:0a:64:
03:e9:e3:38:f8:32:a3:2c:61:88:5d:d3:08:cb:da:b7:a3:76:
bb:91:1e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:49:44 2025 by rpki-client