Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3300/UUn4HVgYqKIsQqn3Cfqc0VS91XA.mft
File: UUn4HVgYqKIsQqn3Cfqc0VS91XA.mft (raw, json)
Hash identifier: 3/XcpUQBB/yKVBZWmG7ge7i4QoBZD/lPrV5gbp4fEuU=
Subject key identifier: CA:73:60:9C:B6:C5:E9:35:EB:2B:0F:D7:C6:5D:7F:E5:4E:D2:23:0F
Authority key identifier: 51:49:F8:1D:58:18:A8:A2:2C:42:A9:F7:09:FA:9C:D1:54:BD:D5:70
Certificate issuer: /CN=5149F81D5818A8A22C42A9F709FA9CD154BDD570
Certificate serial: 0439
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UUn4HVgYqKIsQqn3Cfqc0VS91XA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/UUn4HVgYqKIsQqn3Cfqc0VS91XA.mft
Manifest number: 0439
Signing time: Fri 31 Jan 2025 15:27:59 +0000
Manifest this update: Fri 31 Jan 2025 15:27:59 +0000
Manifest next update: Fri 31 Jan 2025 21:27:59 +0000
Files and hashes: 1: UUn4HVgYqKIsQqn3Cfqc0VS91XA.crl (hash: f+VZc2QbOwKjjqWeq4GLIucxr067F/uuW5g5/ZH4Ty4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1081 (0x439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5149F81D5818A8A22C42A9F709FA9CD154BDD570
Validity
Not Before: Jan 31 15:27:59 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CA73609CB6C5E935EB2B0FD7C65D7FE54ED2230F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:94:61:3a:8c:48:d9:7a:84:79:ed:3d:ae:
a2:3f:d1:d9:ba:6f:99:98:b0:60:7e:45:4f:d6:81:
ff:49:9e:01:d2:14:f6:31:a1:f8:f7:ab:93:2c:69:
0b:48:26:40:85:32:58:ca:1d:33:83:54:fd:22:6e:
9c:0d:ef:f9:4a:e3:86:a9:f5:6d:f1:13:9a:7e:b2:
73:fe:7d:1e:e4:db:84:c8:d3:de:7d:24:0a:5e:6b:
05:77:23:05:20:37:49:b8:85:4f:96:31:e7:0a:25:
6a:c8:8e:f0:c2:a9:38:49:bd:cb:f8:fa:eb:92:e1:
a6:88:67:2b:f2:0e:0d:eb:80:2f:4b:eb:44:40:d4:
11:ec:3d:e4:1f:93:67:69:bf:87:54:56:25:b0:4a:
ed:49:f8:e9:33:89:fa:07:ef:ab:a2:63:1d:f8:b8:
e2:9d:5c:1f:ea:1c:4f:f8:50:27:8f:71:3a:31:cd:
86:68:f7:ab:a8:ec:15:85:a0:5d:92:43:da:ac:0a:
cf:3b:5a:49:08:69:ba:57:44:b2:89:26:2a:eb:27:
8d:3d:50:38:8b:c5:20:76:1c:c9:59:26:f7:98:e5:
70:02:d2:1b:0b:49:8e:0b:28:93:cd:2e:d2:d8:dc:
00:35:8c:cd:3b:cf:2e:2e:bb:53:5e:fc:ff:0e:ff:
61:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:73:60:9C:B6:C5:E9:35:EB:2B:0F:D7:C6:5D:7F:E5:4E:D2:23:0F
X509v3 Authority Key Identifier:
keyid:51:49:F8:1D:58:18:A8:A2:2C:42:A9:F7:09:FA:9C:D1:54:BD:D5:70
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/UUn4HVgYqKIsQqn3Cfqc0VS91XA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UUn4HVgYqKIsQqn3Cfqc0VS91XA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/UUn4HVgYqKIsQqn3Cfqc0VS91XA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:fc:30:f2:cb:e3:15:61:c4:7f:9a:69:65:50:be:10:8c:78:
42:f0:e4:79:a8:3d:c6:c6:6e:9c:31:08:ba:b1:5e:48:09:dc:
69:d5:4b:6b:12:83:94:27:10:d3:3f:c4:e2:80:33:35:4b:d9:
43:3b:7f:7f:bf:9b:64:11:b1:c8:0b:dd:aa:13:5b:cf:5c:0c:
00:fc:e0:51:87:6c:b2:76:73:0b:1e:bd:d9:64:c4:a1:57:44:
75:0c:e2:71:92:54:47:9c:f2:e7:a4:d6:79:5f:6b:4e:1c:dc:
c4:93:c9:54:53:89:36:3e:d3:33:ef:fb:36:dd:b7:a9:b9:aa:
67:ce:ef:7c:2a:4b:12:01:d2:f5:69:f8:6d:cd:c4:11:e7:83:
f8:17:64:43:f8:0a:e0:e2:9e:fb:b7:cf:0c:16:b6:37:ed:a7:
6b:b7:54:93:47:91:8f:37:7d:db:d8:32:ee:d7:7d:a0:36:d6:
fb:cc:86:e4:f2:69:b8:a6:4f:da:ee:b5:6c:41:0e:7a:f7:d2:
42:58:38:b3:84:8d:e5:44:ce:c1:6d:f7:54:14:27:30:b6:d3:
0f:05:a2:8a:e8:20:d9:d6:fd:17:92:70:1c:4b:59:fc:11:db:
0c:95:e5:f5:e5:c1:05:68:06:11:50:92:6e:64:64:7d:69:67:
e6:2c:bf:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:38:08 2025 by rpki-client