Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3306/NFr5ZypcY4yBe6_vTb251zV1P08.mft
File: NFr5ZypcY4yBe6_vTb251zV1P08.mft (raw, json)
Hash identifier: 2TAXS0HrJ9qeV6BbEn8afB1M1ZT7Q7XIIO+Ejc1nYW8=
Subject key identifier: 55:3A:0F:78:47:27:75:D8:D1:98:A4:B1:E2:F4:D2:84:9F:34:9B:4E
Authority key identifier: 34:5A:F9:67:2A:5C:63:8C:81:7B:AF:EF:4D:BD:B9:D7:35:75:3F:4F
Certificate issuer: /CN=345AF9672A5C638C817BAFEF4DBDB9D735753F4F
Certificate serial: 03CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NFr5ZypcY4yBe6_vTb251zV1P08.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/NFr5ZypcY4yBe6_vTb251zV1P08.mft
Manifest number: 03CC
Signing time: Fri 31 Jan 2025 15:27:49 +0000
Manifest this update: Fri 31 Jan 2025 15:27:49 +0000
Manifest next update: Fri 31 Jan 2025 21:27:49 +0000
Files and hashes: 1: NFr5ZypcY4yBe6_vTb251zV1P08.crl (hash: YlcWCJO8R6nB6CgHbWrpNv4HGkU+fczuYgpZWoHL6CA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 972 (0x3cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345AF9672A5C638C817BAFEF4DBDB9D735753F4F
Validity
Not Before: Jan 31 15:27:49 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=553A0F78472775D8D198A4B1E2F4D2849F349B4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b0:76:c3:5a:82:84:e4:a3:05:d7:fa:db:53:
89:f1:9d:0f:10:f1:34:db:4b:92:0d:a8:2f:45:8d:
c7:4c:a8:1d:9a:72:66:aa:d1:61:2d:48:e9:3b:87:
12:70:9e:79:31:e4:0e:54:12:43:99:a9:b8:4a:69:
47:71:4f:51:21:dd:15:47:4a:10:f7:69:2a:27:bd:
9b:dc:9f:26:a8:a6:8f:40:50:3f:34:5e:df:15:c8:
42:ac:f6:63:79:39:b0:6f:de:92:d8:6b:f4:03:b4:
30:f3:ad:3f:29:15:b4:8c:0b:bf:15:f6:41:21:08:
13:0b:90:73:86:69:2f:23:d0:b4:af:3c:18:b5:b6:
33:56:d7:26:44:fe:9d:63:7a:4e:af:1d:f5:14:58:
8a:8e:d6:9f:79:40:ea:77:be:32:2a:35:de:ce:ed:
05:8d:9d:ca:4a:47:e7:c5:ba:80:b6:68:17:fd:78:
8b:d3:67:07:62:0c:c4:e7:a6:6d:06:40:da:46:d7:
8d:18:c9:67:74:1b:1a:f4:4c:d1:52:4b:d3:f9:9f:
d9:30:d5:bb:e6:ff:43:1a:2c:23:0a:33:20:26:b2:
b1:43:70:b0:76:4f:f0:11:f7:ee:a8:3a:b1:81:8c:
ad:bc:99:6e:a1:a3:32:1c:ad:2c:62:53:54:91:3f:
88:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3A:0F:78:47:27:75:D8:D1:98:A4:B1:E2:F4:D2:84:9F:34:9B:4E
X509v3 Authority Key Identifier:
keyid:34:5A:F9:67:2A:5C:63:8C:81:7B:AF:EF:4D:BD:B9:D7:35:75:3F:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/NFr5ZypcY4yBe6_vTb251zV1P08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NFr5ZypcY4yBe6_vTb251zV1P08.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/NFr5ZypcY4yBe6_vTb251zV1P08.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:bd:f0:18:80:e8:61:33:3a:b5:55:37:54:dd:85:fd:54:93:
c5:75:a1:29:35:63:74:10:a3:30:11:79:bc:18:c5:7d:60:77:
4e:c9:3d:05:25:5d:77:8b:88:73:42:1b:79:a0:6c:d8:6b:4f:
0c:7b:78:21:47:fd:f9:d4:08:57:57:3f:d1:ce:3d:cf:10:bf:
eb:dc:75:f0:4f:21:f1:59:2b:5f:ff:44:fa:58:54:73:01:38:
0e:8e:18:ba:1f:67:f0:ab:17:1d:81:79:f9:29:22:a9:a2:35:
1c:51:be:78:ff:19:21:b4:ce:a2:7a:da:7a:55:13:7a:6f:ee:
8b:af:7c:3b:45:d3:11:43:5f:4e:13:77:ce:7c:12:a1:32:02:
74:72:62:33:2e:5b:87:38:cd:fc:71:d2:a8:f1:25:e2:12:80:
e6:00:c3:e9:95:db:a6:a5:b4:5c:f0:f2:a1:a0:6c:24:0d:cb:
34:30:4f:63:25:69:0b:a3:25:04:27:43:44:f9:ad:df:34:b7:
f1:ef:7c:7c:3a:db:f3:e2:7f:74:37:3b:f2:b9:ef:26:92:b6:
68:79:36:b0:a5:c6:43:7a:8f:4a:82:14:51:c9:83:1c:d7:48:
6b:74:50:57:52:13:73:7c:23:1f:70:8d:85:8b:af:47:d4:6d:
fe:b5:d6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:31:12 2025 by rpki-client