
Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3308/3rMZTsQ4n1H6jsKq0pzBMaQEcdk.mft
File: 3rMZTsQ4n1H6jsKq0pzBMaQEcdk.mft (raw, json)
Hash identifier: IK5fgh2uKZ6sr3SHHKJFkjFSLAQ7kycggsKQHd7gq4U=
Subject key identifier: F3:77:E0:72:07:6F:57:EE:23:A9:61:F1:2B:C1:80:66:D0:7E:BF:9D
Authority key identifier: DE:B3:19:4E:C4:38:9F:51:FA:8E:C2:AA:D2:9C:C1:31:A4:04:71:D9
Certificate issuer: /CN=DEB3194EC4389F51FA8EC2AAD29CC131A40471D9
Certificate serial: 034F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3rMZTsQ4n1H6jsKq0pzBMaQEcdk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3308/3rMZTsQ4n1H6jsKq0pzBMaQEcdk.mft
Manifest number: 034F
Signing time: Fri 31 Jan 2025 15:25:50 +0000
Manifest this update: Fri 31 Jan 2025 15:25:50 +0000
Manifest next update: Fri 31 Jan 2025 21:25:50 +0000
Files and hashes: 1: 3rMZTsQ4n1H6jsKq0pzBMaQEcdk.crl (hash: LI0D/Y6wgX0PaedAPeI1OoATs9sWary6txjlHExReU4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 847 (0x34f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEB3194EC4389F51FA8EC2AAD29CC131A40471D9
Validity
Not Before: Jan 31 15:25:50 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F377E072076F57EE23A961F12BC18066D07EBF9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:d8:af:10:a3:44:a7:e8:75:a7:97:ab:72:
88:98:d0:5d:ff:1a:2a:df:f6:d3:69:be:f5:a2:1a:
86:a3:e4:ba:ef:ab:78:d8:4f:e7:0d:00:f0:8f:58:
14:52:5d:4b:8d:9e:e4:f8:1e:7c:44:01:24:17:3f:
05:50:3a:f8:2c:14:f8:e9:a5:2e:8c:4d:94:b9:6a:
92:79:3d:3e:1e:cd:97:41:88:54:10:de:23:b4:bd:
e4:62:75:37:89:18:93:85:b1:4e:28:8b:55:eb:86:
58:fc:a1:b1:f2:52:c5:a6:62:b8:9c:ef:fe:f1:10:
08:96:e7:1e:a8:30:e3:d3:20:89:b5:15:ce:4b:df:
9b:c2:a5:8e:27:ad:30:20:44:02:84:37:2f:8a:3a:
e3:85:f5:5e:24:39:25:f5:ec:00:7e:99:96:99:bb:
96:e9:62:db:6d:0c:0d:e3:cd:d0:4e:0e:ba:96:c7:
14:11:2a:dc:b1:6c:6b:da:36:0e:d6:d6:f0:70:8a:
20:35:49:9c:38:99:71:39:92:ba:3f:5b:e8:f6:f6:
04:e4:04:1e:7f:fa:12:a7:53:22:ad:2f:85:10:d2:
34:ef:aa:28:da:43:13:0b:52:22:92:b0:81:6a:b3:
33:63:31:eb:e2:80:c8:49:a0:57:6b:c3:39:1a:ff:
f4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:77:E0:72:07:6F:57:EE:23:A9:61:F1:2B:C1:80:66:D0:7E:BF:9D
X509v3 Authority Key Identifier:
keyid:DE:B3:19:4E:C4:38:9F:51:FA:8E:C2:AA:D2:9C:C1:31:A4:04:71:D9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3308/3rMZTsQ4n1H6jsKq0pzBMaQEcdk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3rMZTsQ4n1H6jsKq0pzBMaQEcdk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3308/3rMZTsQ4n1H6jsKq0pzBMaQEcdk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:63:94:8c:40:60:99:93:d4:bd:60:6a:34:ca:cf:61:57:b4:
7e:ad:e4:bd:40:ba:63:e0:5f:2a:1f:44:ce:c2:84:c0:79:30:
a2:0e:36:8f:6e:1b:d1:f6:98:87:ef:3f:de:fd:3c:96:e8:4e:
42:88:6b:6b:83:15:81:58:88:c9:36:b8:8f:9a:5e:5d:af:2f:
e7:9d:53:3b:a6:1b:a5:a4:12:d0:30:ad:b0:30:7a:83:0f:43:
7b:66:cf:3b:0e:6d:77:3b:b2:c7:72:d5:3b:df:1a:36:b4:ee:
73:ed:5e:e5:cd:0f:1f:ae:65:6e:32:f5:65:4d:19:23:cc:4e:
46:12:78:71:93:6d:7d:32:9c:48:43:b8:e1:dc:07:ed:b1:17:
56:1c:94:c9:a8:4d:23:48:93:fd:e9:74:46:f3:b2:92:e5:ab:
c6:36:2b:3f:8b:44:3d:08:b4:88:f3:9e:c5:9b:58:41:8f:06:
b7:01:de:72:2c:09:5a:44:54:9b:09:d1:73:d6:7b:db:14:3f:
b0:54:b5:53:1e:85:70:5e:d9:41:cc:06:c2:37:81:40:d8:fc:
6c:16:91:be:df:24:16:61:c6:1d:6e:31:e2:e1:5b:d2:f9:ce:
f0:8c:31:93:2a:4c:aa:8d:ae:cf:20:be:b4:67:68:36:b6:e2:
d4:77:88:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:00:21 2025 by rpki-client