Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3332/oSxs0hrGVXPbWxQ4_6vayraf5iM.mft
File: oSxs0hrGVXPbWxQ4_6vayraf5iM.mft (raw, json)
Hash identifier: xYRfp6KuXSS2/R4gqt69sOdFJobEANbMaFTg6MyVppE=
Subject key identifier: 3F:DB:5E:8F:A3:C5:11:FB:A2:D7:6C:6F:0A:3D:F4:9A:7B:4D:47:66
Authority key identifier: A1:2C:6C:D2:1A:C6:55:73:DB:5B:14:38:FF:AB:DA:CA:B6:9F:E6:23
Certificate issuer: /CN=A12C6CD21AC65573DB5B1438FFABDACAB69FE623
Certificate serial: 0147
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oSxs0hrGVXPbWxQ4_6vayraf5iM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/oSxs0hrGVXPbWxQ4_6vayraf5iM.mft
Manifest number: 0147
Signing time: Fri 31 Jan 2025 15:28:35 +0000
Manifest this update: Fri 31 Jan 2025 15:28:35 +0000
Manifest next update: Fri 31 Jan 2025 21:28:35 +0000
Files and hashes: 1: oSxs0hrGVXPbWxQ4_6vayraf5iM.crl (hash: zMpjGBSmPChBRfZvp4yIRGUsB02dn1cT4mjTFDVftWg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A12C6CD21AC65573DB5B1438FFABDACAB69FE623
Validity
Not Before: Jan 31 15:28:35 2025 GMT
Not After : Nov 27 00:59:02 2025 GMT
Subject: CN=3FDB5E8FA3C511FBA2D76C6F0A3DF49A7B4D4766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d3:fc:88:e3:33:99:53:0e:7f:db:76:02:ae:
a9:d3:ae:60:28:96:a3:6d:cd:90:4d:c7:03:c9:a0:
b2:f0:18:ca:1d:b2:58:d7:f7:fc:c4:91:53:ce:24:
72:d3:b0:36:22:96:cc:a7:c1:29:2d:5a:d6:23:07:
10:f9:e0:9a:9e:14:96:c5:ef:f1:b5:c2:e7:3d:63:
b2:9d:91:84:49:e6:0f:66:2c:5f:e9:1e:51:ae:ae:
18:37:bf:5e:63:a1:ab:df:0d:c2:fe:2d:7f:48:50:
fb:05:4f:9d:df:5a:07:63:2e:ab:0d:c1:3b:c2:5a:
df:bb:96:6e:2d:0f:2a:ac:9d:7c:0b:3c:75:f1:1c:
7f:59:4f:17:d4:c7:32:f6:e2:d5:cc:15:f1:9f:46:
25:f6:b3:62:44:7a:16:5c:26:a9:c4:83:30:16:fa:
34:c7:33:04:77:f2:fd:a7:b8:9d:f1:7e:b5:af:1f:
a9:24:55:bf:a5:43:9c:ca:d0:ce:e6:ae:52:2e:0b:
20:28:81:88:73:fe:18:31:c4:9e:22:4d:49:33:b1:
5a:ae:3f:ea:99:f9:a1:e6:24:48:73:ec:16:44:cf:
1e:a9:dd:ae:a8:62:82:ac:ed:f3:ea:58:7b:11:90:
e8:ea:9f:c6:08:4d:e7:ab:87:00:6a:7d:13:f8:f0:
9d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DB:5E:8F:A3:C5:11:FB:A2:D7:6C:6F:0A:3D:F4:9A:7B:4D:47:66
X509v3 Authority Key Identifier:
keyid:A1:2C:6C:D2:1A:C6:55:73:DB:5B:14:38:FF:AB:DA:CA:B6:9F:E6:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/oSxs0hrGVXPbWxQ4_6vayraf5iM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oSxs0hrGVXPbWxQ4_6vayraf5iM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/oSxs0hrGVXPbWxQ4_6vayraf5iM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:25:01:61:dd:f1:84:53:18:79:a6:0d:2d:69:19:db:dd:a2:
b8:d9:3a:e1:c4:f5:f2:eb:a4:d4:05:19:e2:7a:bd:6d:c3:94:
f0:36:21:f5:bc:34:86:4c:4a:29:8a:bb:18:de:96:bd:32:66:
06:f8:b7:e0:2c:61:1f:ed:4e:1c:a2:f4:d6:69:1d:4f:45:c2:
fb:39:d2:50:4c:a0:bf:c5:9a:f9:d7:02:17:7c:2c:57:46:54:
99:93:76:3f:e3:ab:34:8b:a8:0e:28:c1:56:e9:f5:12:e1:61:
63:f4:5b:16:94:e7:9a:46:d7:db:83:9f:e8:1f:c4:c7:c2:05:
b7:18:ba:73:25:97:4c:26:ee:24:75:27:86:45:83:74:bc:13:
30:60:93:d4:85:11:b1:eb:2f:2c:73:05:7f:e1:60:1c:c5:9c:
0c:dc:0a:ad:39:1d:b9:0f:40:03:dd:a2:10:de:44:da:36:f8:
08:77:45:58:4e:20:b3:2d:8a:4e:30:4e:9b:64:06:6f:4c:f4:
c9:31:81:75:7d:0d:11:f7:5e:89:3f:cd:0a:b5:17:fa:ad:fa:
7d:f5:93:cf:0c:ad:d0:0c:56:29:f0:79:39:ac:ae:66:a9:ef:
21:a1:10:91:31:d0:ae:6a:6e:37:4d:cb:0e:d7:71:17:84:bc:
64:83:3d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:39:25 2025 by rpki-client