Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.mft
File: dLHNkLnEHIANH1u3AQiWQC4auU4.mft (raw, json)
Hash identifier: maPOUuwgl1K9VF9LkWtfUiSzj62jbFWiS34GgJFPwWU=
Subject key identifier: B0:54:D2:70:E7:FB:43:E0:C7:77:B3:3D:79:CA:A9:F9:0E:52:26:B0
Authority key identifier: 74:B1:CD:90:B9:C4:1C:80:0D:1F:5B:B7:01:08:96:40:2E:1A:B9:4E
Certificate issuer: /CN=74B1CD90B9C41C800D1F5BB7010896402E1AB94E
Certificate serial: 0128
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dLHNkLnEHIANH1u3AQiWQC4auU4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.mft
Manifest number: 0128
Signing time: Fri 31 Jan 2025 15:28:31 +0000
Manifest this update: Fri 31 Jan 2025 15:28:31 +0000
Manifest next update: Fri 31 Jan 2025 21:28:31 +0000
Files and hashes: 1: dLHNkLnEHIANH1u3AQiWQC4auU4.crl (hash: saPPunHh4VA7/oWh4U1ikfHxre7NHzPZ8722Jm5XysQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74B1CD90B9C41C800D1F5BB7010896402E1AB94E
Validity
Not Before: Jan 31 15:28:31 2025 GMT
Not After : Dec 3 07:29:30 2025 GMT
Subject: CN=B054D270E7FB43E0C777B33D79CAA9F90E5226B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:0f:2d:e4:fc:fd:40:e6:c9:69:06:2c:d0:
63:f2:39:94:44:ab:77:3a:54:18:e1:c0:8b:d4:20:
b5:d0:43:40:59:34:7a:aa:f6:39:9f:1e:33:db:12:
ee:50:c0:ca:13:fc:45:b1:1d:b7:34:16:6d:80:c6:
5d:34:23:6d:aa:00:3b:ec:a7:1a:3c:5c:ac:75:3b:
a9:01:17:f5:1f:18:2e:25:84:b9:d7:6b:4e:9c:10:
87:af:01:0b:e7:59:73:8c:28:a9:50:67:22:9a:cd:
72:96:01:0c:11:76:26:c0:92:aa:9b:34:5d:30:1e:
39:13:38:e1:1c:c6:1c:6e:11:34:f4:ad:4a:e1:13:
04:5e:12:53:7d:59:9c:7f:06:60:84:25:be:29:49:
ae:e5:d2:fe:0c:5d:57:0b:7a:ed:33:47:1c:a8:ce:
ef:03:5a:09:66:d1:a3:61:45:fa:d1:16:80:84:6d:
04:bf:e8:8f:a1:7a:70:d2:a9:96:dc:48:df:2b:b5:
04:a6:94:f3:4f:30:bb:68:5c:f0:06:6b:8b:88:4f:
60:80:e3:8a:b7:ee:8e:d7:88:58:0a:65:12:73:ae:
a1:65:8b:b6:03:f7:c9:08:1c:e7:93:51:38:98:0c:
1d:ef:03:ac:63:26:e3:fd:e3:36:8e:25:6d:83:1f:
50:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:54:D2:70:E7:FB:43:E0:C7:77:B3:3D:79:CA:A9:F9:0E:52:26:B0
X509v3 Authority Key Identifier:
keyid:74:B1:CD:90:B9:C4:1C:80:0D:1F:5B:B7:01:08:96:40:2E:1A:B9:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dLHNkLnEHIANH1u3AQiWQC4auU4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:94:e5:3f:3e:4f:2a:fd:d6:c8:93:17:7f:d6:74:69:b8:15:
9b:76:14:86:ef:36:4b:8c:55:ed:91:66:57:59:74:10:40:cc:
8b:92:76:2b:bd:09:94:19:2c:4b:95:bd:7a:ed:9f:53:cc:4b:
1e:be:d2:4a:73:0a:98:15:2c:df:af:50:4c:95:80:5d:5b:5f:
7b:a4:54:11:4b:44:b8:ae:2f:c9:b4:35:99:57:f5:f0:52:af:
a8:99:93:ed:24:c4:71:5d:8e:4a:17:9a:53:2f:b7:ba:82:f2:
27:4e:ff:50:dd:df:45:87:f0:75:d8:89:7f:26:cc:6e:a1:19:
f7:39:ea:cf:3f:f4:86:5e:46:5e:e5:37:fd:aa:65:70:c6:43:
99:d5:c1:d9:ba:39:55:5d:8f:0c:b9:f4:5c:4e:48:b0:40:3e:
54:4b:d8:a6:39:b4:04:ab:4e:86:67:de:77:4b:aa:a0:88:50:
2f:98:76:9a:d4:5c:17:a4:ef:57:f5:bd:86:51:c1:0a:11:8d:
aa:c1:d8:76:c1:7a:03:3f:61:41:7d:8d:29:d7:1b:5c:22:de:
90:c0:0a:8d:78:dc:06:ca:2c:56:bf:b9:97:df:d6:00:25:ce:
9c:58:20:fb:a3:7a:c1:c8:8f:c9:76:f0:b2:c5:45:54:39:70:
c2:56:c4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:19:33 2025 by rpki-client