Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3341/QZthcvWyvCKKx7p4s58CMyghqKg.mft
File: QZthcvWyvCKKx7p4s58CMyghqKg.mft (raw, json)
Hash identifier: Rxxq5fcAXj60LOGnrryTmL+3v6M5FUHEPP6dupD8+BQ=
Subject key identifier: 18:CB:0F:98:CA:04:AC:25:C7:1A:5C:E2:22:5B:38:C8:6D:85:10:90
Authority key identifier: 41:9B:61:72:F5:B2:BC:22:8A:C7:BA:78:B3:9F:02:33:28:21:A8:A8
Certificate issuer: /CN=419B6172F5B2BC228AC7BA78B39F02332821A8A8
Certificate serial: C5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QZthcvWyvCKKx7p4s58CMyghqKg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/QZthcvWyvCKKx7p4s58CMyghqKg.mft
Manifest number: C5
Signing time: Fri 31 Jan 2025 15:28:46 +0000
Manifest this update: Fri 31 Jan 2025 15:28:46 +0000
Manifest next update: Fri 31 Jan 2025 21:28:46 +0000
Files and hashes: 1: QZthcvWyvCKKx7p4s58CMyghqKg.crl (hash: zGeUUJq+h4UMD55tLxcIhBhwEAHPunXckTe60arT6P8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419B6172F5B2BC228AC7BA78B39F02332821A8A8
Validity
Not Before: Jan 31 15:28:46 2025 GMT
Not After : Dec 23 06:03:57 2025 GMT
Subject: CN=18CB0F98CA04AC25C71A5CE2225B38C86D851090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0d:5f:64:1e:37:c7:69:0d:8f:08:d7:81:7f:
1f:53:13:6f:8a:e9:d0:ca:24:ad:16:4f:9b:c7:d1:
60:2b:13:8f:ad:20:66:d6:4d:a1:26:1c:87:09:fa:
18:05:1b:40:21:92:7e:04:c2:d8:f2:ad:75:49:dc:
62:6d:f5:cd:de:be:81:d0:9b:1a:eb:2d:83:06:f7:
ba:10:d8:69:30:d0:bd:8e:54:a6:df:35:4a:30:cd:
5e:e5:49:8e:4a:07:7a:1e:23:0a:67:18:d7:0c:fe:
88:18:20:d7:e5:2f:43:62:3a:02:8f:4e:cf:7b:fc:
92:db:b8:ca:1b:3e:00:f4:a3:92:56:25:21:24:6b:
c2:5a:05:8e:ea:bd:b2:f9:a2:10:0b:57:cd:8e:ab:
24:8b:51:97:c3:dd:ee:d2:04:1f:79:f7:7c:05:f6:
67:e2:fd:c8:3d:85:cf:00:7e:f9:21:9f:d0:e5:c6:
f8:32:70:5a:ec:ed:83:8e:30:ce:32:59:b3:95:9d:
6c:7f:94:b6:b7:56:1c:41:51:de:27:29:bd:c0:39:
62:bc:e5:ca:7b:f8:72:af:aa:ea:74:73:73:49:81:
df:50:d6:b0:4c:d7:ef:85:a4:fe:72:9f:a0:7f:5c:
0a:a7:3d:cf:1b:aa:b7:3f:3d:7d:c5:f7:4d:d8:e1:
27:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CB:0F:98:CA:04:AC:25:C7:1A:5C:E2:22:5B:38:C8:6D:85:10:90
X509v3 Authority Key Identifier:
keyid:41:9B:61:72:F5:B2:BC:22:8A:C7:BA:78:B3:9F:02:33:28:21:A8:A8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/QZthcvWyvCKKx7p4s58CMyghqKg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QZthcvWyvCKKx7p4s58CMyghqKg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/QZthcvWyvCKKx7p4s58CMyghqKg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:cf:a7:fc:60:c6:7a:5f:b5:da:2f:5b:47:7a:75:6a:10:95:
bd:a6:97:af:23:ee:c0:49:38:d9:7d:13:5c:9c:c9:a2:f1:9d:
8f:dc:a0:f2:4c:cc:f7:1d:05:94:fb:14:b3:b0:fa:b9:a3:35:
5f:94:a6:da:30:bb:80:5b:ce:d4:1f:d6:54:60:62:ec:13:79:
e8:ba:80:6d:67:55:e2:9d:48:c5:aa:be:e7:c7:0a:1a:50:73:
46:4e:4b:44:a9:08:2d:3a:a7:5a:c9:a7:f6:22:93:a5:89:3e:
4f:c4:b3:1f:ca:99:bf:c5:85:21:e6:00:75:0a:a2:5b:67:3a:
f1:57:ba:b4:27:26:a5:6d:e5:36:18:e9:b1:06:ee:6f:69:de:
3f:e3:16:f9:31:87:6f:0f:14:93:e5:cd:9e:03:f3:03:11:2a:
f5:d3:23:b5:e7:19:1c:27:2e:cb:fe:c3:0d:50:6b:74:d4:4a:
a9:8f:f9:32:fe:51:a7:4d:f4:ce:ed:76:b2:5f:58:ee:1b:9b:
46:cb:31:6e:e6:5f:2e:68:78:9b:36:08:05:5f:41:48:10:d7:
1e:79:44:bb:44:8a:50:2c:db:90:f4:03:e9:8e:30:fb:59:68:
39:98:13:ca:b9:ad:61:f3:5b:97:64:8e:91:fe:02:2e:a0:91:
ae:3d:aa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:16:14 2025 by rpki-client