Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2100/maW4vf7fXMZl0xiUSxszfKze1CA.mft
File: maW4vf7fXMZl0xiUSxszfKze1CA.mft (raw, json)
Hash identifier: E+pdcxFP8I3rGwpotY20doiaxsQ42UJqk8F7dTwkWGk=
Subject key identifier: 54:3B:0A:2B:5D:EF:06:DF:DD:0E:40:08:AD:86:D3:19:CC:A2:F0:27
Authority key identifier: 99:A5:B8:BD:FE:DF:5C:C6:65:D3:18:94:4B:1B:33:7C:AC:DE:D4:20
Certificate issuer: /CN=99A5B8BDFEDF5CC665D318944B1B337CACDED420
Certificate serial: 3581
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/maW4vf7fXMZl0xiUSxszfKze1CA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2100/maW4vf7fXMZl0xiUSxszfKze1CA.mft
Manifest number: 3581
Signing time: Mon 28 Apr 2025 19:41:02 +0000
Manifest this update: Mon 28 Apr 2025 19:41:02 +0000
Manifest next update: Tue 29 Apr 2025 01:41:02 +0000
Files and hashes: 1: maW4vf7fXMZl0xiUSxszfKze1CA.crl (hash: RN/g7j+gZAv+Oh03rL5fjDdycAPWqQwj1GwSQDmdxTY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13697 (0x3581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99A5B8BDFEDF5CC665D318944B1B337CACDED420
Validity
Not Before: Apr 28 19:41:02 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=543B0A2B5DEF06DFDD0E4008AD86D319CCA2F027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:8b:5a:c2:04:42:25:22:b5:09:56:5b:18:
c8:7d:be:9b:b6:05:ed:c7:f5:3e:04:0e:ee:02:b3:
d9:e0:40:0b:c1:50:59:35:35:bf:d8:2e:5f:f0:a6:
51:49:e6:55:b4:4f:c6:9b:80:10:27:d5:5c:52:6a:
32:8e:77:be:2a:50:c9:06:56:95:15:fd:dc:fa:93:
d8:f5:3e:27:e2:56:68:db:81:bd:62:c9:a7:d9:50:
5e:d1:5c:45:59:06:cd:f9:5a:f8:9d:11:ca:8f:58:
5f:53:75:7d:ba:be:3a:e7:b4:45:a6:04:6d:13:e3:
e6:71:be:3e:20:36:00:4a:d7:7e:53:31:3b:ff:24:
bc:9e:e9:d0:a1:5f:32:33:f7:0d:4e:e6:8c:2d:86:
bf:84:9a:41:7f:f8:1f:89:d9:c2:7c:e5:68:a0:3f:
4f:4f:24:3e:52:a0:c7:aa:77:0a:43:9a:55:76:5a:
06:d6:5c:b9:a2:17:5a:f1:bb:eb:4c:67:4b:fa:ed:
e4:35:31:82:f0:eb:86:ee:89:94:3f:3d:fe:cf:4a:
e9:bb:76:4d:8a:1c:ca:9c:1c:75:9d:05:6e:20:7f:
92:a3:61:5a:83:a4:32:b8:bc:b7:34:44:7f:2d:26:
07:39:46:fc:e9:59:ad:59:f5:dd:0f:ff:63:6c:52:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3B:0A:2B:5D:EF:06:DF:DD:0E:40:08:AD:86:D3:19:CC:A2:F0:27
X509v3 Authority Key Identifier:
keyid:99:A5:B8:BD:FE:DF:5C:C6:65:D3:18:94:4B:1B:33:7C:AC:DE:D4:20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2100/maW4vf7fXMZl0xiUSxszfKze1CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/maW4vf7fXMZl0xiUSxszfKze1CA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2100/maW4vf7fXMZl0xiUSxszfKze1CA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:83:d8:d3:87:e9:7e:18:d4:c2:5a:76:6b:d3:1d:54:4a:63:
09:e2:cd:af:42:e5:70:41:f4:7d:5f:74:19:c4:44:3b:e2:3c:
60:1e:5f:b5:0a:8c:97:1a:47:63:78:d0:26:05:d6:0b:0a:e9:
40:a9:58:0e:ca:44:b2:ba:3f:c1:6a:e4:4c:1e:2f:0b:31:83:
3d:ef:41:3d:88:e2:b1:bc:39:a6:cf:9d:17:f1:a7:3e:52:8c:
aa:f7:80:b1:a6:f9:07:41:0c:39:6c:fb:c1:e1:6e:46:a0:0a:
a2:96:0b:dd:65:3d:2c:b5:86:29:7b:75:e2:d8:0d:dc:6c:7e:
a9:60:14:08:16:e5:be:a6:60:85:55:05:c2:ce:5a:69:dd:d5:
e8:57:0c:91:1a:c6:41:b7:76:fa:14:33:ba:d2:41:bf:81:fd:
06:bf:87:22:a4:c6:9d:e4:2e:31:45:07:e8:18:77:6f:6a:cb:
be:cb:34:20:b9:ae:be:86:63:01:d5:50:7c:fd:7f:39:41:a6:
7c:99:84:dc:36:76:f3:2a:8c:16:d1:16:a5:43:39:43:41:0b:
3a:ef:d8:22:50:11:a2:9e:47:26:9e:9b:e7:c6:e4:cc:93:a7:
ab:35:f6:d7:d5:b5:b6:a8:66:26:8a:db:9e:c3:cc:8c:d8:4e:
81:17:ab:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:32 2025 by rpki-client on console.sobornost.net