Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2603/L489CPJT5L3GUR1LZHvjXMZwPRo.mft
File: L489CPJT5L3GUR1LZHvjXMZwPRo.mft (raw, json)
Hash identifier: yO2iwl6Q+YUqN9/t7YoNz+wERCyS8JQXzkItIhAyFwI=
Subject key identifier: 80:F5:57:60:7D:4A:63:54:9A:61:A8:60:4B:3C:35:02:D1:73:49:0A
Authority key identifier: 2F:8F:3D:08:F2:53:E4:BD:C6:51:1D:4B:64:7B:E3:5C:C6:70:3D:1A
Certificate issuer: /CN=2F8F3D08F253E4BDC6511D4B647BE35CC6703D1A
Certificate serial: 1D78
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/L489CPJT5L3GUR1LZHvjXMZwPRo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/L489CPJT5L3GUR1LZHvjXMZwPRo.mft
Manifest number: 1D78
Signing time: Mon 28 Apr 2025 19:39:18 +0000
Manifest this update: Mon 28 Apr 2025 19:39:18 +0000
Manifest next update: Tue 29 Apr 2025 01:39:18 +0000
Files and hashes: 1: L489CPJT5L3GUR1LZHvjXMZwPRo.crl (hash: WnEZxuXjV4Yp2Xv3ZpdHFKo/8E6Y/ZBTJYtVqGqVJX4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7544 (0x1d78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F8F3D08F253E4BDC6511D4B647BE35CC6703D1A
Validity
Not Before: Apr 28 19:39:18 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=80F557607D4A63549A61A8604B3C3502D173490A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:b0:79:50:52:ed:a6:8c:7e:bb:df:d2:e1:
59:5d:07:d0:15:7d:47:30:d3:48:da:9e:82:1f:3f:
bb:3f:91:f7:a7:2b:bf:88:52:7f:60:8d:76:22:6f:
dd:2c:dd:01:fc:db:79:e1:e0:92:4d:48:32:16:19:
9c:d0:3a:a9:97:2b:65:05:3e:af:2c:f1:72:2d:6e:
88:8a:2c:a0:af:85:67:58:34:7a:bb:48:ea:3f:18:
9f:3a:1e:9e:ff:03:ed:80:c2:38:2b:e1:a9:82:08:
6d:39:9e:00:fb:af:ff:44:a9:b7:39:5f:bb:7e:63:
3f:92:9b:e5:fa:34:d0:c7:e7:3c:5d:6e:eb:bd:29:
0f:6d:fa:91:ca:ce:d3:8d:f1:33:9b:ae:66:51:8a:
22:28:15:49:e5:62:13:40:65:db:47:ef:03:00:3e:
27:6b:d5:a1:d0:44:51:5c:78:9b:ec:99:23:31:3b:
cc:93:f8:36:ee:2b:38:a4:49:9b:8e:fd:aa:61:21:
77:3a:8d:f3:41:41:28:fe:d5:e6:22:e0:59:83:9a:
ac:d7:4b:a1:2e:b8:a1:ff:bc:cd:db:4c:7f:d4:9e:
06:32:cc:05:00:78:e6:13:07:a5:f4:50:6e:ef:2f:
05:e2:93:1f:64:8b:e6:c6:94:14:16:0b:5f:f7:e3:
ef:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F5:57:60:7D:4A:63:54:9A:61:A8:60:4B:3C:35:02:D1:73:49:0A
X509v3 Authority Key Identifier:
keyid:2F:8F:3D:08:F2:53:E4:BD:C6:51:1D:4B:64:7B:E3:5C:C6:70:3D:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/L489CPJT5L3GUR1LZHvjXMZwPRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/L489CPJT5L3GUR1LZHvjXMZwPRo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/L489CPJT5L3GUR1LZHvjXMZwPRo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:00:50:8c:f2:51:b7:2a:2a:86:f6:59:60:05:60:83:87:fd:
45:2a:de:36:0a:d3:92:cd:c4:50:99:8b:a1:80:90:c9:39:9b:
81:ff:b6:95:bb:fd:c2:6f:60:2f:f9:08:5d:8d:ae:b6:de:c2:
3b:90:30:49:72:22:6e:61:4a:de:9d:64:04:85:f1:f0:23:a7:
c8:2d:b1:37:e1:04:fc:8b:ea:d6:0a:98:55:fe:20:cc:21:af:
b8:ca:10:47:7a:2a:23:1e:92:7f:8f:bf:d8:4f:a9:d1:d5:60:
ca:01:7f:7b:66:f3:47:4b:4a:f0:cf:22:b0:8a:34:9f:dd:78:
a8:dd:22:3a:39:09:75:4f:7b:ae:ab:7d:d6:30:96:74:11:42:
3e:fc:7a:aa:bf:02:70:0b:70:6c:a7:a0:da:f2:f2:65:a5:9c:
b0:93:d3:be:23:c2:c2:c0:d8:a3:64:d8:07:e7:5e:f2:4c:67:
5c:89:cc:a8:2d:b0:57:80:cf:c1:bc:6d:9f:f5:94:52:7e:97:
07:b7:61:1a:17:6e:98:0b:0e:95:27:f2:f2:13:2a:19:25:11:
44:26:2d:58:90:7b:2f:3f:05:f9:77:cf:09:fe:3e:5b:5a:e1:
ad:18:9c:db:51:61:52:7a:5f:82:38:2f:53:4d:e0:04:0c:0c:
fe:c2:f2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:33 2025 by rpki-client on console.sobornost.net