Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.mft
File: Z5s7AaSAYgILoKDBi8fdDt4cu9I.mft (raw, json)
Hash identifier: e4d5esA3B8LuY5efwxNPxUE9OsMqBAQUOyAtjLek9y0=
Subject key identifier: CC:89:F5:0C:62:CD:7D:A1:53:A0:19:DD:CE:F4:FC:2C:12:C0:BD:BA
Authority key identifier: 67:9B:3B:01:A4:80:62:02:0B:A0:A0:C1:8B:C7:DD:0E:DE:1C:BB:D2
Certificate issuer: /CN=679B3B01A48062020BA0A0C18BC7DD0EDE1CBBD2
Certificate serial: 0207
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Z5s7AaSAYgILoKDBi8fdDt4cu9I.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.mft
Manifest number: 0207
Signing time: Mon 28 Apr 2025 19:40:47 +0000
Manifest this update: Mon 28 Apr 2025 19:40:47 +0000
Manifest next update: Tue 29 Apr 2025 01:40:47 +0000
Files and hashes: 1: Z5s7AaSAYgILoKDBi8fdDt4cu9I.crl (hash: dutuopoDZqjTg4Rmhge/DIPDzy2K0yD7fi+E2h1OYRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679B3B01A48062020BA0A0C18BC7DD0EDE1CBBD2
Validity
Not Before: Apr 28 19:40:47 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=CC89F50C62CD7DA153A019DDCEF4FC2C12C0BDBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f5:97:d7:85:73:b4:03:b3:98:d0:f3:24:a5:
cd:91:aa:28:98:f8:5a:15:d0:96:54:3a:c1:1a:17:
e1:5b:a3:79:c0:51:c9:2f:0a:43:12:ab:1b:56:fd:
64:eb:1b:ef:d7:2a:2a:95:23:65:bf:2e:5d:6c:c9:
e5:ae:2c:e9:b7:05:b5:f7:22:43:8b:ab:d9:1e:d1:
a4:d4:ed:6c:99:5d:c0:71:4e:7f:63:39:c0:65:66:
72:57:0e:10:95:80:d5:c9:fb:87:5c:c6:2c:3f:07:
95:31:f8:5d:aa:28:87:59:77:0e:f5:d7:49:0c:82:
83:6a:1c:94:a0:ea:c7:87:1e:7b:eb:e8:b9:56:90:
9a:b3:df:16:e4:e0:aa:42:6a:00:5a:d2:dc:89:43:
af:9f:0d:ba:2b:ad:ac:62:5c:57:0f:c8:15:ff:81:
b8:72:77:0e:fd:ae:d0:24:71:1f:e1:0c:87:00:f5:
a8:9f:db:f5:95:aa:6c:12:76:e5:2b:90:d9:96:c4:
f6:ba:37:a9:1c:6a:47:d2:4f:50:49:01:99:2d:3a:
74:37:97:a3:75:56:db:5c:37:9a:33:77:a7:9b:42:
a1:ef:9a:39:37:65:0d:75:73:cf:13:14:41:56:5c:
ed:dc:cb:60:92:1d:29:a7:53:cb:97:61:dc:db:18:
e8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:89:F5:0C:62:CD:7D:A1:53:A0:19:DD:CE:F4:FC:2C:12:C0:BD:BA
X509v3 Authority Key Identifier:
keyid:67:9B:3B:01:A4:80:62:02:0B:A0:A0:C1:8B:C7:DD:0E:DE:1C:BB:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Z5s7AaSAYgILoKDBi8fdDt4cu9I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/Z5s7AaSAYgILoKDBi8fdDt4cu9I.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:12:41:46:73:6e:59:26:0f:c2:6c:64:f2:b2:52:2a:e6:6f:
a0:c5:66:59:ba:db:44:95:4c:55:e5:33:fb:5a:f2:95:35:fb:
ba:05:18:ef:8f:a4:3a:e7:fa:a7:9f:1d:17:6a:12:c4:ac:7c:
2e:0a:8d:03:f8:16:27:84:36:d4:8f:05:ac:e1:c9:38:90:54:
38:0b:86:0f:0f:e1:32:0c:62:33:3b:b4:a3:73:c7:fc:f9:db:
55:fa:08:88:ec:6d:7b:fd:0a:8a:3e:75:2e:bf:25:26:8c:ab:
fe:2b:b8:8f:40:19:c3:58:fb:d2:85:26:6f:7a:cf:51:e8:09:
1d:d4:13:c5:8d:7f:30:ee:8a:f8:6c:3f:76:c9:e3:78:e1:c9:
f7:59:15:65:a9:6e:d4:d0:ec:2d:b2:c9:a5:50:50:1d:05:70:
e7:87:1d:d1:c0:58:15:5c:df:fe:29:92:df:4f:24:3c:77:8c:
b8:c5:3a:b6:78:f5:ef:db:7a:50:82:1a:64:d1:0d:04:ca:8b:
bb:30:d8:74:a6:dd:6f:19:ad:5b:f1:24:45:0d:d1:1c:83:7c:
8c:9d:ea:e8:d0:87:b9:fb:76:d7:54:99:35:cd:fc:9a:f9:a4:
4a:a6:82:a2:59:16:d7:af:76:f0:b7:f2:e2:2e:58:cc:9a:38:
a2:62:23:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:33 2025 by rpki-client on console.sobornost.net