Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.mft
File: kXok3C9fwHVc6sn-HMXExV183fo.mft (raw, json)
Hash identifier: /Zibf7Eyf3kTTRph6fcKwZiXABsIEzcILKd+AG8ee0g=
Subject key identifier: 35:6B:69:02:74:63:F8:A7:68:3B:39:60:AD:61:9D:11:CA:B7:44:44
Authority key identifier: 91:7A:24:DC:2F:5F:C0:75:5C:EA:C9:FE:1C:C5:C4:C5:5D:7C:DD:FA
Certificate issuer: /CN=917A24DC2F5FC0755CEAC9FE1CC5C4C55D7CDDFA
Certificate serial: 06B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kXok3C9fwHVc6sn-HMXExV183fo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.mft
Manifest number: 06B9
Signing time: Mon 28 Apr 2025 19:40:16 +0000
Manifest this update: Mon 28 Apr 2025 19:40:16 +0000
Manifest next update: Tue 29 Apr 2025 01:40:16 +0000
Files and hashes: 1: kXok3C9fwHVc6sn-HMXExV183fo.crl (hash: Q4CsOnKg0rc6pQsWrpHo0G7FPuG7Xtsvk6kqQgkmYF8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1721 (0x6b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917A24DC2F5FC0755CEAC9FE1CC5C4C55D7CDDFA
Validity
Not Before: Apr 28 19:40:16 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=356B69027463F8A7683B3960AD619D11CAB74444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4e:45:4c:b3:46:df:85:b4:aa:ff:bd:44:49:
ae:dc:9f:f2:13:71:46:0e:08:9b:42:64:81:38:a0:
3c:6c:13:19:02:51:5c:45:34:75:ca:8a:74:b0:f5:
ec:f9:8b:a6:7f:dd:78:c5:93:3d:5b:31:2c:d1:98:
22:f0:6e:7d:e6:42:15:97:11:7e:b3:da:11:e4:20:
c1:6e:64:fb:7a:05:49:2e:6a:20:56:05:a5:60:fd:
bd:ab:0d:d4:e2:9b:97:e7:f9:25:ea:f0:d5:18:3c:
5e:2e:e7:ed:f3:f8:ac:f2:0d:90:40:dc:31:12:a2:
e6:de:a0:e7:3b:55:1e:92:4d:17:37:df:53:18:21:
13:15:87:ab:bd:8d:c7:24:0a:f0:23:ee:c4:ea:03:
55:8a:6d:16:c3:13:86:61:e1:43:08:2f:8b:70:ff:
72:63:c7:a8:68:f4:a4:6f:09:7c:91:b6:9a:0a:b3:
b7:68:29:45:96:5d:17:8f:84:9f:19:05:78:d4:76:
0a:d8:9f:50:c9:5e:88:fc:e4:89:95:c1:33:b8:ec:
41:bf:55:53:b3:93:ce:b4:7b:b1:19:af:fa:d3:e7:
91:07:67:26:35:ce:74:70:27:ff:47:59:61:79:7e:
b6:8e:fb:c8:a1:9e:7d:5e:84:75:cd:cb:20:d5:98:
30:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6B:69:02:74:63:F8:A7:68:3B:39:60:AD:61:9D:11:CA:B7:44:44
X509v3 Authority Key Identifier:
keyid:91:7A:24:DC:2F:5F:C0:75:5C:EA:C9:FE:1C:C5:C4:C5:5D:7C:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kXok3C9fwHVc6sn-HMXExV183fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:f2:d0:81:90:6f:3c:b1:02:b3:34:10:1f:5b:43:38:fd:b0:
53:2d:4d:fc:bd:d4:a1:2c:27:e3:6d:f9:05:52:ee:be:95:17:
a2:aa:4b:7f:52:dd:ef:0d:24:be:7b:bb:97:69:74:a8:fa:12:
cb:5a:24:d6:cb:65:5e:b7:71:b4:5d:9d:7f:96:28:fa:36:d8:
64:1c:87:9b:ac:cb:55:a3:f2:22:6e:a5:3e:a5:b9:3c:0e:f3:
46:c4:54:64:b2:2f:ce:f2:86:f1:92:e7:d3:d4:d6:cd:c0:43:
09:fc:a1:c1:3b:64:9a:59:f7:c9:c8:2b:e7:9c:62:e8:4b:50:
78:ae:56:c5:d0:43:3a:ef:c0:9b:b9:76:e2:70:c9:06:4f:eb:
26:6b:ee:01:1b:0b:91:b8:0c:5a:2c:f8:af:d6:e0:cd:26:15:
38:ae:e2:40:15:20:45:d8:4e:c0:77:4e:f1:11:80:ac:39:c9:
c5:93:3a:72:01:fc:a7:66:95:d1:cd:2a:c8:4c:18:5b:82:ac:
a6:14:79:57:f0:7e:25:c7:9f:3f:96:fa:86:87:d3:55:55:c0:
ca:37:d3:a5:5c:1d:89:32:39:cd:9b:c9:77:e0:e3:fc:0c:82:
27:c2:66:85:b1:ab:85:8b:38:5e:0d:26:ad:c2:51:a2:0d:cc:
22:86:88:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:45 2025 by rpki-client on console.sobornost.net