Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3288/20kOavCkTf-CaNSAeFjUum7WBtk.mft
File: 20kOavCkTf-CaNSAeFjUum7WBtk.mft (raw, json)
Hash identifier: 5x0OAsfVH/L2WTBYK+1IPDdqC/ovwQDrpdtTmFWMdT0=
Subject key identifier: 4D:97:94:07:C5:7C:64:38:66:39:BA:F7:B7:31:97:0F:D5:BE:CF:78
Authority key identifier: DB:49:0E:6A:F0:A4:4D:FF:82:68:D4:80:78:58:D4:BA:6E:D6:06:D9
Certificate issuer: /CN=DB490E6AF0A44DFF8268D4807858D4BA6ED606D9
Certificate serial: 0657
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/20kOavCkTf-CaNSAeFjUum7WBtk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3288/20kOavCkTf-CaNSAeFjUum7WBtk.mft
Manifest number: 0657
Signing time: Mon 28 Apr 2025 19:39:08 +0000
Manifest this update: Mon 28 Apr 2025 19:39:08 +0000
Manifest next update: Tue 29 Apr 2025 01:39:08 +0000
Files and hashes: 1: 20kOavCkTf-CaNSAeFjUum7WBtk.crl (hash: bQXyzmZDgOiW2bj5TkWsrXrU8tWCSdOWIeQkRzlU9r8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1623 (0x657)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB490E6AF0A44DFF8268D4807858D4BA6ED606D9
Validity
Not Before: Apr 28 19:39:08 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4D979407C57C64386639BAF7B731970FD5BECF78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:93:53:e3:24:b9:d9:4b:58:0f:74:13:3b:a7:
d2:d4:ad:38:1a:c0:a2:a8:28:9f:c8:b7:a1:70:70:
18:84:67:63:22:9b:6e:e3:8d:a5:23:33:e7:3b:6e:
73:3c:15:b4:93:03:89:a4:3f:e2:74:8e:e0:42:ed:
92:7e:ff:73:76:b7:8c:c9:83:22:9d:88:69:cb:37:
30:4b:e3:80:0b:c2:14:73:1b:e1:c4:4a:09:24:3f:
de:06:04:60:a0:03:4c:cd:35:36:9e:b4:cb:56:c9:
56:dd:4c:c4:c0:ff:56:54:56:e6:81:05:57:75:16:
ef:65:3e:5a:2c:b9:83:4f:ac:e7:2b:e9:0a:ab:ec:
1e:15:03:cf:fe:f9:43:f0:19:c7:eb:fe:70:95:94:
f8:42:cd:1e:2e:76:1f:a7:81:e6:8c:d3:5e:d3:f1:
6c:19:cf:b4:30:62:d7:0f:aa:99:f6:47:c3:a7:f6:
ad:bc:ee:17:e4:48:77:ae:43:e1:0a:fc:ae:37:91:
e2:f6:14:bc:59:45:4d:cf:21:09:2c:3c:bf:5e:b8:
48:59:26:fb:b1:52:67:7a:a7:58:78:f2:e0:70:28:
81:52:83:f7:be:f0:8a:47:55:00:85:52:ae:e2:0f:
d3:85:e9:b0:b9:bd:d2:54:f6:df:00:e0:68:a7:2d:
a2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:97:94:07:C5:7C:64:38:66:39:BA:F7:B7:31:97:0F:D5:BE:CF:78
X509v3 Authority Key Identifier:
keyid:DB:49:0E:6A:F0:A4:4D:FF:82:68:D4:80:78:58:D4:BA:6E:D6:06:D9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3288/20kOavCkTf-CaNSAeFjUum7WBtk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/20kOavCkTf-CaNSAeFjUum7WBtk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3288/20kOavCkTf-CaNSAeFjUum7WBtk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:92:6d:20:b0:1d:82:2f:50:44:8f:9a:a8:85:f7:19:37:a0:
84:6a:15:27:e8:c4:fe:26:55:d9:ee:14:51:7b:9c:2b:63:38:
93:f3:69:69:75:7a:cc:a3:99:c3:7f:23:4e:8b:46:a0:84:3c:
d6:80:79:92:e9:1e:e7:d1:c8:59:4e:de:30:12:34:b1:8c:1a:
d3:90:29:1b:b4:17:48:10:39:1e:2e:b5:bb:5f:89:d4:89:6a:
05:85:9a:45:a3:74:95:da:8c:64:11:e7:0d:70:b4:b4:33:19:
a3:ac:7f:a0:a2:b7:e6:27:c6:7c:49:75:3d:d3:7c:f2:f0:76:
60:7d:bd:5f:4f:e2:9f:27:bc:0f:5a:c1:36:83:80:86:2a:b7:
1b:58:fb:f3:8e:14:35:8d:4b:4a:46:57:ac:28:50:3d:0b:32:
3a:f9:43:5b:e4:62:ca:4d:4a:78:68:ca:18:3d:96:46:c3:64:
c9:3b:4f:b1:60:4b:ba:58:a5:11:0f:b6:76:f2:fe:f5:bf:44:
f0:9e:bc:fe:a6:cc:fe:23:5d:d2:a0:ee:ae:42:97:cc:5d:fd:
5b:9b:8c:78:6c:f5:0e:25:69:da:c2:ee:0f:3b:d9:ee:32:00:
6a:03:1c:38:55:ab:ce:2c:18:e6:45:82:18:c0:3f:23:15:82:
0c:a0:6f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:45 2025 by rpki-client on console.sobornost.net