Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.mft
File: LcO_WKfD4suVkd5E2HmTwNP3MnM.mft (raw, json)
Hash identifier: Z2xbAEUijCxbtwWAca5UUo0rXgLXTlLAQYoDeG6CD6U=
Subject key identifier: 36:74:07:F6:67:E8:B7:FA:6A:B4:E4:16:F4:85:B0:12:C3:A3:1C:C4
Authority key identifier: 2D:C3:BF:58:A7:C3:E2:CB:95:91:DE:44:D8:79:93:C0:D3:F7:32:73
Certificate issuer: /CN=2DC3BF58A7C3E2CB9591DE44D87993C0D3F73273
Certificate serial: 0628
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LcO_WKfD4suVkd5E2HmTwNP3MnM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.mft
Manifest number: 0628
Signing time: Mon 28 Apr 2025 19:38:37 +0000
Manifest this update: Mon 28 Apr 2025 19:38:37 +0000
Manifest next update: Tue 29 Apr 2025 01:38:37 +0000
Files and hashes: 1: LcO_WKfD4suVkd5E2HmTwNP3MnM.crl (hash: 030TNbFP7Jwj4U5Lxw93fvOqgruRkS7OXP997kLNyyo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1576 (0x628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DC3BF58A7C3E2CB9591DE44D87993C0D3F73273
Validity
Not Before: Apr 28 19:38:37 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=367407F667E8B7FA6AB4E416F485B012C3A31CC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:b9:90:a7:b9:1c:e8:12:8a:e5:8c:fb:aa:
6e:31:ee:eb:e5:b8:70:28:bd:51:a0:e3:9f:2a:d0:
77:8d:76:61:8b:9f:17:31:84:33:50:66:8a:09:bf:
fa:99:0d:10:db:88:7e:b5:43:0c:12:1f:a7:fb:49:
3d:3f:c9:c4:0b:d4:a8:68:3f:82:bb:59:5a:b0:47:
27:a5:35:11:a1:ce:9a:12:83:1c:5c:81:e7:e8:70:
d0:7a:ce:72:da:f7:6a:54:19:7c:d8:3c:c6:d5:21:
fd:9d:fe:7e:b1:2a:ff:b3:ba:e7:e4:9d:5a:64:98:
cb:25:63:14:3f:58:b6:f1:bf:80:c0:17:5d:98:c6:
3d:4e:f5:83:4e:be:e0:a7:74:13:93:92:9d:8d:0f:
2c:a0:b1:cb:c9:3d:55:83:4b:93:28:17:68:0b:19:
b6:73:45:2d:61:38:c0:0a:e2:20:7f:57:ab:66:b8:
30:62:e6:dc:bd:28:4e:19:81:fb:31:92:b4:d5:46:
3a:56:52:c7:8c:ee:55:1c:b9:53:22:5e:23:da:23:
43:d1:4e:d5:9b:42:ab:50:2a:dc:bc:bf:5e:9a:36:
47:dc:38:18:a2:52:e4:b8:9a:20:cf:aa:af:a2:05:
4d:01:7b:f0:9d:72:5b:ff:b4:8c:08:33:ed:ee:6b:
36:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:74:07:F6:67:E8:B7:FA:6A:B4:E4:16:F4:85:B0:12:C3:A3:1C:C4
X509v3 Authority Key Identifier:
keyid:2D:C3:BF:58:A7:C3:E2:CB:95:91:DE:44:D8:79:93:C0:D3:F7:32:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LcO_WKfD4suVkd5E2HmTwNP3MnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:1d:5b:35:07:ff:36:25:24:44:fe:df:df:33:5d:fd:f4:84:
26:4c:15:7d:5a:7f:51:ad:e9:d4:04:a9:c1:3a:1d:43:4f:90:
2a:5e:f3:fd:da:dd:e3:03:8e:0e:5c:2f:3b:52:2a:75:5c:f8:
9e:5d:49:88:7b:e8:c7:06:72:62:72:27:11:cd:08:e2:fd:3c:
6e:f1:64:fb:be:0c:de:63:12:46:fe:8a:05:73:58:15:c7:bd:
da:45:18:e1:a9:ec:60:7c:41:fd:5c:58:cc:eb:de:26:75:e2:
37:a8:55:ba:d2:ab:a4:0f:f1:d5:7e:2c:3b:cf:30:ef:11:0e:
ea:d7:49:3f:e6:40:a0:34:81:43:35:cc:1a:34:a9:42:5c:be:
5e:7a:53:c7:c7:b2:28:62:94:7f:45:89:d6:60:73:0d:ad:fe:
b1:5c:8c:91:36:01:b0:5a:51:85:8f:e9:2c:da:f7:bf:5b:23:
fd:85:4d:96:2f:fb:e2:38:8a:ab:de:20:c7:59:04:f5:73:92:
3f:9c:b9:bd:24:f7:f4:e1:7b:54:de:c2:3b:33:0d:57:54:7c:
7d:3b:d2:60:75:21:a7:bb:54:7f:c9:e2:17:f8:51:2b:35:35:
38:b0:88:86:c5:07:b8:4a:2a:00:e3:a4:89:90:0a:6d:2f:28:
a1:cd:51:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:45 2025 by rpki-client on console.sobornost.net