Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3340/pDidtIvE6TSc2eEd0MttcHaa4xk.mft
File: pDidtIvE6TSc2eEd0MttcHaa4xk.mft (raw, json)
Hash identifier: HyNC/M71s3AyVJ1BahalP30slwgZN78PtlOqrFhd/tM=
Subject key identifier: C0:52:39:ED:FF:B8:35:E3:EA:F1:43:96:11:63:60:E3:9C:CB:FE:1A
Authority key identifier: A4:38:9D:B4:8B:C4:E9:34:9C:D9:E1:1D:D0:CB:6D:70:76:9A:E3:19
Certificate issuer: /CN=A4389DB48BC4E9349CD9E11DD0CB6D70769AE319
Certificate serial: 0285
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pDidtIvE6TSc2eEd0MttcHaa4xk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/pDidtIvE6TSc2eEd0MttcHaa4xk.mft
Manifest number: 0285
Signing time: Mon 28 Apr 2025 19:40:33 +0000
Manifest this update: Mon 28 Apr 2025 19:40:33 +0000
Manifest next update: Tue 29 Apr 2025 01:40:33 +0000
Files and hashes: 1: pDidtIvE6TSc2eEd0MttcHaa4xk.crl (hash: tPMotqo8/tPAtXUyZnFdh9ks87k89y6T1uXhElFXkQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 645 (0x285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4389DB48BC4E9349CD9E11DD0CB6D70769AE319
Validity
Not Before: Apr 28 19:40:33 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C05239EDFFB835E3EAF14396116360E39CCBFE1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:64:9d:88:bd:06:62:49:e7:89:cb:66:36:
3e:77:37:0e:8e:8d:35:9e:5b:97:5d:90:3d:f3:61:
ce:7c:59:e9:0a:31:f1:dd:81:fa:24:99:71:dc:e4:
78:a6:9e:b6:12:74:61:08:47:72:8b:35:66:96:92:
e2:06:10:af:f0:6a:c9:87:1f:de:cd:6e:d0:50:4a:
22:3c:22:4a:58:c6:86:8a:83:95:9a:17:2c:9e:3e:
3e:a3:ad:62:b6:f5:c8:1b:aa:04:e9:64:a7:23:2e:
a2:bd:35:27:55:e2:23:2a:e2:7a:91:bb:f4:1f:c3:
e4:fa:81:82:9f:ea:69:ec:1b:27:a2:b0:b6:8e:90:
3e:86:3d:63:52:bb:dd:75:30:f6:0d:93:a7:97:fc:
98:1b:62:eb:35:67:3c:f7:40:30:58:3a:f0:21:78:
bb:00:d3:55:63:84:3c:8e:87:be:10:5c:6e:62:fa:
80:4a:a4:e8:5b:74:ec:5a:50:7f:1b:eb:64:b5:30:
da:43:09:7a:c3:7a:2f:85:71:5a:4d:72:7b:9b:d2:
ac:5a:b1:a6:50:f1:8a:47:ee:24:27:26:43:85:fa:
07:56:06:69:9a:ba:be:f9:c4:2f:12:c3:4d:d4:ed:
74:d5:1a:24:7b:7a:a7:ad:4f:e0:92:9b:30:95:3f:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:52:39:ED:FF:B8:35:E3:EA:F1:43:96:11:63:60:E3:9C:CB:FE:1A
X509v3 Authority Key Identifier:
keyid:A4:38:9D:B4:8B:C4:E9:34:9C:D9:E1:1D:D0:CB:6D:70:76:9A:E3:19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/pDidtIvE6TSc2eEd0MttcHaa4xk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pDidtIvE6TSc2eEd0MttcHaa4xk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/pDidtIvE6TSc2eEd0MttcHaa4xk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:27:d9:b2:09:e0:3b:e8:df:5d:62:21:ca:9f:38:a4:5d:8e:
c1:29:36:92:b3:7e:bb:d1:41:dd:dc:05:98:a1:b7:60:48:ec:
0a:86:0c:f1:06:af:63:53:f3:54:af:36:c2:23:a5:78:09:d3:
ed:93:f6:17:8f:b3:1b:03:51:00:4e:c6:04:43:18:93:c6:76:
d3:38:16:ee:50:c1:9a:bf:b4:fe:8e:26:ce:80:11:fa:f9:a9:
5f:be:b4:25:79:03:2f:5c:00:47:5f:9d:6e:9f:6f:df:1e:21:
87:d4:34:66:d8:ad:2d:b9:bb:4e:70:26:b4:9e:b4:b5:5a:60:
ed:6a:a6:6d:60:55:01:13:fa:e4:f3:a5:92:ac:82:40:fb:c5:
82:66:ee:a5:79:ad:ae:cd:9a:32:2c:34:2f:25:90:0d:03:26:
a3:b0:00:8c:c9:70:26:e3:2a:21:6f:3f:5f:89:95:89:af:f4:
86:73:e4:c2:63:83:7a:51:dd:a2:2c:c8:02:e4:de:2f:19:81:
95:c3:53:84:1e:cf:8c:b4:a7:5e:61:39:b0:62:bd:43:98:6b:
09:64:37:18:7a:31:7c:58:51:55:3e:f0:8d:a7:be:b9:6e:d6:
80:d1:b8:74:58:b5:e1:58:bf:f0:aa:f6:a2:d8:51:64:8a:5a:
ab:ee:66:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:46 2025 by rpki-client on console.sobornost.net