Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3346/2GueAukE5bR2WU2yt5eONcp8HW4.mft
File: 2GueAukE5bR2WU2yt5eONcp8HW4.mft (raw, json)
Hash identifier: Z3gZqmnsh7cPLnC4/mc28hkzblMe8KQkWGMyWwAm+oQ=
Subject key identifier: 63:61:AC:F5:C7:06:11:74:05:73:5D:A1:DB:C1:45:84:1F:E7:E8:CF
Authority key identifier: D8:6B:9E:02:E9:04:E5:B4:76:59:4D:B2:B7:97:8E:35:CA:7C:1D:6E
Certificate issuer: /CN=D86B9E02E904E5B476594DB2B7978E35CA7C1D6E
Certificate serial: 023F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2GueAukE5bR2WU2yt5eONcp8HW4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/2GueAukE5bR2WU2yt5eONcp8HW4.mft
Manifest number: 023F
Signing time: Mon 28 Apr 2025 19:40:43 +0000
Manifest this update: Mon 28 Apr 2025 19:40:43 +0000
Manifest next update: Tue 29 Apr 2025 01:40:43 +0000
Files and hashes: 1: 2GueAukE5bR2WU2yt5eONcp8HW4.crl (hash: 3j3xQlOoktbzWhQysjbyUYbbfhSAnU4pvXJ7DRJbSwg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 575 (0x23f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D86B9E02E904E5B476594DB2B7978E35CA7C1D6E
Validity
Not Before: Apr 28 19:40:43 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=6361ACF5C706117405735DA1DBC145841FE7E8CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6d:e1:1e:1c:50:f8:51:6d:8b:dd:6b:57:64:
02:42:4e:11:f9:95:bd:ef:6b:7c:45:0b:94:45:98:
60:af:b4:58:f3:95:57:ec:e9:f3:ef:7f:be:ec:65:
09:bb:56:07:6b:63:d2:22:37:c8:7b:26:fc:6a:56:
f2:14:58:79:6d:9a:7b:0a:32:a7:bb:e9:f9:d9:3d:
99:2c:c4:b5:5e:98:3b:8b:0d:42:9e:dd:2b:6e:ed:
1a:25:c8:6b:60:d4:dc:4a:9d:31:54:c8:a4:cf:e5:
ba:a0:2c:59:d8:a8:fc:9c:f4:a6:62:61:cf:a1:0e:
ab:d6:04:30:a4:6d:a5:68:1e:71:d2:69:1e:59:ec:
2e:28:43:1a:4a:63:af:b8:8d:52:3e:17:4c:30:13:
08:98:a7:0e:83:e9:8f:e5:b7:07:33:d9:d1:e3:93:
43:31:e1:96:6d:00:ba:7d:94:b7:58:48:30:ec:f3:
3b:7c:b1:9a:bf:d9:c3:ea:b2:3f:54:ba:c0:7c:12:
7b:2a:64:6e:fc:6c:17:9c:21:82:4a:1a:84:47:a7:
fc:35:c5:77:df:81:e9:32:09:3d:c9:19:fd:9a:a2:
88:f3:b6:19:1b:4e:36:87:59:7f:f3:6a:ab:b4:62:
99:0c:ff:7a:6b:fc:bc:b9:06:81:c7:b1:35:fa:54:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:61:AC:F5:C7:06:11:74:05:73:5D:A1:DB:C1:45:84:1F:E7:E8:CF
X509v3 Authority Key Identifier:
keyid:D8:6B:9E:02:E9:04:E5:B4:76:59:4D:B2:B7:97:8E:35:CA:7C:1D:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/2GueAukE5bR2WU2yt5eONcp8HW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2GueAukE5bR2WU2yt5eONcp8HW4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/2GueAukE5bR2WU2yt5eONcp8HW4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:74:f3:39:40:2e:e4:cc:b0:3d:f9:c2:4d:e0:88:17:4b:7a:
ff:0f:89:00:cf:8e:20:da:ae:16:5f:79:77:25:1c:02:29:25:
8f:27:7a:b8:5c:19:f2:62:18:0a:ab:2e:34:d7:3f:84:96:f9:
be:b0:1c:b1:6d:67:77:cf:da:76:ec:15:0c:31:bc:96:98:1f:
2e:c7:9f:57:5b:68:37:ee:2b:67:e6:53:d0:bf:57:cc:d3:f5:
46:49:cd:21:5f:b0:a7:62:79:2b:24:b6:40:4f:43:cc:fd:49:
81:41:7c:91:b8:dd:d8:f8:f5:f0:ce:25:b9:1e:47:06:34:4e:
51:bf:b7:66:4c:12:7d:d8:e8:94:a4:c9:52:b8:59:56:b9:d1:
a6:85:46:50:37:56:b2:a6:c8:c2:2a:f9:40:3c:37:c3:4f:35:
19:4d:37:f8:10:a7:2b:5c:d5:86:18:c5:00:02:7f:ee:4a:59:
c8:c9:f7:a4:ce:ee:63:5c:1e:66:06:e7:6b:a3:61:53:b9:53:
fe:5e:57:62:e1:f9:2e:44:dd:3b:ce:8b:dd:31:7c:ab:85:03:
71:56:fc:6d:4c:4c:8a:ea:7c:51:4e:51:60:96:4b:b8:d8:00:
04:6a:00:29:d3:b1:8d:3d:07:42:0f:a3:33:fc:1a:02:5d:e7:
dd:ea:a5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:47 2025 by rpki-client on console.sobornost.net