Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.mft
File: BFagwwe9oIjxq3j2p-wFemB5Yy4.mft (raw, json)
Hash identifier: q7/M8Opbo0uZ5PGFhCkh+3yIMHqSLJJkDWRC2r7LBwE=
Subject key identifier: 45:88:91:FA:79:0C:06:BC:35:06:F0:1E:C5:8C:22:86:F4:12:A8:A3
Authority key identifier: 04:56:A0:C3:07:BD:A0:88:F1:AB:78:F6:A7:EC:05:7A:60:79:63:2E
Certificate issuer: /CN=0456A0C307BDA088F1AB78F6A7EC057A6079632E
Certificate serial: 31C3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BFagwwe9oIjxq3j2p-wFemB5Yy4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.mft
Manifest number: 31C3
Signing time: Mon 28 Apr 2025 19:06:24 +0000
Manifest this update: Mon 28 Apr 2025 19:06:24 +0000
Manifest next update: Tue 29 Apr 2025 01:06:24 +0000
Files and hashes: 1: BFagwwe9oIjxq3j2p-wFemB5Yy4.crl (hash: kFtS+wcUPEYwmqNxiINnF9UkJPQ8tMwTT7/xEmrUz84=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12739 (0x31c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0456A0C307BDA088F1AB78F6A7EC057A6079632E
Validity
Not Before: Apr 28 19:06:24 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=458891FA790C06BC3506F01EC58C2286F412A8A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:bc:c9:e8:e6:04:bb:64:b8:68:bb:18:11:
8b:8d:7e:fc:53:d0:c1:e4:bb:57:e3:e0:48:ec:3a:
3d:fb:a6:04:d4:97:f3:f3:9c:be:f8:19:0e:60:7a:
56:bb:35:09:d7:90:56:0d:db:4b:0b:de:8d:98:83:
af:fc:0f:80:17:f2:13:72:5a:5e:34:02:c5:7d:c9:
97:81:89:9d:43:8a:8f:51:13:34:e0:1a:8e:94:dc:
8c:12:4f:6c:1e:f1:2d:c2:7e:5f:62:88:40:96:c4:
93:5e:bb:4b:9b:08:ce:36:da:15:6b:40:d3:b0:38:
1d:52:78:09:1f:87:df:1e:0c:27:e1:fa:75:b8:07:
b1:2a:2e:19:cf:80:28:b4:24:f8:bc:56:5b:cb:06:
d7:64:27:0f:6b:fa:05:ed:94:2e:a8:94:3c:d7:fe:
0c:21:30:53:a3:07:c6:5a:36:48:d3:ca:81:fd:49:
2c:88:93:b5:9e:11:3f:f6:a1:cd:bf:27:71:0c:23:
e7:23:f2:f6:ff:4b:50:77:17:23:ab:40:c5:5e:6f:
dd:5b:0e:8f:a8:84:a8:2a:cf:9e:b5:b3:ba:62:61:
f2:17:3e:00:9a:d2:82:a9:2a:a6:bf:5f:0c:72:30:
d6:0e:a7:33:18:fe:aa:ff:8c:38:42:54:2f:b3:af:
b2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:88:91:FA:79:0C:06:BC:35:06:F0:1E:C5:8C:22:86:F4:12:A8:A3
X509v3 Authority Key Identifier:
keyid:04:56:A0:C3:07:BD:A0:88:F1:AB:78:F6:A7:EC:05:7A:60:79:63:2E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BFagwwe9oIjxq3j2p-wFemB5Yy4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e1:db:0e:28:96:82:c6:f1:08:eb:82:4b:5a:42:8f:a4:8e:
57:2d:06:82:fc:88:5c:cf:75:4c:a6:15:46:5a:f4:12:22:8f:
b4:b9:03:0a:83:52:b4:be:69:df:6c:33:bb:11:6e:94:a2:48:
7b:c7:55:3e:d2:28:d2:88:01:6c:5b:9d:eb:65:87:b0:d2:18:
1b:3e:19:66:90:01:5c:04:c6:38:6a:89:5d:3f:fd:83:96:27:
d6:d8:38:c3:b0:6a:f0:ca:bb:4d:b4:c0:b1:99:65:31:4e:08:
e0:d0:22:5e:eb:21:33:50:c4:ff:bf:2e:ff:f2:09:3f:50:99:
8b:f2:d5:d8:36:63:39:41:5f:24:8e:4a:e3:1e:de:4f:38:b1:
61:0c:ab:23:65:5a:47:e5:d3:f1:cb:28:80:23:e3:74:bf:c3:
e6:42:c2:a9:de:07:44:b4:34:27:e5:3c:0c:4e:c1:ef:bf:e5:
6c:22:b2:52:72:29:20:05:72:1b:51:69:29:76:07:48:e9:b3:
db:77:e9:99:ce:d7:21:bc:39:ab:3a:f9:ca:55:ba:f0:a0:e8:
b6:a4:4f:30:bd:b6:73:77:80:f2:cd:dc:19:2b:f8:2b:23:aa:
12:19:01:ee:8c:b8:74:5d:a6:7e:16:f4:91:ca:4c:d9:85:98:
e3:8d:27:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:50 2025 by rpki-client on console.sobornost.net