Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1089/D0BCGu_TepwoYqhQBOR57yH1tgg.mft
File: D0BCGu_TepwoYqhQBOR57yH1tgg.mft (raw, json)
Hash identifier: R8XK63hUNkeQvE8Ko8G9MLJ5eSjHKVk7so+tkNB5ZpU=
Subject key identifier: D2:AA:2B:81:B1:CF:2E:13:B3:38:8C:73:65:92:AD:2D:54:0B:61:33
Authority key identifier: 0F:40:42:1A:EF:D3:7A:9C:28:62:A8:50:04:E4:79:EF:21:F5:B6:08
Certificate issuer: /CN=0F40421AEFD37A9C2862A85004E479EF21F5B608
Certificate serial: 1C1A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/D0BCGu_TepwoYqhQBOR57yH1tgg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1089/D0BCGu_TepwoYqhQBOR57yH1tgg.mft
Manifest number: 1C1A
Signing time: Fri 31 Jan 2025 15:27:20 +0000
Manifest this update: Fri 31 Jan 2025 15:27:20 +0000
Manifest next update: Fri 31 Jan 2025 21:27:20 +0000
Files and hashes: 1: D0BCGu_TepwoYqhQBOR57yH1tgg.crl (hash: HJalE4bftEl7FE41gcx+wG3KA2JF7buXoQdVH/g6b8U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7194 (0x1c1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F40421AEFD37A9C2862A85004E479EF21F5B608
Validity
Not Before: Jan 31 15:27:20 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D2AA2B81B1CF2E13B3388C736592AD2D540B6133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ff:49:6b:0a:0c:5a:00:44:15:cc:66:d8:93:
d4:4c:39:17:54:a6:3a:37:3b:62:cd:d5:45:b1:d4:
57:2d:3b:e0:b2:b2:d4:fb:04:44:40:4b:6b:04:4c:
72:d0:14:1b:3b:79:ac:62:4b:7a:58:35:f6:46:6b:
5e:be:43:19:9b:6c:74:d5:00:86:21:f5:34:e4:34:
48:f8:bd:29:10:3f:51:10:67:71:08:fa:fb:bd:c6:
3e:dc:b5:1d:e6:6f:a0:a5:4f:35:be:d1:02:fe:17:
c8:64:7e:0c:fe:59:77:ce:30:1c:eb:a9:09:25:1c:
b7:ed:e9:5d:c0:10:02:a4:45:f7:b4:91:63:d4:34:
3c:53:47:39:58:3f:8e:14:bc:27:7c:8b:e5:56:12:
6a:a7:93:3d:9f:a3:bd:61:6b:ff:97:da:31:4a:5d:
25:c4:00:ec:f9:09:8f:4e:c6:e9:96:d8:51:21:59:
ef:b2:45:c6:91:19:14:ab:04:32:bc:0c:6a:f5:73:
0a:69:04:61:46:b1:fb:fe:72:8c:15:50:fd:1e:67:
6b:b3:f7:ca:2b:73:6a:00:e1:cb:d6:a0:e0:cb:1a:
84:88:e1:11:11:63:2d:c0:10:56:64:d4:f3:5f:fd:
55:aa:92:2e:9b:3a:1b:df:65:58:df:81:02:8b:ad:
c6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AA:2B:81:B1:CF:2E:13:B3:38:8C:73:65:92:AD:2D:54:0B:61:33
X509v3 Authority Key Identifier:
keyid:0F:40:42:1A:EF:D3:7A:9C:28:62:A8:50:04:E4:79:EF:21:F5:B6:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1089/D0BCGu_TepwoYqhQBOR57yH1tgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/D0BCGu_TepwoYqhQBOR57yH1tgg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1089/D0BCGu_TepwoYqhQBOR57yH1tgg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ca:6c:f9:a2:de:7d:05:4f:18:4a:06:fd:66:5a:4b:fc:15:
8c:6e:ba:08:a2:a9:60:eb:78:c5:c2:72:54:96:9c:3f:25:d0:
3c:e3:d1:cd:13:72:c0:df:4f:9c:eb:a8:a6:dd:dc:cd:d0:26:
0f:64:5c:12:c6:66:16:34:bd:b1:05:6f:2b:83:69:e5:45:6a:
3d:fb:c7:f1:c4:6d:12:24:79:0e:b5:83:29:df:1f:6f:71:0b:
4f:03:2b:75:50:8f:1b:24:62:f9:a0:3a:3d:96:22:c9:1d:45:
55:0a:5b:72:51:2a:07:82:6d:61:da:59:ab:99:3b:72:2e:5e:
f0:0f:75:be:3d:e7:5c:eb:a6:72:b1:69:6e:16:eb:2e:88:eb:
bb:89:5d:c8:64:bb:08:77:b0:39:09:e2:f7:b5:d0:3e:6d:4e:
b6:76:27:25:8d:b8:96:b2:14:ec:2d:6e:80:17:b6:a4:49:0e:
16:e2:52:0d:c8:2b:e2:a4:8e:82:70:7e:cc:ac:3a:f2:79:47:
ae:d1:f5:ca:06:e3:39:7b:b3:5e:62:bf:bc:41:10:83:66:c3:
e1:88:7f:68:08:c6:f4:f6:a4:fe:b7:21:2a:1a:58:e2:e0:19:
6a:9b:3f:7f:d0:fa:cf:61:fd:97:b0:0b:88:4a:d7:ae:1e:09:
08:4d:55:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:33 2025 by rpki-client