
Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft
File: 7JfpAsM6EGVBKiW96FhrxCFuOWI.mft (raw, json)
Hash identifier: 8FKJy2dIZs4g+FbhOT+OZ4FiX0bRri4dxsdkSrswvUo=
Subject key identifier: 63:8B:1F:B2:B0:BC:8D:C7:85:A1:67:18:71:61:35:54:C0:7E:F8:EA
Authority key identifier: EC:97:E9:02:C3:3A:10:65:41:2A:25:BD:E8:58:6B:C4:21:6E:39:62
Certificate issuer: /CN=EC97E902C33A1065412A25BDE8586BC4216E3962
Certificate serial: 1C0C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7JfpAsM6EGVBKiW96FhrxCFuOWI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft
Manifest number: 1C0C
Signing time: Fri 31 Jan 2025 15:26:11 +0000
Manifest this update: Fri 31 Jan 2025 15:26:11 +0000
Manifest next update: Fri 31 Jan 2025 21:26:11 +0000
Files and hashes: 1: 7JfpAsM6EGVBKiW96FhrxCFuOWI.crl (hash: HCstaiQqJBKn1aX332/CXXCgwgvThi3OptCy9e8hrtE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7180 (0x1c0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC97E902C33A1065412A25BDE8586BC4216E3962
Validity
Not Before: Jan 31 15:26:11 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=638B1FB2B0BC8DC785A1671871613554C07EF8EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:20:45:39:7a:52:f6:52:e2:42:7e:07:38:
42:f0:e3:50:25:dd:4c:90:03:c5:0a:86:eb:b5:3e:
0f:64:5e:f2:01:28:8c:79:da:4e:36:e1:e5:07:f7:
da:ba:7b:b3:0e:85:16:95:44:d9:f6:91:ef:6b:1e:
f6:4a:88:d6:5b:f9:f4:8d:d3:dc:02:51:15:c6:a7:
39:83:47:d2:6e:86:d8:56:03:43:d2:e9:4b:4c:c5:
64:92:4c:56:e4:3d:5a:25:e4:71:12:41:e9:fc:ba:
75:6c:b6:ca:e5:fa:22:23:e9:62:a6:40:c1:44:de:
0d:64:d6:fd:c6:4d:20:dc:60:8c:fb:d4:ba:d4:be:
34:e1:20:dd:73:47:8e:ca:14:30:01:d5:ed:af:0f:
b4:4f:e7:26:c3:b5:ad:b3:45:8b:f6:94:47:ec:5f:
52:d1:0f:72:61:56:40:94:a2:a2:70:aa:3b:ba:3b:
4a:33:79:0f:47:fe:56:6a:e4:aa:d3:25:94:34:24:
81:19:67:dc:27:f7:01:b3:0d:9b:0e:db:9f:7b:7a:
04:be:27:99:d7:eb:c1:a4:0c:4e:81:84:72:50:d5:
80:23:cc:08:32:57:d6:9e:ef:0f:e8:5a:90:06:43:
2a:9f:cc:77:d0:41:98:d1:52:9c:6b:35:59:93:02:
8e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8B:1F:B2:B0:BC:8D:C7:85:A1:67:18:71:61:35:54:C0:7E:F8:EA
X509v3 Authority Key Identifier:
keyid:EC:97:E9:02:C3:3A:10:65:41:2A:25:BD:E8:58:6B:C4:21:6E:39:62
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7JfpAsM6EGVBKiW96FhrxCFuOWI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:5f:5a:8d:78:c7:3e:fc:4b:af:92:b2:aa:a5:ce:21:25:9f:
a8:01:02:71:02:d7:31:c7:d5:b9:86:75:4a:95:1f:d2:f7:6b:
9f:0e:11:e7:e2:78:81:cc:88:56:4d:5d:b8:49:2c:4e:7d:6c:
ec:86:26:ac:b3:52:c7:8b:69:2d:4f:71:ed:06:87:fd:85:ed:
fe:1a:f2:df:8c:b1:b2:07:61:bc:ae:18:e3:39:3b:56:28:61:
c8:e9:b5:e8:27:ef:a1:c7:b7:2d:2d:11:1b:ad:08:83:ea:70:
b8:6f:0d:2b:3e:e2:e7:f0:58:b6:ae:3f:19:db:d0:83:93:8e:
76:89:7e:83:46:4f:07:5c:98:e6:08:dc:d2:c7:81:22:7a:2d:
e3:cb:e0:ef:6b:95:38:2c:e1:d3:8b:e5:08:19:0b:02:7f:bd:
de:d3:16:4f:a0:a0:49:5d:d6:05:b0:25:74:4a:cd:9a:4c:8a:
e1:ec:dd:65:5a:27:c7:d9:ba:5b:33:f8:56:87:03:9f:6a:7d:
0a:59:b2:84:7b:77:b9:68:be:82:40:d5:ae:89:70:67:d0:40:
ce:26:0d:7f:c1:62:8c:e3:92:3f:c6:df:be:01:14:c8:74:87:
fa:2d:12:be:6f:e1:3e:ee:be:12:e3:66:6a:d1:96:09:3e:6e:
6e:ff:8a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:47:57 2025 by rpki-client