Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1239/JPjms6PCZmAzB5fwXYfRbCXjEMg.mft
File: JPjms6PCZmAzB5fwXYfRbCXjEMg.mft (raw, json)
Hash identifier: tKxxbS4z+b4wKcYrZUnOv04CR5UWuV7sBvi9ycdLht0=
Subject key identifier: F1:6A:13:E1:CE:56:D7:F3:BC:AC:96:AB:F4:BE:60:12:51:42:2C:6E
Authority key identifier: 24:F8:E6:B3:A3:C2:66:60:33:07:97:F0:5D:87:D1:6C:25:E3:10:C8
Certificate issuer: /CN=24F8E6B3A3C26660330797F05D87D16C25E310C8
Certificate serial: 12DF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JPjms6PCZmAzB5fwXYfRbCXjEMg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1239/JPjms6PCZmAzB5fwXYfRbCXjEMg.mft
Manifest number: 12DF
Signing time: Fri 31 Jan 2025 15:27:00 +0000
Manifest this update: Fri 31 Jan 2025 15:27:00 +0000
Manifest next update: Fri 31 Jan 2025 21:27:00 +0000
Files and hashes: 1: JPjms6PCZmAzB5fwXYfRbCXjEMg.crl (hash: iAKM0ADVYKjVX6x5w10NsLqIO7q1WeKqA07JlzxVnfk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4831 (0x12df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24F8E6B3A3C26660330797F05D87D16C25E310C8
Validity
Not Before: Jan 31 15:27:00 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F16A13E1CE56D7F3BCAC96ABF4BE601251422C6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:80:47:30:ae:48:e3:fd:af:ec:ba:0c:1e:57:
c7:65:e7:1c:b2:c4:6c:df:12:61:20:70:aa:f0:d2:
6c:4d:f5:f8:d8:72:c8:3e:a5:66:1f:bd:e7:32:91:
55:06:b1:a1:72:be:5b:3a:45:4e:d5:29:c1:d3:79:
5f:67:40:de:39:72:89:85:33:ec:3c:f1:af:92:41:
0b:71:ca:59:44:9a:ed:38:7d:dc:76:6c:27:47:42:
14:b1:a0:87:31:8a:4b:a8:cf:27:08:e9:f0:11:ae:
38:61:d5:80:6b:f5:fd:11:71:42:db:1f:64:06:40:
7e:d6:bf:59:4a:85:45:92:7e:1e:d1:ad:43:17:d0:
70:15:82:24:be:6c:37:ea:6c:00:b4:16:60:6a:ed:
f1:08:8f:93:33:f9:f3:bf:69:84:c3:e7:7c:68:49:
89:da:47:4a:06:16:f1:3d:76:ac:4c:0a:53:15:95:
0c:70:07:2c:12:76:04:46:db:e2:3c:95:9b:06:0b:
c7:31:d6:a4:7c:b1:63:a8:9a:c4:9f:7f:0c:37:9e:
ae:f7:32:6e:7f:de:45:24:4c:6c:7a:aa:bf:9b:17:
a1:90:59:ec:3a:b7:18:90:70:15:6f:06:40:62:9c:
aa:96:05:a9:58:88:6b:6e:72:8a:61:c4:99:ba:eb:
25:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6A:13:E1:CE:56:D7:F3:BC:AC:96:AB:F4:BE:60:12:51:42:2C:6E
X509v3 Authority Key Identifier:
keyid:24:F8:E6:B3:A3:C2:66:60:33:07:97:F0:5D:87:D1:6C:25:E3:10:C8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1239/JPjms6PCZmAzB5fwXYfRbCXjEMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JPjms6PCZmAzB5fwXYfRbCXjEMg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1239/JPjms6PCZmAzB5fwXYfRbCXjEMg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:57:ae:30:b1:be:a2:b5:22:2e:8b:a9:92:ea:57:89:ee:db:
94:f5:33:c2:7e:1f:ba:41:74:da:87:4e:d4:45:db:24:b2:10:
53:92:b3:54:e2:30:58:78:bd:78:b4:5b:75:6f:ef:c6:9c:7a:
13:07:f1:0d:5b:5c:72:90:f5:af:da:9a:10:c1:07:13:b5:29:
2b:f3:44:6d:40:de:71:14:1a:88:b8:6d:97:08:aa:c4:7e:a3:
e7:89:7b:bc:31:cf:c3:e3:9b:88:75:e4:8d:96:fd:c9:c8:b5:
db:f1:aa:4f:10:29:60:d6:b0:b9:f9:c6:d1:20:d8:0e:fd:db:
92:89:ba:8f:1c:2e:55:37:0e:e8:ad:83:83:2b:4f:1d:82:24:
50:64:a8:ac:dc:60:f7:03:2a:d3:ce:4e:f9:ce:63:1e:99:d8:
0a:4e:f0:7d:eb:f5:3b:30:9c:67:d5:4b:ed:ef:76:f0:96:38:
89:f8:6b:b0:db:b6:5e:e9:5b:00:e1:e6:1a:d4:13:4b:29:fa:
37:9a:1d:3d:ca:0d:93:7d:a8:3b:fb:56:e6:26:ee:61:55:71:
41:e8:cf:49:40:fa:2e:f9:1a:e3:40:de:a9:9e:33:67:db:c7:
34:2e:7e:e1:50:8e:5a:d1:95:52:cb:39:aa:22:f9:e0:6c:33:
37:e6:8e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:36:26 2025 by rpki-client