Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1382/IGM8jmnuaH1MQSPQwJea0UTlXrc.mft
File: IGM8jmnuaH1MQSPQwJea0UTlXrc.mft (raw, json)
Hash identifier: 0ynstP2NZc1JwQ8NSxgsLmB7P/A805L27jB9wOepLqM=
Subject key identifier: 8A:73:24:BA:58:30:A5:5C:DA:6E:BE:7C:2F:41:0F:BC:89:0A:40:04
Authority key identifier: 20:63:3C:8E:69:EE:68:7D:4C:41:23:D0:C0:97:9A:D1:44:E5:5E:B7
Certificate issuer: /CN=20633C8E69EE687D4C4123D0C0979AD144E55EB7
Certificate serial: 50B5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IGM8jmnuaH1MQSPQwJea0UTlXrc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1382/IGM8jmnuaH1MQSPQwJea0UTlXrc.mft
Manifest number: 50B5
Signing time: Fri 31 Jan 2025 15:24:29 +0000
Manifest this update: Fri 31 Jan 2025 15:24:29 +0000
Manifest next update: Fri 31 Jan 2025 21:24:29 +0000
Files and hashes: 1: IGM8jmnuaH1MQSPQwJea0UTlXrc.crl (hash: dsIQZ96AW/4SrZ3n6jogVRihjjZZG3p8/Cbb+kq4iUk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20661 (0x50b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20633C8E69EE687D4C4123D0C0979AD144E55EB7
Validity
Not Before: Jan 31 15:24:29 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8A7324BA5830A55CDA6EBE7C2F410FBC890A4004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ab:60:9d:02:16:1f:62:3c:eb:5a:2b:b6:b8:
f7:29:bc:cd:7e:af:3c:eb:15:1c:b0:23:41:af:c5:
a1:d6:bd:a2:51:84:8e:75:24:28:c9:8b:dd:10:55:
35:51:72:b6:86:35:dc:47:8c:55:85:96:be:e2:fd:
92:d3:8f:b8:ed:f7:23:02:ec:f3:6c:d0:12:fa:26:
b0:59:a5:a4:43:33:f9:1a:39:42:0b:97:62:9a:27:
bf:42:79:32:2e:9e:8c:d8:09:45:03:93:4a:6e:93:
07:69:53:64:bc:61:96:2b:44:51:5b:39:ef:45:97:
ec:47:cd:4c:55:99:99:1c:c0:b7:00:9f:0b:a2:80:
d7:da:2d:b8:f6:05:6c:ac:40:f9:fb:13:31:27:65:
99:a6:29:19:4e:50:8e:e3:87:01:9e:ea:2f:5f:12:
58:39:0e:95:61:f3:27:52:7a:a6:27:0c:c9:16:46:
53:d9:de:02:b1:93:64:46:17:37:f6:06:10:e0:a7:
94:6a:75:78:62:a3:fa:5b:41:e7:35:8d:53:a9:5b:
14:0f:cc:44:2f:09:4b:fc:2c:ac:c5:77:33:78:10:
c3:06:ed:f9:ef:e9:c0:ef:b4:9e:4f:82:f9:66:e4:
2d:37:53:91:e5:d4:0b:2c:14:74:0b:84:15:03:94:
d8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:73:24:BA:58:30:A5:5C:DA:6E:BE:7C:2F:41:0F:BC:89:0A:40:04
X509v3 Authority Key Identifier:
keyid:20:63:3C:8E:69:EE:68:7D:4C:41:23:D0:C0:97:9A:D1:44:E5:5E:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1382/IGM8jmnuaH1MQSPQwJea0UTlXrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IGM8jmnuaH1MQSPQwJea0UTlXrc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1382/IGM8jmnuaH1MQSPQwJea0UTlXrc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:7a:ed:36:45:ad:b4:eb:17:17:ce:33:6f:3a:93:a4:fd:db:
85:c1:1b:77:05:0c:fb:23:88:c2:6e:c3:b3:66:03:3b:86:7b:
52:b0:a6:96:77:91:bb:51:0f:0f:3a:13:5e:00:cc:43:db:3b:
3f:75:2b:6e:ec:7a:3c:00:d3:59:f4:72:6a:26:5d:6f:32:c1:
a7:ac:97:1b:a3:ac:75:cc:8b:27:0a:95:be:67:f9:5f:b4:2c:
d6:c9:fb:14:5a:09:7b:b1:5e:d3:0c:30:68:58:1d:1a:7e:a3:
50:7f:82:d3:94:12:2e:b5:82:bf:41:7f:fd:20:3f:18:31:59:
89:1b:86:d4:ed:7f:85:f6:90:2c:63:30:23:8b:66:46:76:8d:
60:48:c7:c9:14:8e:9c:6a:ef:76:93:d6:18:da:9f:14:f0:4d:
eb:dd:68:c2:47:e1:58:29:49:2d:41:d3:e7:8e:58:c9:33:85:
47:b5:b0:34:b4:32:3f:43:1b:01:78:34:e0:bc:8e:55:79:bd:
77:0c:e5:7d:31:9c:6d:04:0e:3f:e7:ae:24:29:36:21:40:e4:
d6:2a:1a:c6:c3:6c:78:6c:4b:11:91:c2:b2:ba:ba:a4:3e:b7:
c8:8f:2c:88:a0:bf:2f:e4:96:73:60:f0:1d:ba:7c:9b:02:ce:
2a:5d:a9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:56:13 2025 by rpki-client