Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2038/ngWjfokKtd79OHX80DVmocqs5DE.mft
File: ngWjfokKtd79OHX80DVmocqs5DE.mft (raw, json)
Hash identifier: CZuqauvkZC7lTgLKE7O+skqrSiCSCynTzAH9kIml29M=
Subject key identifier: AD:8F:28:FA:DC:90:41:A9:43:59:BD:9C:F1:BD:B2:90:21:9C:ED:12
Authority key identifier: 9E:05:A3:7E:89:0A:B5:DE:FD:38:75:FC:D0:35:66:A1:CA:AC:E4:31
Certificate issuer: /CN=9E05A37E890AB5DEFD3875FCD03566A1CAACE431
Certificate serial: 33E0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ngWjfokKtd79OHX80DVmocqs5DE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2038/ngWjfokKtd79OHX80DVmocqs5DE.mft
Manifest number: 33E0
Signing time: Fri 31 Jan 2025 15:30:13 +0000
Manifest this update: Fri 31 Jan 2025 15:30:13 +0000
Manifest next update: Fri 31 Jan 2025 21:30:13 +0000
Files and hashes: 1: ngWjfokKtd79OHX80DVmocqs5DE.crl (hash: 61bwWt3NFg56vTr1/4WzNbqqiHX9paUg1lHqfuIQ9z4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13280 (0x33e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E05A37E890AB5DEFD3875FCD03566A1CAACE431
Validity
Not Before: Jan 31 15:30:13 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=AD8F28FADC9041A94359BD9CF1BDB290219CED12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:88:29:7a:74:23:e7:4c:55:04:6f:43:93:
5f:d7:6a:33:25:f4:5a:82:55:02:13:a6:8f:d8:d1:
21:9a:46:f9:4f:51:ee:ec:4b:dd:59:3b:89:64:08:
1b:ed:36:0a:91:aa:28:a8:bb:f0:63:fc:6d:14:89:
a2:39:6f:8b:dd:73:b1:87:1c:7a:c3:81:11:f2:43:
fc:4c:8b:5b:c8:02:44:e1:04:57:0c:6d:86:1e:ee:
37:83:3c:44:ea:39:c6:86:5b:5c:5e:6b:29:85:8f:
4c:6b:60:7d:f2:7e:15:cb:b8:72:8a:e9:44:89:cd:
50:3d:8a:81:8c:14:13:f2:34:f3:10:fa:81:cb:f1:
ee:1a:b6:2b:f2:21:d2:e6:b7:a7:45:67:62:e9:09:
26:f0:73:14:2a:85:a2:f7:0d:79:31:c4:c7:9a:e0:
63:01:eb:61:b7:9c:59:61:80:43:30:6f:51:52:dc:
e9:11:ca:e0:b7:42:38:e9:fb:b6:53:79:15:51:e4:
04:50:f1:16:b5:ca:d5:f6:81:db:d4:41:c1:2d:c3:
0f:e4:08:5e:3a:4c:93:99:e8:4a:3a:b3:ef:df:bc:
31:cd:56:d8:15:cc:97:1c:b4:1e:2d:ab:70:e8:27:
bb:8c:1b:21:fa:85:53:b2:b0:c4:3e:35:f7:00:08:
b1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8F:28:FA:DC:90:41:A9:43:59:BD:9C:F1:BD:B2:90:21:9C:ED:12
X509v3 Authority Key Identifier:
keyid:9E:05:A3:7E:89:0A:B5:DE:FD:38:75:FC:D0:35:66:A1:CA:AC:E4:31
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2038/ngWjfokKtd79OHX80DVmocqs5DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ngWjfokKtd79OHX80DVmocqs5DE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2038/ngWjfokKtd79OHX80DVmocqs5DE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:63:04:56:b7:74:b1:66:91:da:78:59:85:0b:4a:15:66:83:
ff:dd:59:c5:a8:dd:80:7c:2f:01:f5:2b:2b:09:96:4d:89:f5:
a5:e3:8f:a8:7c:a0:70:2a:dc:c3:fa:3c:61:0b:46:0d:6c:64:
31:24:53:c4:bb:2e:9d:78:93:0c:27:60:11:01:6a:89:c2:1f:
9c:f3:30:83:c5:8b:63:b2:35:6d:78:c7:ad:38:da:66:af:97:
8a:44:99:55:b5:e7:72:3a:96:7b:ce:ca:11:31:b1:2d:3a:45:
8a:4b:4c:c0:f6:9e:78:ee:a8:77:f5:02:72:41:c0:75:bf:b3:
c1:09:c4:bc:df:8a:c1:b8:2a:89:69:ac:3f:d7:6e:9c:97:3c:
df:9d:a4:00:10:d5:49:11:c3:03:f3:b8:c4:70:dc:0b:39:da:
6c:b2:8c:9b:ef:aa:fd:f6:9a:be:ee:dd:d5:e7:de:76:09:d1:
57:cf:9e:af:49:bf:2b:c4:a9:c1:f0:62:38:56:73:d8:22:9b:
3a:30:a7:9e:83:c2:33:9d:f0:af:55:07:44:01:aa:11:b3:dd:
4a:02:55:00:15:dc:63:a1:7b:18:4c:21:14:2b:a8:4d:55:be:
ce:25:d4:3d:bc:03:c2:53:47:2e:9b:32:e2:e8:f2:ad:53:c1:
9b:b3:78:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:43:04 2025 by rpki-client