Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.mft
File: MJKoL3qXmI6MCVRjrbtR4JNZKMg.mft (raw, json)
Hash identifier: HGwkSpNuk93+Nvv8UNvd4jSrNfQc8PfGxGTur0gNHDE=
Subject key identifier: 8B:D1:49:FA:A3:45:06:BA:EA:3C:D7:B0:DD:6C:D5:55:D5:41:37:D3
Authority key identifier: 30:92:A8:2F:7A:97:98:8E:8C:09:54:63:AD:BB:51:E0:93:59:28:C8
Certificate issuer: /CN=3092A82F7A97988E8C095463ADBB51E0935928C8
Certificate serial: 1C4B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJKoL3qXmI6MCVRjrbtR4JNZKMg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.mft
Manifest number: 1C4B
Signing time: Fri 31 Jan 2025 15:25:45 +0000
Manifest this update: Fri 31 Jan 2025 15:25:45 +0000
Manifest next update: Fri 31 Jan 2025 21:25:45 +0000
Files and hashes: 1: MJKoL3qXmI6MCVRjrbtR4JNZKMg.crl (hash: nMklySkZEs9GKQpaorSPkikx48tiadqi5fOJ+lBVSqc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7243 (0x1c4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3092A82F7A97988E8C095463ADBB51E0935928C8
Validity
Not Before: Jan 31 15:25:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8BD149FAA34506BAEA3CD7B0DD6CD555D54137D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a2:a4:79:8d:d5:c4:67:68:c9:c0:3a:e0:58:
96:cf:25:3e:4b:cc:36:e5:71:33:1f:56:80:9d:56:
51:9a:7a:7c:22:fd:44:62:ba:94:b1:91:1a:88:ac:
d0:2d:dd:e1:ee:da:44:90:65:f3:cf:eb:63:68:29:
14:fb:fa:d5:fb:c8:d8:29:86:41:fa:06:66:7c:9b:
d5:3f:88:10:5f:c0:b4:51:66:07:29:ea:63:11:77:
90:0c:ce:4b:05:fe:2d:6f:c6:e3:ca:aa:e3:91:3c:
a4:cf:09:0d:a3:f0:d1:03:18:f1:1c:d7:33:69:e4:
6a:54:be:9a:74:b8:da:97:28:0a:5b:60:7e:ae:0d:
4f:fb:52:89:d0:83:9a:5b:db:1b:2f:f9:6c:83:a3:
d4:eb:48:b5:bd:6d:b9:40:0b:17:65:5d:42:a1:c5:
c1:97:72:79:58:98:25:43:7e:5a:99:99:8d:03:67:
99:a9:0c:49:2f:82:3e:3c:ef:2d:1f:e7:7d:01:13:
49:2a:c1:d1:e5:e6:f5:3b:97:f1:0c:49:9a:fe:4d:
cc:d5:2e:74:ab:e5:f7:5b:63:06:86:df:c8:75:98:
6e:7a:ee:a1:aa:0b:65:e7:8c:78:83:60:07:32:4a:
a3:ce:13:65:12:a4:d5:6a:a2:4a:f4:e1:35:3f:d5:
0d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D1:49:FA:A3:45:06:BA:EA:3C:D7:B0:DD:6C:D5:55:D5:41:37:D3
X509v3 Authority Key Identifier:
keyid:30:92:A8:2F:7A:97:98:8E:8C:09:54:63:AD:BB:51:E0:93:59:28:C8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJKoL3qXmI6MCVRjrbtR4JNZKMg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:83:34:98:65:8d:09:3c:c5:ac:c1:7d:0e:30:af:73:ef:16:
97:31:1a:29:7f:8c:0b:b0:9f:9b:23:64:25:8b:1a:7b:5b:2f:
8d:14:78:3f:03:c5:59:83:ae:1c:fa:98:a6:6c:8e:e2:05:24:
12:d2:82:35:ed:a5:c8:a0:75:72:30:57:38:d9:60:44:c6:fd:
6a:31:e4:9f:e4:22:06:6f:62:a1:43:3f:f6:39:51:82:8f:f2:
c0:17:c6:bf:8c:35:60:4b:a2:e7:5c:f9:99:38:4e:8a:1f:46:
0b:d7:8d:0a:1e:7a:a9:29:72:7b:4a:a9:b9:d6:6c:3b:cd:c8:
0b:dd:84:ac:16:1c:a9:33:48:03:27:d0:da:dd:2a:0c:15:6c:
06:5f:05:fd:6b:bb:99:c2:ed:96:ce:0c:c4:05:5d:c7:26:ca:
5d:3c:18:bb:68:28:20:de:6e:50:3b:53:dc:86:ee:e9:bf:bb:
12:97:32:a3:0c:33:63:0e:c7:58:c0:4c:6d:fe:85:a5:af:67:
5b:09:e4:de:c2:53:a2:5f:d8:29:67:2f:f1:08:b2:84:da:e2:
31:f6:41:18:ec:88:52:39:30:12:8e:9b:d9:d5:ae:25:dd:bc:
c4:6b:e6:81:64:a8:db:f9:a0:87:19:72:80:4b:11:1a:5e:c7:
d2:c1:47:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:30 2025 by rpki-client