Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2194/H0KZtN2x5o2pD3vH9DoGLtFhAgU.mft
File: H0KZtN2x5o2pD3vH9DoGLtFhAgU.mft (raw, json)
Hash identifier: MF01dCeK5Kf2PSF71BLzcJfI212yHJnhXpokYX5kEqA=
Subject key identifier: 0A:19:6E:AC:D1:B8:44:54:47:9C:1D:BF:E9:BB:D3:BF:36:13:FC:C4
Authority key identifier: 1F:42:99:B4:DD:B1:E6:8D:A9:0F:7B:C7:F4:3A:06:2E:D1:61:02:05
Certificate issuer: /CN=1F4299B4DDB1E68DA90F7BC7F43A062ED1610205
Certificate serial: 1C13
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H0KZtN2x5o2pD3vH9DoGLtFhAgU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2194/H0KZtN2x5o2pD3vH9DoGLtFhAgU.mft
Manifest number: 1C13
Signing time: Fri 31 Jan 2025 15:25:27 +0000
Manifest this update: Fri 31 Jan 2025 15:25:27 +0000
Manifest next update: Fri 31 Jan 2025 21:25:27 +0000
Files and hashes: 1: H0KZtN2x5o2pD3vH9DoGLtFhAgU.crl (hash: Cb0lX2PTpeGQQMRGtgN1tOb5acyfZ23VyZT8JllKK4A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7187 (0x1c13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F4299B4DDB1E68DA90F7BC7F43A062ED1610205
Validity
Not Before: Jan 31 15:25:27 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0A196EACD1B84454479C1DBFE9BBD3BF3613FCC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:aa:de:67:c6:ca:3c:d6:01:4b:26:20:ce:02:
0b:8d:cc:b9:e3:f2:49:51:b3:81:fa:99:bc:76:18:
3d:a1:d4:5f:9d:34:29:57:e6:f3:eb:67:8f:fb:b0:
44:3e:82:d7:60:31:f3:19:59:30:15:0c:8f:99:22:
71:4d:70:47:51:fd:55:52:3f:f0:3b:b9:26:58:0c:
69:be:1b:8c:7a:79:32:a4:58:d1:56:c5:68:e3:4c:
46:a2:61:31:45:63:36:a5:c2:bb:cc:b0:52:aa:5e:
f8:be:5d:b5:dd:52:00:ba:d6:36:c0:23:4e:41:f2:
ad:0b:b2:14:52:b5:7b:e9:46:ae:59:53:c1:6c:8f:
46:ae:9b:9a:12:20:6e:df:5a:19:88:1b:b6:f1:0f:
87:bf:62:9a:02:d2:b6:67:bd:41:e8:ce:0f:02:33:
05:e3:00:7e:51:34:2b:27:d7:a0:72:a8:cb:f8:ee:
ec:cc:ed:cf:e5:34:aa:6c:46:11:be:1b:21:4a:35:
c8:88:8a:7f:dc:08:6a:a6:6e:4e:f0:2a:7c:d3:50:
5b:d5:50:cb:75:ea:af:82:5e:aa:73:72:d3:ca:24:
25:82:5a:f0:ec:b8:71:cf:5c:ce:8f:3f:62:e9:a6:
87:65:1f:4b:35:c6:0e:0b:ab:e4:ef:cc:ad:5f:30:
10:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:19:6E:AC:D1:B8:44:54:47:9C:1D:BF:E9:BB:D3:BF:36:13:FC:C4
X509v3 Authority Key Identifier:
keyid:1F:42:99:B4:DD:B1:E6:8D:A9:0F:7B:C7:F4:3A:06:2E:D1:61:02:05
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2194/H0KZtN2x5o2pD3vH9DoGLtFhAgU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H0KZtN2x5o2pD3vH9DoGLtFhAgU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2194/H0KZtN2x5o2pD3vH9DoGLtFhAgU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:f3:f1:64:d9:96:56:33:32:22:ef:91:17:3e:d1:c7:98:ef:
72:e1:10:a2:62:7c:13:93:49:e9:b4:83:4c:7b:2f:ac:a1:84:
df:db:e7:ea:26:1a:dc:44:a5:c0:e3:55:26:cb:db:d0:33:f2:
ba:8b:00:e4:d4:9a:c8:ff:ed:b1:0e:76:33:49:6e:b1:b3:e7:
2a:db:9d:f6:1c:53:c9:0c:e7:04:91:9f:99:ce:94:8c:e0:8d:
c5:d0:38:03:a9:ba:c5:81:17:15:04:5f:e6:ab:71:26:4a:6e:
f7:2d:09:b8:a2:6d:0a:26:2e:d7:74:22:45:a1:d9:cb:19:cd:
8c:96:07:be:74:3c:86:53:4a:49:59:63:5b:b9:2f:fa:56:8e:
8a:69:cf:f8:f9:43:90:7a:60:4e:b1:7b:9a:32:49:f7:ae:b1:
1a:a6:0b:fb:2b:83:2f:f0:fb:01:e3:2b:dd:ee:8b:5f:04:7c:
56:31:58:b0:5d:98:f8:8d:8d:00:64:83:80:b9:d6:12:21:39:
50:19:77:50:96:48:db:e1:79:e3:6d:e8:da:66:d0:7c:66:67:
70:4f:e5:4a:36:b6:76:6e:2b:df:53:ea:7e:ab:e3:58:83:23:
84:64:44:0d:31:96:28:ec:71:dd:b0:94:bb:27:80:61:49:44:
03:a0:89:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:41:27 2025 by rpki-client