Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2330/NxT4EtSpDicn7ABvXkzukIk0r3g.mft
File: NxT4EtSpDicn7ABvXkzukIk0r3g.mft (raw, json)
Hash identifier: kKo0rn74PXbrJuHq0OPn3iiiJ+B4CCsSWkJ7EuHNQcU=
Subject key identifier: D4:72:7B:D1:54:0D:F9:B6:C4:FC:C1:74:C4:0A:00:22:80:30:2B:DA
Authority key identifier: 37:14:F8:12:D4:A9:0E:27:27:EC:00:6F:5E:4C:EE:90:89:34:AF:78
Certificate issuer: /CN=3714F812D4A90E2727EC006F5E4CEE908934AF78
Certificate serial: 1AD2
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NxT4EtSpDicn7ABvXkzukIk0r3g.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2330/NxT4EtSpDicn7ABvXkzukIk0r3g.mft
Manifest number: 1AD2
Signing time: Fri 31 Jan 2025 14:24:12 +0000
Manifest this update: Fri 31 Jan 2025 14:24:12 +0000
Manifest next update: Fri 31 Jan 2025 20:24:12 +0000
Files and hashes: 1: NxT4EtSpDicn7ABvXkzukIk0r3g.crl (hash: L7PzXu9YLh5Rh1tzHtjjuRNc72LElQiNLIkbduUJTLA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6866 (0x1ad2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3714F812D4A90E2727EC006F5E4CEE908934AF78
Validity
Not Before: Jan 31 14:24:12 2025 GMT
Not After : Sep 27 02:44:34 2025 GMT
Subject: CN=D4727BD1540DF9B6C4FCC174C40A002280302BDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:3b:6c:95:b3:19:b9:3c:7f:39:15:f1:fd:
b5:9a:0d:ba:0a:83:cf:0b:a9:32:4a:ca:fd:8f:1b:
6f:47:00:29:45:8d:60:ee:28:18:fd:d7:fb:7f:64:
ef:7e:1a:0a:cf:8c:34:ba:5b:61:b5:06:1f:0b:0d:
e3:bc:71:9b:9c:a1:a8:2c:7b:f9:40:62:42:f9:7a:
bb:ef:ee:7b:87:00:71:3b:9d:88:82:03:e1:31:35:
45:68:19:50:53:82:cf:b2:98:1d:7d:9b:ea:4e:fd:
e0:a5:fc:fc:e8:78:8f:1e:bc:32:20:2e:38:36:d5:
9b:80:27:94:10:10:57:d4:8f:1e:eb:a2:1e:a4:4e:
25:cf:74:bb:2f:a0:63:d9:e0:46:f0:ea:a8:3f:0f:
a6:15:6a:18:76:b1:18:10:34:b2:12:65:9a:8e:24:
55:5c:e4:42:15:ac:20:09:ac:fd:4c:d9:e4:ae:f9:
cf:6d:24:a6:9e:58:90:f9:7c:bf:53:a1:79:36:b5:
b6:5f:4d:61:ac:0b:4e:c0:02:8d:ed:02:71:78:51:
30:c9:c9:fe:b6:8c:43:03:1e:8c:21:e5:3a:c1:50:
8e:02:c4:07:e4:5a:c2:d7:3e:c3:0d:16:fd:ef:36:
d7:b2:a6:7c:43:3b:d4:c0:9e:5d:4e:17:63:ec:3a:
b3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:72:7B:D1:54:0D:F9:B6:C4:FC:C1:74:C4:0A:00:22:80:30:2B:DA
X509v3 Authority Key Identifier:
keyid:37:14:F8:12:D4:A9:0E:27:27:EC:00:6F:5E:4C:EE:90:89:34:AF:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2330/NxT4EtSpDicn7ABvXkzukIk0r3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NxT4EtSpDicn7ABvXkzukIk0r3g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2330/NxT4EtSpDicn7ABvXkzukIk0r3g.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ca:9f:3f:26:c5:43:ff:44:eb:96:09:db:7c:f8:db:28:2e:
22:6a:fd:eb:87:54:80:f0:0c:40:23:e8:29:fa:08:89:12:7e:
4b:8f:67:05:c5:f5:65:c4:d5:6e:09:e2:41:db:52:be:b6:52:
40:64:5a:56:47:9b:21:29:36:24:b8:df:d1:c9:f0:0f:af:ca:
8a:b2:9a:f1:c5:ae:86:46:e7:e0:d0:ce:ca:24:5f:db:13:eb:
38:75:fd:3d:e1:32:95:ae:ce:4a:ac:98:25:c3:b1:ec:d8:4c:
b5:68:39:ed:fb:df:89:75:d1:f7:19:6c:81:4f:87:e3:46:d0:
8c:ac:79:8d:db:c3:7f:6e:28:eb:9a:72:b5:4f:10:8e:7e:2f:
a5:65:5c:e1:81:e1:9a:64:f8:60:59:08:18:eb:d5:09:e7:a6:
0b:c5:59:8d:2d:90:6e:8b:35:2e:1b:4a:ec:7c:b6:47:4c:4d:
6e:21:48:a9:82:25:73:df:06:cd:ce:f4:5c:5b:e6:5a:f9:64:
7d:66:a6:dd:63:17:27:0e:bf:b8:b5:fa:6c:bd:64:31:4c:6b:
96:ae:18:46:da:7d:fc:e2:fb:33:5a:51:90:b4:f3:59:29:c5:
4c:3f:be:20:43:04:39:a1:17:e8:16:7f:4b:cc:77:1a:b7:f4:
6b:ef:8e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:46:54 2025 by rpki-client