Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft
File: IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft (raw, json)
Hash identifier: WB8Vr4Y+wmaV5xNxgwa1jnMDSVFvVOS6ldK8Ac6ozIY=
Subject key identifier: 8F:67:08:B2:47:68:C9:A1:4D:5B:C9:B9:3B:5E:04:D0:CB:88:51:39
Authority key identifier: 23:32:0A:4B:AF:0A:F9:31:35:30:EC:99:D3:68:64:33:70:3E:07:1F
Certificate issuer: /CN=23320A4BAF0AF9313530EC99D3686433703E071F
Certificate serial: 1F26
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzIKS68K-TE1MOyZ02hkM3A-Bx8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft
Manifest number: 1F14
Signing time: Fri 31 Jan 2025 15:28:49 +0000
Manifest this update: Fri 31 Jan 2025 15:28:49 +0000
Manifest next update: Fri 31 Jan 2025 21:28:49 +0000
Files and hashes: 1: IzIKS68K-TE1MOyZ02hkM3A-Bx8.crl (hash: GSEtrIAaS/0EQsRmk3o0PslUZYZrzRIEL6G/3KgXrik=)
2: noTTkGKBBA0IiF1s9t5qUE627a8.roa (hash: 7atMi/MrgnmN/IZ16hRnHqf3SP1bFaVyEPj4clXkIuM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7974 (0x1f26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23320A4BAF0AF9313530EC99D3686433703E071F
Validity
Not Before: Jan 31 15:28:49 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8F6708B24768C9A14D5BC9B93B5E04D0CB885139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:aa:75:54:3b:4a:b7:b6:b1:9b:96:0e:b2:
44:eb:c9:95:cf:2a:16:e8:ac:69:9c:59:10:60:de:
9e:f5:06:1f:2f:65:02:b9:44:52:cb:c0:c6:27:9d:
f2:fe:6e:24:5f:b6:c3:1f:23:63:b4:b7:e0:16:28:
4c:fb:88:23:b0:d6:b5:62:95:91:7e:a1:f3:c6:30:
62:5d:ce:0a:45:0e:3c:af:83:73:9f:b1:1e:3a:79:
40:98:40:37:4a:bc:89:d7:3e:f8:90:28:e9:51:86:
b3:a6:36:13:55:5f:cc:08:42:d3:3d:a0:4b:55:6d:
75:a4:1b:bf:32:31:c1:ff:8b:84:90:45:ce:ba:0e:
0d:b4:cf:51:31:40:a7:f9:46:0b:06:67:86:f1:7f:
bd:94:2a:ce:ce:e0:e4:0a:01:eb:79:12:e3:74:0f:
2c:9a:d6:fe:0c:07:bf:2b:b7:bf:92:37:47:cd:db:
14:13:7a:cb:5b:3f:46:ba:2d:91:3a:e7:1f:dd:47:
0b:d5:90:f4:cb:00:47:88:22:c9:d6:72:2c:69:a4:
90:13:97:78:59:20:80:1e:c0:b7:b2:e0:34:01:e3:
ce:e3:92:f7:aa:f0:83:a7:55:f5:b8:30:7c:fb:7a:
7f:1a:47:b2:98:42:cc:c5:8f:80:8e:1a:77:44:f2:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:67:08:B2:47:68:C9:A1:4D:5B:C9:B9:3B:5E:04:D0:CB:88:51:39
X509v3 Authority Key Identifier:
keyid:23:32:0A:4B:AF:0A:F9:31:35:30:EC:99:D3:68:64:33:70:3E:07:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzIKS68K-TE1MOyZ02hkM3A-Bx8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ff:34:72:03:26:01:13:98:02:2e:87:4a:d0:c4:90:77:88:
1a:80:b9:dc:4f:83:65:4d:07:74:a5:8c:69:4b:2b:a1:d3:60:
d4:3f:d0:be:56:7f:46:af:5f:d2:cf:47:cf:4e:10:46:6c:73:
db:95:e2:ca:b3:7f:c0:af:96:ac:f8:be:d2:2b:c8:16:dd:4d:
86:8f:2e:d0:f6:66:37:a0:fb:db:5d:4a:dd:98:f0:6d:89:72:
b9:80:58:65:1c:6d:2e:69:86:48:88:ce:60:89:63:9c:22:16:
ef:98:63:27:e2:5f:82:c8:8e:6b:40:22:f0:1a:fe:89:f6:6e:
43:30:f5:04:43:c8:13:ec:e1:98:6a:ac:4e:31:a2:6c:1f:e8:
30:8d:ba:1a:e0:ed:e3:df:bc:59:4c:40:6c:a2:6d:93:03:6b:
b1:24:b8:bc:13:80:e9:fa:f9:2d:6e:e6:a3:77:32:2b:98:4c:
a1:8a:5d:4a:7c:80:ae:65:ef:e1:81:de:87:db:65:9b:1f:86:
05:89:9f:dc:92:da:ac:f6:10:1c:7b:37:29:fd:93:b8:82:3d:
16:87:e8:08:7a:ff:4f:a4:6e:04:12:25:d1:1d:13:ab:6d:da:
e4:68:2c:9e:75:74:57:6e:b5:84:b1:25:73:7e:12:17:2e:64:
bc:fe:7d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:44:17 2025 by rpki-client