Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2603/j8bT0KCdtS6j3sDSb1SdXxGqOWM.mft
File: j8bT0KCdtS6j3sDSb1SdXxGqOWM.mft (raw, json)
Hash identifier: i0YIqg7PtbAxHDsXa8w0jiwrnhK6UiORl/KLiZsjU7M=
Subject key identifier: 4F:E2:C1:B7:B3:09:50:13:64:74:2C:B0:B0:2E:59:23:C3:13:D0:69
Authority key identifier: 8F:C6:D3:D0:A0:9D:B5:2E:A3:DE:C0:D2:6F:54:9D:5F:11:AA:39:63
Certificate issuer: /CN=8FC6D3D0A09DB52EA3DEC0D26F549D5F11AA3963
Certificate serial: 1BC9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j8bT0KCdtS6j3sDSb1SdXxGqOWM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/j8bT0KCdtS6j3sDSb1SdXxGqOWM.mft
Manifest number: 1BC9
Signing time: Fri 31 Jan 2025 15:28:42 +0000
Manifest this update: Fri 31 Jan 2025 15:28:42 +0000
Manifest next update: Fri 31 Jan 2025 21:28:42 +0000
Files and hashes: 1: j8bT0KCdtS6j3sDSb1SdXxGqOWM.crl (hash: 6aolUTfB9TjtNWsKX76RPBTzjRYxVzcrYiu07arYg6Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7113 (0x1bc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC6D3D0A09DB52EA3DEC0D26F549D5F11AA3963
Validity
Not Before: Jan 31 15:28:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4FE2C1B7B309501364742CB0B02E5923C313D069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:5a:23:eb:8f:71:c8:f2:cc:e5:03:c1:0d:
00:4a:8f:92:e8:f0:30:fb:8b:7d:85:85:3e:8c:d7:
e5:ca:b1:b6:b4:a1:3f:03:5b:9a:08:6a:87:21:cb:
fd:97:fd:09:f2:99:89:96:5b:b5:83:62:36:87:7d:
53:c0:fa:66:50:ee:d8:b2:0c:ab:19:7d:41:c2:cc:
66:3c:8d:84:8e:44:a3:22:e1:64:11:22:85:72:26:
d0:74:17:3f:e5:1a:4e:c7:cc:91:a1:6d:c6:43:65:
e0:e2:f9:f9:5a:0c:16:57:fa:d8:f9:7a:88:cc:c6:
48:06:62:80:7a:f1:6b:ad:c2:81:51:87:f4:1a:69:
d8:5d:80:3f:ce:4e:d9:20:2d:ba:ed:a1:33:51:72:
eb:c7:7d:2a:b8:d1:45:9e:6a:6d:9f:63:67:53:08:
39:1c:39:77:4d:d2:36:77:41:69:ec:ee:53:78:5b:
07:21:17:78:51:25:5d:ed:0c:0b:15:2e:fe:4f:f0:
4a:73:1d:82:96:8d:54:f3:4a:9d:84:c2:de:eb:aa:
0d:3c:59:23:d5:0f:6f:67:d8:11:8e:39:1e:19:34:
09:07:30:d1:50:53:52:26:29:e7:e9:8d:73:40:9c:
3b:4f:e2:e7:43:12:49:18:e3:9b:40:f1:3a:db:85:
51:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E2:C1:B7:B3:09:50:13:64:74:2C:B0:B0:2E:59:23:C3:13:D0:69
X509v3 Authority Key Identifier:
keyid:8F:C6:D3:D0:A0:9D:B5:2E:A3:DE:C0:D2:6F:54:9D:5F:11:AA:39:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/j8bT0KCdtS6j3sDSb1SdXxGqOWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j8bT0KCdtS6j3sDSb1SdXxGqOWM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/j8bT0KCdtS6j3sDSb1SdXxGqOWM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:16:86:db:1e:83:72:a1:e5:30:41:6d:8d:1a:22:ea:dd:99:
dd:60:11:1f:80:f4:13:7a:26:71:8b:01:16:66:94:4c:24:ef:
f3:7b:b8:4f:f2:7d:6a:d4:61:fd:87:a4:b5:0e:f3:b5:3c:dd:
ee:af:04:c4:21:9e:6e:ea:de:df:04:d3:74:ef:7b:22:4b:09:
7f:9c:60:de:3b:0a:af:82:47:58:89:8f:92:ab:97:26:28:87:
24:36:97:5e:fa:14:42:93:df:ac:f7:69:ba:ba:c6:31:a0:a0:
60:d6:40:c1:66:27:84:d6:9b:0e:e6:8e:bf:49:e9:7d:d9:be:
94:7e:fc:0d:d2:7d:b9:c6:79:70:1e:dc:f4:7d:0b:ba:9a:8d:
db:d0:e2:7d:7b:a3:f5:5b:6b:c5:0c:c8:bd:c2:a8:5a:64:f1:
c8:d8:3c:8b:02:a2:98:21:37:04:36:41:2c:df:d4:05:4b:89:
15:23:1c:c4:1c:43:03:d1:95:29:81:8f:64:5d:50:1d:26:f6:
23:5d:14:52:db:d5:dd:8a:3a:66:06:da:84:ac:e6:a4:3a:37:
2c:73:83:56:9d:d9:4b:08:b3:d8:80:8e:59:1c:06:53:2b:ad:
5f:52:64:ac:83:39:de:3b:27:b5:c4:db:a5:9f:b8:4b:65:ef:
d2:5a:1c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:48:52 2025 by rpki-client