Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2674/7lk_rFPTQyBXbYgPZFcGz7eXwjE.mft
File: 7lk_rFPTQyBXbYgPZFcGz7eXwjE.mft (raw, json)
Hash identifier: hVYn1I5iC66Adk4yk58GiUiYCamc0RjXNrFJFH4ZaXg=
Subject key identifier: EF:37:70:35:CD:48:28:EB:97:F2:9B:51:35:BD:5E:32:05:8F:A8:AB
Authority key identifier: EE:59:3F:AC:53:D3:43:20:57:6D:88:0F:64:57:06:CF:B7:97:C2:31
Certificate issuer: /CN=EE593FAC53D34320576D880F645706CFB797C231
Certificate serial: 12F5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7lk_rFPTQyBXbYgPZFcGz7eXwjE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2674/7lk_rFPTQyBXbYgPZFcGz7eXwjE.mft
Manifest number: 12F5
Signing time: Fri 31 Jan 2025 15:24:37 +0000
Manifest this update: Fri 31 Jan 2025 15:24:37 +0000
Manifest next update: Fri 31 Jan 2025 21:24:37 +0000
Files and hashes: 1: 7lk_rFPTQyBXbYgPZFcGz7eXwjE.crl (hash: pw82T6rn+hW7CXiak4FAjBS6YzOYPWt3hzO/biP6i0o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4853 (0x12f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE593FAC53D34320576D880F645706CFB797C231
Validity
Not Before: Jan 31 15:24:37 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=EF377035CD4828EB97F29B5135BD5E32058FA8AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7a:bf:77:ad:54:e0:34:e4:4e:36:af:14:ce:
08:ce:e3:b2:8a:ad:69:d2:f0:a8:3c:ae:ce:04:40:
03:34:23:74:f8:0f:af:be:01:1f:81:09:34:89:c3:
41:92:4d:4f:da:c8:d6:11:e3:9d:8a:f8:0e:df:d4:
7a:7e:25:4e:1e:72:d4:dc:e2:09:f6:87:8b:d6:58:
5a:7e:ff:5a:ff:f0:87:0b:bc:6d:ae:16:13:f0:47:
8b:63:2d:1f:22:96:01:d9:2f:d4:85:9b:4a:a7:83:
82:4c:36:99:00:2a:e3:7f:fa:f1:c9:25:8a:70:36:
4e:a1:35:1c:c4:69:fe:f5:98:19:9d:f1:59:d2:a4:
ff:59:fa:08:2a:b7:1b:18:6e:90:1d:5c:d7:5e:ab:
ea:59:9b:1e:49:47:f8:76:b2:1a:86:63:0d:b7:7c:
3e:05:bd:ef:f8:fd:f3:12:c9:5a:7c:ed:a7:2e:a4:
d5:2c:fd:09:41:57:3b:70:53:f7:07:63:a7:f8:26:
59:0f:25:dc:79:3f:1d:32:b7:8a:a0:eb:ca:1c:e9:
8a:62:6b:de:9a:71:cb:36:33:7e:4f:a7:f8:c8:c7:
3a:f9:12:11:cd:9d:d6:59:65:33:c4:31:f7:f3:b0:
50:4c:8e:b0:cd:1a:d2:c1:cd:0b:fe:53:08:3a:ea:
2e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:37:70:35:CD:48:28:EB:97:F2:9B:51:35:BD:5E:32:05:8F:A8:AB
X509v3 Authority Key Identifier:
keyid:EE:59:3F:AC:53:D3:43:20:57:6D:88:0F:64:57:06:CF:B7:97:C2:31
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2674/7lk_rFPTQyBXbYgPZFcGz7eXwjE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7lk_rFPTQyBXbYgPZFcGz7eXwjE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2674/7lk_rFPTQyBXbYgPZFcGz7eXwjE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:18:b2:83:81:e0:09:02:53:80:d7:14:71:97:69:86:b8:79:
b5:f4:4a:47:ec:95:33:3d:98:c9:3f:62:18:05:49:41:bf:e8:
fb:86:4e:34:8e:99:d2:40:42:41:05:f5:d0:af:e7:a5:a2:a1:
27:ae:38:75:66:8c:00:f1:8d:de:d3:fb:53:5b:96:56:12:5c:
4c:68:f5:4d:9b:b6:e0:8d:69:75:c4:44:09:53:3c:cf:b3:e4:
b3:31:ef:2c:27:53:54:52:de:2f:23:e4:5f:a5:fe:6d:b5:8a:
81:e2:bc:22:42:5a:e9:9b:5a:ec:35:a1:14:4b:63:16:82:84:
6f:a6:f3:af:3d:b0:03:66:d6:be:27:f2:fb:12:50:82:21:0c:
0e:12:6f:9b:f5:f1:6f:21:6e:32:99:0d:59:31:44:b3:7d:ba:
69:69:34:5d:c6:d9:f5:16:da:e9:6f:60:55:3c:ad:cd:d4:b8:
66:ea:02:66:ba:33:59:79:52:a7:b8:c4:50:24:26:53:03:83:
80:69:b4:aa:24:71:a5:46:90:87:0c:0f:4a:89:ff:1b:69:72:
b6:0a:8b:ac:f2:f3:6d:a1:7f:27:49:2a:17:81:bf:3f:72:0c:
f7:39:77:c8:18:c1:f5:3d:ec:85:01:2b:71:00:35:8b:f0:25:
b4:4b:9b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:47:36 2025 by rpki-client