Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
File: SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft (raw, json)
Hash identifier: ntOCE1MGiM9LxYIZ2oOn4Fu7P0EhMLfUMBDfXtIh5h0=
Subject key identifier: CA:8E:99:CD:4C:5E:2D:C1:E6:09:CE:6F:9D:9B:89:9D:53:5A:62:9F
Authority key identifier: 49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB
Certificate issuer: /CN=4986242B03FB4A9C1906127EFC4C05E3B9BDFEBB
Certificate serial: 1AF1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
Manifest number: 1AF1
Signing time: Fri 31 Jan 2025 15:29:42 +0000
Manifest this update: Fri 31 Jan 2025 15:29:42 +0000
Manifest next update: Fri 31 Jan 2025 21:29:42 +0000
Files and hashes: 1: SYYkKwP7SpwZBhJ-_EwF47m9_rs.crl (hash: iGmjWC+9Gn5DDD9rHTgdIL4OG3+pdbKomn634gwItvs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6897 (0x1af1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986242B03FB4A9C1906127EFC4C05E3B9BDFEBB
Validity
Not Before: Jan 31 15:29:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CA8E99CD4C5E2DC1E609CE6F9D9B899D535A629F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:d5:ff:ef:f0:c9:b2:23:3f:f9:52:85:8e:
0a:5c:11:71:ac:1e:5b:93:af:0e:be:8a:f6:13:04:
0b:36:3b:33:cd:85:b7:ce:a4:20:c5:df:3f:c7:14:
38:32:0a:f6:51:83:df:e2:6e:fb:71:ce:37:4f:3e:
b8:2a:91:64:8e:2b:80:db:a9:9d:a3:c9:8d:45:c4:
4f:42:e1:77:83:07:12:6f:7e:a8:03:fe:d7:f8:97:
16:56:21:89:1f:80:27:56:23:5d:9e:39:21:dd:8b:
c6:97:00:fd:b9:6f:c6:77:45:3a:cb:ec:38:58:f3:
65:3d:81:0e:d9:e9:74:4e:fc:b5:83:15:97:00:2e:
a7:76:f3:e6:3e:0c:c0:b7:f9:5b:91:f8:b7:85:ec:
cd:1a:05:db:65:ae:08:28:6d:ac:0a:04:10:b1:c2:
aa:7a:80:a2:92:6a:a7:00:3a:62:a9:49:94:9a:73:
8a:52:5a:b5:e7:43:df:f0:3a:9f:7b:51:27:27:c0:
4f:df:c1:26:36:72:96:0e:c7:47:15:d7:3d:fa:25:
34:4b:10:18:c3:c7:62:6d:49:58:46:42:19:d7:e1:
13:7f:cb:e4:51:da:b9:df:b8:cc:e3:63:dc:30:1b:
96:90:51:e7:88:fd:f7:1a:93:b8:05:60:59:4e:40:
62:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8E:99:CD:4C:5E:2D:C1:E6:09:CE:6F:9D:9B:89:9D:53:5A:62:9F
X509v3 Authority Key Identifier:
keyid:49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:23:0d:26:e2:77:32:94:1a:37:b7:b4:66:68:46:6b:d5:28:
84:14:da:fe:f5:08:dd:67:d0:e8:12:a9:e5:75:c5:0a:5b:d9:
42:23:2d:7c:79:36:75:dc:37:a3:76:93:b1:83:ed:dc:5a:9f:
68:75:d0:8f:cd:d4:92:54:bc:58:d0:52:ee:d6:07:f0:c4:0f:
4b:60:e7:97:53:9c:80:3d:d7:7b:06:95:48:06:59:fa:e0:57:
ef:fb:a4:ce:40:6f:b6:79:99:14:68:b5:e7:94:dc:c2:e6:dd:
74:cc:97:7b:ab:31:db:af:ca:51:b3:60:6b:7e:7b:09:80:08:
09:aa:59:58:c8:08:7a:8c:1f:08:43:9a:b1:ba:df:df:bf:2d:
82:a7:40:05:f0:db:b5:21:9c:cd:20:ed:af:8e:eb:f6:ab:9b:
84:a2:5b:14:cc:22:c8:99:d9:f2:ca:c8:89:9a:95:1a:75:8d:
4d:11:9d:ca:11:65:6c:ae:10:82:b2:8c:cc:89:ce:c9:ec:ef:
82:0f:a0:4a:df:94:2e:6a:71:e3:44:11:0b:a7:85:36:0f:e6:
2c:18:e4:ed:b9:2e:2a:d1:62:54:d7:fd:d9:08:b1:08:17:c7:
b6:19:f7:56:05:e7:3e:61:bb:cf:33:a5:1e:cf:82:6e:33:ce:
b0:28:70:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:38:00 2025 by rpki-client