Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2819/hTRSS_5XzTyFZI-ryLwRC4vixb4.mft
File: hTRSS_5XzTyFZI-ryLwRC4vixb4.mft (raw, json)
Hash identifier: BRtWi1MiDdBWegDhh8axi1USkU7vD/xLCvpIJOzxzo0=
Subject key identifier: BA:2C:1F:6C:2C:B7:DB:92:11:15:6E:20:50:46:2B:59:6D:96:98:ED
Authority key identifier: 85:34:52:4B:FE:57:CD:3C:85:64:8F:AB:C8:BC:11:0B:8B:E2:C5:BE
Certificate issuer: /CN=8534524BFE57CD3C85648FABC8BC110B8BE2C5BE
Certificate serial: 0C9D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hTRSS_5XzTyFZI-ryLwRC4vixb4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/hTRSS_5XzTyFZI-ryLwRC4vixb4.mft
Manifest number: 0C9D
Signing time: Fri 31 Jan 2025 15:25:28 +0000
Manifest this update: Fri 31 Jan 2025 15:25:28 +0000
Manifest next update: Fri 31 Jan 2025 21:25:28 +0000
Files and hashes: 1: hTRSS_5XzTyFZI-ryLwRC4vixb4.crl (hash: Z2IMBCcl90IVLUrwTIXFu9i1W8l27CgNHbEPTzW7HsI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3229 (0xc9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8534524BFE57CD3C85648FABC8BC110B8BE2C5BE
Validity
Not Before: Jan 31 15:25:28 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BA2C1F6C2CB7DB9211156E2050462B596D9698ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:dd:d7:aa:d0:74:4b:22:b1:24:f7:f1:14:
c1:33:a3:eb:aa:a6:5a:88:83:ca:99:e6:6b:db:07:
5e:c5:55:8d:c5:01:59:2a:4f:9e:1f:01:1c:0f:59:
c3:c8:07:d7:cb:c0:1b:36:4c:69:58:ed:62:53:26:
d6:8a:00:fd:10:57:fe:d6:6c:83:46:01:81:22:fc:
6d:c7:d5:3f:d3:60:c9:74:ff:ce:6b:e8:9f:20:cd:
de:ae:a4:a7:20:2f:d5:7a:8e:14:6a:d1:4b:aa:2d:
c8:f3:81:71:cd:d5:c0:ba:d8:fd:47:5c:de:27:4b:
e3:40:69:3b:43:8d:d8:29:39:5c:58:28:6b:96:4b:
2c:60:70:eb:98:12:ff:ec:1d:8e:85:e5:f3:76:7b:
50:7e:5b:0a:98:d2:6e:c1:d8:91:6c:8e:2e:bd:61:
e6:7b:bd:88:00:63:46:d3:40:8f:f6:97:d4:02:0c:
92:4d:1a:f3:e9:1e:74:cd:1d:d5:ae:1c:eb:3a:f9:
95:7d:e7:09:f8:58:a5:92:b7:3f:b4:64:0a:a9:9a:
bc:8b:16:8d:b6:e1:af:4a:48:8f:ac:9f:eb:c8:a0:
96:99:ef:59:89:23:d7:e7:33:1d:c6:7b:63:86:10:
15:cd:48:7b:06:4e:07:70:4b:cf:67:b6:49:c4:85:
e5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2C:1F:6C:2C:B7:DB:92:11:15:6E:20:50:46:2B:59:6D:96:98:ED
X509v3 Authority Key Identifier:
keyid:85:34:52:4B:FE:57:CD:3C:85:64:8F:AB:C8:BC:11:0B:8B:E2:C5:BE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/hTRSS_5XzTyFZI-ryLwRC4vixb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hTRSS_5XzTyFZI-ryLwRC4vixb4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/hTRSS_5XzTyFZI-ryLwRC4vixb4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f6:a8:34:ef:56:d2:f8:45:a3:f8:1a:5d:39:49:2d:36:4d:
61:1e:93:96:27:a1:46:ef:2b:b3:36:83:7a:ae:1a:49:c9:11:
0a:bd:ae:ce:e2:02:ea:d8:6a:73:2a:27:ee:bd:b5:0a:29:6d:
8f:52:ad:9f:6e:28:82:86:1e:ed:b6:7e:bd:fd:5d:ea:eb:75:
cb:0f:48:42:bd:96:4b:1f:bf:5c:6b:64:b6:e8:8e:09:de:cf:
b0:3b:83:d6:d7:61:2a:4c:e1:4c:eb:7f:67:63:80:c2:36:cc:
75:71:7b:d0:23:5e:27:24:60:36:5c:7d:97:0f:d4:2c:9b:7a:
ca:3f:81:b8:d1:a0:47:d2:8c:2c:2a:10:4a:53:06:48:7f:c5:
ff:04:0a:3a:ce:2d:83:d6:d3:71:c4:46:10:e5:7f:84:4a:b0:
08:21:07:9e:0d:88:86:8a:d3:02:9b:96:c4:63:ed:7a:ef:74:
e7:e5:7a:d0:93:7f:2f:8c:c5:ad:f9:e6:90:cb:3c:19:7f:40:
b7:3b:d4:23:a4:c5:a9:a7:87:32:fd:68:4d:c0:15:15:96:32:
cb:f0:1d:a0:23:64:e5:7a:a6:41:a6:d1:57:e9:11:09:ea:e3:
8a:d5:16:8c:26:bd:d4:d5:f3:7d:71:ba:11:aa:41:4c:0e:d1:
f3:68:ae:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:32:02 2025 by rpki-client