Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2897/KKY-9HFn8eZudn8uDEqFADvLlAA.mft
File: KKY-9HFn8eZudn8uDEqFADvLlAA.mft (raw, json)
Hash identifier: Q8dd9+OZv53z1PdEyBL86R9g9vvrL7pyJeIaB8+bFoU=
Subject key identifier: 73:FD:CC:BD:47:6E:FB:4A:6A:C8:82:41:66:25:43:D0:FB:B7:B0:73
Authority key identifier: 28:A6:3E:F4:71:67:F1:E6:6E:76:7F:2E:0C:4A:85:00:3B:CB:94:00
Certificate issuer: /CN=28A63EF47167F1E66E767F2E0C4A85003BCB9400
Certificate serial: 2456
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KKY-9HFn8eZudn8uDEqFADvLlAA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/KKY-9HFn8eZudn8uDEqFADvLlAA.mft
Manifest number: 2456
Signing time: Fri 31 Jan 2025 15:24:48 +0000
Manifest this update: Fri 31 Jan 2025 15:24:47 +0000
Manifest next update: Fri 31 Jan 2025 21:24:47 +0000
Files and hashes: 1: KKY-9HFn8eZudn8uDEqFADvLlAA.crl (hash: wE7K5m37996rUU2qjcX9j25LeSfpbUT1BHXhf+5zaAQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9302 (0x2456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28A63EF47167F1E66E767F2E0C4A85003BCB9400
Validity
Not Before: Jan 31 15:24:47 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=73FDCCBD476EFB4A6AC88241662543D0FBB7B073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:da:e1:89:8e:76:94:a0:20:11:88:8c:47:
d4:e9:31:d3:40:30:11:b0:f9:e6:1c:4b:fe:2c:54:
0c:b8:72:76:f8:78:2a:33:0e:15:5d:e4:c9:21:c3:
09:8c:8d:37:e8:f3:b9:78:5c:e1:e5:84:32:bb:df:
cc:d3:22:71:6f:5c:8e:05:10:f8:4d:fc:04:09:80:
17:34:fd:20:34:b1:25:07:fb:43:be:3d:ed:29:e9:
60:da:74:f2:ae:ed:de:20:5a:bd:02:ba:4e:1b:1f:
3a:6e:36:13:6f:d4:5a:ca:75:f6:1c:91:7a:88:6c:
4a:d2:3d:ce:9c:71:35:39:4a:28:4c:e6:2b:2b:29:
33:34:c8:32:da:ba:5d:34:05:66:02:38:eb:c0:37:
f8:ae:d0:7b:45:b5:aa:6b:bf:cc:d4:77:80:4a:45:
25:96:e5:62:7e:39:69:e0:ab:31:f7:d1:95:38:77:
e0:e9:fa:e3:47:c5:56:24:96:ea:4d:2b:d3:b8:be:
70:74:14:d0:00:44:17:c3:2e:b2:14:17:8c:d8:a7:
c0:4c:f3:04:4f:3a:2d:99:a6:c9:bb:12:84:60:6e:
ad:55:24:3e:2a:1a:7a:df:3f:e3:ff:fd:dd:64:fc:
fb:ea:ce:99:27:dd:98:90:a2:c1:7b:0d:a8:14:c3:
c5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FD:CC:BD:47:6E:FB:4A:6A:C8:82:41:66:25:43:D0:FB:B7:B0:73
X509v3 Authority Key Identifier:
keyid:28:A6:3E:F4:71:67:F1:E6:6E:76:7F:2E:0C:4A:85:00:3B:CB:94:00
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/KKY-9HFn8eZudn8uDEqFADvLlAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KKY-9HFn8eZudn8uDEqFADvLlAA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/KKY-9HFn8eZudn8uDEqFADvLlAA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:ad:b4:f0:4f:b7:71:9a:bf:0b:e4:97:9c:aa:13:28:0e:57:
ac:70:00:05:9f:55:63:d3:21:7b:9e:8e:ea:a6:e1:ed:02:04:
8e:98:c0:23:9f:cb:11:0f:5a:e6:bb:1a:23:17:60:78:92:1f:
3e:42:03:ee:e8:22:fa:57:2a:41:2d:e9:05:7b:77:17:a5:a3:
15:76:32:58:6e:6a:3f:43:41:02:af:5d:2e:e0:50:79:a0:3a:
41:e3:63:95:5d:6a:b5:1f:43:e2:6f:36:a0:41:bd:50:bb:dc:
d4:20:a7:d0:56:47:6a:2d:7a:36:35:51:23:1f:85:ed:d4:e8:
cb:1f:c6:e5:67:ac:a9:ff:f3:02:d2:83:07:6a:91:48:39:7d:
f7:aa:e0:25:71:47:63:62:4f:7b:e5:a0:12:86:37:cf:05:dc:
a8:8a:8f:27:31:8d:a9:5e:eb:dd:5b:8f:69:88:e7:36:87:74:
fe:2a:84:08:9f:0d:94:f8:a8:3f:11:9d:c1:6d:a9:70:e9:71:
b4:7f:05:f6:db:6a:ef:1c:6a:ad:8e:6a:d0:74:50:d6:09:ed:
57:58:47:76:4b:b8:2f:e7:61:9d:9d:cb:4e:71:a1:06:e1:5b:
56:c0:0c:2a:56:e3:09:23:78:63:bc:81:8d:99:23:ad:2f:03:
b4:fa:8e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:11:58 2025 by rpki-client