Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2903/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.mft
File: GTUZ3Xc8QNBPZBzERVjTRhKXsAM.mft (raw, json)
Hash identifier: LKrw3xyGOaJmcGE2EYBMF0eUEoyrMG31tscslxuPHjI=
Subject key identifier: 85:7A:D4:30:56:F6:EE:38:F2:F2:39:E3:64:77:97:B7:30:33:92:7C
Authority key identifier: 19:35:19:DD:77:3C:40:D0:4F:64:1C:C4:45:58:D3:46:12:97:B0:03
Certificate issuer: /CN=193519DD773C40D04F641CC44558D3461297B003
Certificate serial: 1BE7
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.mft
Manifest number: 1BE1
Signing time: Fri 31 Jan 2025 15:26:42 +0000
Manifest this update: Fri 31 Jan 2025 15:26:42 +0000
Manifest next update: Fri 31 Jan 2025 21:26:42 +0000
Files and hashes: 1: GTUZ3Xc8QNBPZBzERVjTRhKXsAM.crl (hash: /8yqlORqZKYmzFHMhgPVEXaHl6qLxL9dDfbvOuN7zfM=)
2: ofWDTuZdBsoEHdpdD-hMueJn7lQ.roa (hash: mtF01OQZB4FrXLC5rgApOcnJP5/2xm8KbS60Erj6vHw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7143 (0x1be7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193519DD773C40D04F641CC44558D3461297B003
Validity
Not Before: Jan 31 15:26:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=857AD43056F6EE38F2F239E3647797B73033927C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:dd:56:1b:93:a0:3a:ef:10:8b:28:0a:3b:
80:72:e5:0d:2a:45:a7:77:3b:65:87:c9:2d:77:ed:
19:66:30:f1:eb:74:54:4d:1f:99:1b:08:56:fa:bd:
45:26:25:3f:ea:1e:22:30:c6:39:ef:5f:39:67:0f:
7b:f7:c5:76:98:2e:bf:f4:a0:ea:b6:8a:f1:39:ba:
1a:02:bf:57:62:fc:c2:15:54:66:9c:d6:d0:09:60:
49:68:ab:0d:24:71:44:d1:4f:86:86:c2:40:15:43:
e3:95:ef:92:6b:18:82:77:e5:b8:b0:1f:4f:7e:52:
f1:86:79:05:3c:90:f5:35:c7:b7:68:ca:97:18:4d:
79:51:4a:a6:76:fa:62:a1:a7:5e:87:6d:87:a2:81:
6d:c5:f3:40:f6:96:1e:98:22:d3:ba:9d:31:07:c8:
9e:fc:0f:48:05:65:cc:45:fe:76:5c:44:a5:67:45:
98:37:83:95:6b:cf:66:f6:7b:ee:43:87:a3:7e:21:
b8:85:e6:0b:74:04:ba:bd:d2:e8:79:54:61:df:ee:
bd:16:41:6f:aa:a8:37:a4:0e:35:2e:e0:46:f0:12:
ba:76:89:8c:f8:67:89:92:22:24:11:1c:8d:d6:31:
01:18:43:1b:0f:0d:2d:93:eb:78:47:3f:5a:57:52:
82:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7A:D4:30:56:F6:EE:38:F2:F2:39:E3:64:77:97:B7:30:33:92:7C
X509v3 Authority Key Identifier:
keyid:19:35:19:DD:77:3C:40:D0:4F:64:1C:C4:45:58:D3:46:12:97:B0:03
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4b:37:61:d8:5e:1c:46:05:ff:04:f6:ea:76:67:55:96:47:
ee:fe:f1:46:c3:14:4c:04:96:61:ed:49:cb:7c:22:e6:21:45:
4d:f4:28:14:1e:83:a5:6c:6a:a7:c2:06:f1:e5:33:e2:86:da:
50:89:8c:ab:92:73:b3:ef:87:47:79:a6:af:6c:1f:a3:b5:fc:
10:c8:da:e2:45:17:02:70:85:79:8d:5f:46:51:97:d6:ff:3f:
4f:52:14:3e:68:f6:40:2a:5a:93:d7:e0:7f:48:d5:63:21:42:
29:31:13:d1:4c:e4:74:7e:3b:24:5e:86:53:0e:84:9d:c9:67:
a2:c4:b9:74:ee:c2:65:03:37:f0:8a:bb:98:ff:9c:47:fd:23:
05:0d:c6:98:6d:b8:75:4b:f3:cc:da:39:8c:df:c2:cb:6e:72:
ff:65:a0:a3:7b:66:1e:3a:1e:3c:9e:c9:03:ec:39:a7:b1:b2:
79:d6:66:e9:dc:dd:c9:f3:d3:79:66:cd:c6:fd:b7:bc:91:8d:
86:59:2f:64:9f:29:96:b3:f2:e7:9c:6c:e0:0a:91:8e:67:30:
77:90:4b:e3:35:9e:b2:eb:85:f0:aa:d6:58:b7:0f:b9:a2:ab:
67:67:7b:be:bd:c2:8f:ff:34:e0:ff:84:62:6e:8c:45:c1:8c:
0f:3e:7e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:25:43 2025 by rpki-client