Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2991/ndo_saueLKtRkuiQnryzPkC2JkE.mft
File: ndo_saueLKtRkuiQnryzPkC2JkE.mft (raw, json)
Hash identifier: jJ9x4LV2+MchLgWQotL0rbbNhlOo+X18xgFKn9dkMcQ=
Subject key identifier: 6F:79:5B:1E:77:D8:E3:54:96:BE:0F:B2:C5:1B:9D:17:D6:80:B4:F7
Authority key identifier: 9D:DA:3F:B1:AB:9E:2C:AB:51:92:E8:90:9E:BC:B3:3E:40:B6:26:41
Certificate issuer: /CN=9DDA3FB1AB9E2CAB5192E8909EBCB33E40B62641
Certificate serial: 12E2
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ndo_saueLKtRkuiQnryzPkC2JkE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/ndo_saueLKtRkuiQnryzPkC2JkE.mft
Manifest number: 12E2
Signing time: Fri 31 Jan 2025 15:25:28 +0000
Manifest this update: Fri 31 Jan 2025 15:25:28 +0000
Manifest next update: Fri 31 Jan 2025 21:25:28 +0000
Files and hashes: 1: ndo_saueLKtRkuiQnryzPkC2JkE.crl (hash: IJgnZ9KO5hl5/ziNn11qzuGn9rQzr+qa/mcOJ46FKTE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4834 (0x12e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DDA3FB1AB9E2CAB5192E8909EBCB33E40B62641
Validity
Not Before: Jan 31 15:25:28 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6F795B1E77D8E35496BE0FB2C51B9D17D680B4F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:61:f2:ca:4d:77:a1:f1:b3:bb:e9:57:92:
91:66:42:c3:10:3f:9a:6b:63:86:01:0a:83:68:0d:
1e:44:e5:6c:34:af:2f:29:1d:0b:70:a9:4e:26:2d:
c5:af:82:20:dc:b0:bd:a4:8f:cd:4b:6b:a2:62:5f:
2d:98:ab:77:79:e0:4b:ec:07:f9:54:20:c3:93:6a:
53:aa:c4:86:bf:e9:36:91:f7:6e:a5:95:0d:16:79:
c2:ad:de:34:b4:5b:77:55:46:9c:45:2b:b1:58:2c:
97:da:80:ed:ac:b5:6b:13:ca:85:a4:74:b1:dc:dd:
23:ac:1d:e4:2a:e0:0b:b3:bd:f6:81:4b:e6:bb:6d:
b8:87:8c:b6:bc:15:9d:dc:7d:88:ea:02:1d:ce:3b:
92:fb:6f:9f:77:72:a5:94:c8:7f:5a:59:a8:92:2a:
b1:75:4e:b9:3f:11:6b:9e:a2:39:cf:b6:0f:2c:d1:
56:53:ac:b4:92:c9:b7:99:ad:c2:f5:18:d5:90:1d:
75:c6:6b:c9:69:51:8b:fc:3f:df:f3:93:bb:38:fb:
18:a2:dc:a9:4c:60:47:7f:c4:ca:2e:87:9b:12:11:
c7:12:2e:c3:a7:5a:f2:dc:9e:e0:40:f2:76:67:06:
00:09:fb:39:87:50:81:3b:51:33:b3:70:09:9f:3e:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:79:5B:1E:77:D8:E3:54:96:BE:0F:B2:C5:1B:9D:17:D6:80:B4:F7
X509v3 Authority Key Identifier:
keyid:9D:DA:3F:B1:AB:9E:2C:AB:51:92:E8:90:9E:BC:B3:3E:40:B6:26:41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/ndo_saueLKtRkuiQnryzPkC2JkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ndo_saueLKtRkuiQnryzPkC2JkE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/ndo_saueLKtRkuiQnryzPkC2JkE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:83:cf:6d:2d:94:c9:41:a3:29:e0:ab:33:e3:01:ec:65:c0:
22:68:1a:6a:ff:b6:c7:64:26:7d:37:76:61:c7:e4:51:fa:3a:
f0:b7:96:61:e0:18:89:8f:3c:f0:91:68:6f:c4:f8:0f:d3:5e:
6d:05:cf:81:d1:f2:2a:81:41:49:de:01:f9:8b:b8:c2:4e:79:
8a:0d:ee:9b:f5:cd:99:35:8f:11:53:9c:11:45:2f:5b:7f:a5:
04:6e:14:a9:c2:bf:fa:12:1a:27:ee:2c:b9:c2:51:37:52:4e:
35:38:c8:91:e1:f1:89:00:a5:58:f9:86:82:fb:75:4f:20:5d:
ad:22:e5:32:f7:93:0b:4b:13:38:3e:01:cf:d7:d1:f5:52:0e:
84:49:a1:25:94:73:c4:a5:4d:78:51:bf:6a:67:2f:18:50:7f:
85:e2:e4:d5:34:2c:97:ee:2f:75:0f:a6:bb:41:e9:07:90:57:
8a:6e:16:ad:f6:7e:46:1d:02:57:7e:06:6c:fb:4a:e6:3d:50:
86:7f:a4:65:b5:c8:5c:df:ea:64:81:86:da:16:7e:7f:3f:ae:
3c:ab:14:a8:58:35:af:f1:33:be:8e:f7:34:42:e9:42:40:5c:
12:f6:5b:d0:e4:f4:42:c0:0a:5e:b4:20:b2:59:a5:02:b5:8d:
00:43:1a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:58:11 2025 by rpki-client