Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft
File: T04zJwO54ZxdoBGkjEsnbpsp11w.mft (raw, json)
Hash identifier: fgROek3sEsOfxqpKRn/1k70S/eS2WVZYE3uZln8j/4I=
Subject key identifier: 47:0D:13:1A:75:41:92:3C:A9:A1:A4:C7:6A:57:88:AD:FD:24:0C:A7
Authority key identifier: 4F:4E:33:27:03:B9:E1:9C:5D:A0:11:A4:8C:4B:27:6E:9B:29:D7:5C
Certificate issuer: /CN=4F4E332703B9E19C5DA011A48C4B276E9B29D75C
Certificate serial: 3347
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T04zJwO54ZxdoBGkjEsnbpsp11w.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft
Manifest number: 3347
Signing time: Fri 31 Jan 2025 15:28:32 +0000
Manifest this update: Fri 31 Jan 2025 15:28:32 +0000
Manifest next update: Fri 31 Jan 2025 21:28:32 +0000
Files and hashes: 1: T04zJwO54ZxdoBGkjEsnbpsp11w.crl (hash: ub6qcXMrP34U7C7dUAZfL/1EYitGIWuMfaeqqL1fNeo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13127 (0x3347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F4E332703B9E19C5DA011A48C4B276E9B29D75C
Validity
Not Before: Jan 31 15:28:32 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=470D131A7541923CA9A1A4C76A5788ADFD240CA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6c:41:3b:cc:83:cc:71:a2:fc:27:62:37:91:
ee:ce:92:88:cc:36:35:05:5d:e9:49:34:1a:8d:c0:
55:1f:c3:63:38:e4:56:b7:80:7a:b8:e4:0f:d7:00:
60:61:32:c1:b4:27:22:0d:3c:c4:4b:99:32:17:12:
56:19:47:d1:11:01:8a:98:c5:db:9f:b6:b9:b4:fb:
45:68:aa:4b:32:4b:e9:f8:a2:3f:79:86:ad:19:15:
73:3f:42:7e:99:5a:e3:ea:e4:9e:cb:30:17:dc:ef:
3f:41:52:03:b1:bc:c5:4e:27:7e:1e:53:80:9b:6f:
a8:2f:13:4c:b7:52:16:a6:cf:8f:06:9c:50:b3:07:
a3:b9:10:33:1c:69:53:51:39:93:25:8b:89:63:32:
34:c9:2e:ed:f1:04:87:0f:5c:d6:7e:fd:9d:1a:f8:
0b:cb:7d:7b:5b:7b:74:17:c5:c6:9a:0c:91:af:3d:
4a:49:12:7b:f0:7b:81:fe:8d:d0:c1:84:9b:c9:ae:
f5:61:5d:16:ab:73:48:03:32:39:34:eb:7a:54:a0:
68:73:1b:59:33:20:28:c2:70:d6:0c:aa:6d:b0:98:
02:cd:eb:f5:17:cc:cc:28:c9:7b:a2:32:39:fb:b5:
32:d9:7a:07:cd:53:91:88:41:f2:00:e6:a6:85:28:
96:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0D:13:1A:75:41:92:3C:A9:A1:A4:C7:6A:57:88:AD:FD:24:0C:A7
X509v3 Authority Key Identifier:
keyid:4F:4E:33:27:03:B9:E1:9C:5D:A0:11:A4:8C:4B:27:6E:9B:29:D7:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T04zJwO54ZxdoBGkjEsnbpsp11w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:86:8f:4c:98:ba:a3:d6:43:f9:ba:a8:3d:eb:00:09:ec:a0:
a9:c1:86:1a:bb:fd:c2:6e:87:1e:b4:02:04:77:b2:16:04:e2:
33:49:a8:9f:ad:5c:29:b0:dc:f5:6a:2d:30:38:f1:2f:99:b8:
28:ca:73:9c:7e:09:fe:8f:e7:85:29:da:ff:ce:9f:d9:53:5d:
09:8b:3e:8d:e5:1e:a2:e5:16:29:14:79:12:83:e7:87:f3:56:
76:05:00:ff:ad:5c:a1:53:ae:3b:f9:0a:1b:db:53:7e:24:d0:
e7:e6:b1:b8:23:ac:78:6d:43:29:a2:14:10:e2:46:86:6f:76:
5a:34:76:cc:a5:8b:fb:4f:e8:00:ab:79:2e:0b:ac:a7:f0:2d:
12:ba:50:d4:03:97:8d:92:a8:4c:43:8b:a1:9a:65:3c:da:3b:
b4:16:c0:49:c5:46:39:b4:63:e3:af:a1:82:5c:0b:e0:9c:b2:
81:4c:20:0a:c7:fa:6e:23:8d:b1:0b:0c:2a:67:de:28:3a:fc:
3e:ec:8a:42:83:e7:94:dc:9c:95:55:5d:a1:52:41:81:a8:b4:
68:34:85:55:e5:bf:b6:83:2b:93:ba:c1:f2:3c:e3:05:91:3e:
2a:db:cb:38:d1:8b:1b:3e:93:4f:0b:4f:b7:c2:21:be:36:24:
1c:25:b5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:42:00 2025 by rpki-client