Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3143/_i1c0c9OKHJuJ3MPCnRmYEf68K4.mft
File: _i1c0c9OKHJuJ3MPCnRmYEf68K4.mft (raw, json)
Hash identifier: ZUpKTx5RtVkuHeS/vVyBHKYDrK1hT5GRcR6dhN+1R9k=
Subject key identifier: B7:CE:2D:7E:26:04:C0:FF:C0:15:9C:7A:64:A4:87:EB:FA:67:27:12
Authority key identifier: FE:2D:5C:D1:CF:4E:28:72:6E:27:73:0F:0A:74:66:60:47:FA:F0:AE
Certificate issuer: /CN=FE2D5CD1CF4E28726E27730F0A74666047FAF0AE
Certificate serial: 13FF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_i1c0c9OKHJuJ3MPCnRmYEf68K4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/_i1c0c9OKHJuJ3MPCnRmYEf68K4.mft
Manifest number: 13FF
Signing time: Fri 31 Jan 2025 15:26:35 +0000
Manifest this update: Fri 31 Jan 2025 15:26:35 +0000
Manifest next update: Fri 31 Jan 2025 21:26:35 +0000
Files and hashes: 1: _i1c0c9OKHJuJ3MPCnRmYEf68K4.crl (hash: TL0Gyhag+qROGuKQ1DANJ4p2FbtbFLHyy/a84vTPbYE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5119 (0x13ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE2D5CD1CF4E28726E27730F0A74666047FAF0AE
Validity
Not Before: Jan 31 15:26:35 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B7CE2D7E2604C0FFC0159C7A64A487EBFA672712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9e:c7:94:47:ec:31:e1:d2:10:1c:2f:b4:af:
f6:7b:17:75:e2:ab:22:52:e1:c8:d0:73:95:f5:5a:
c3:e1:37:fd:69:4e:cc:22:30:97:5b:20:27:fa:74:
4b:52:27:51:35:bb:40:90:fd:18:fd:9f:8b:ea:73:
ec:bb:0d:ee:a9:73:51:e5:2d:16:d8:6c:12:51:a2:
c8:b1:89:a5:23:9b:6a:74:06:0d:44:dc:f8:68:33:
d4:ab:2a:80:ac:0c:ae:33:41:bd:e8:c6:5e:42:c0:
d2:c3:b8:22:59:a4:32:55:d7:78:47:b3:17:ff:68:
72:12:76:4a:27:9b:8b:15:d1:07:cb:a7:01:64:62:
eb:ed:89:b7:cb:d8:bc:45:c5:de:f1:2e:f8:87:5e:
60:98:1b:dc:3e:48:23:26:67:82:71:8c:f9:ff:10:
29:a0:3e:93:f9:13:67:ff:35:99:f9:af:4d:f7:99:
72:4e:c9:e6:f9:eb:ee:1a:3c:87:4d:64:0b:6f:b2:
2a:53:81:2f:00:24:a3:ab:dc:10:a3:26:d0:3b:eb:
c2:84:6b:20:09:4c:4b:c5:76:1e:4d:24:14:f4:59:
94:5c:70:93:f4:3f:44:b5:20:5c:8e:bb:52:7c:6f:
f6:90:65:db:01:04:06:d2:c8:50:b2:e8:a2:cb:a0:
52:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CE:2D:7E:26:04:C0:FF:C0:15:9C:7A:64:A4:87:EB:FA:67:27:12
X509v3 Authority Key Identifier:
keyid:FE:2D:5C:D1:CF:4E:28:72:6E:27:73:0F:0A:74:66:60:47:FA:F0:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/_i1c0c9OKHJuJ3MPCnRmYEf68K4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_i1c0c9OKHJuJ3MPCnRmYEf68K4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/_i1c0c9OKHJuJ3MPCnRmYEf68K4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e1:a6:d7:3d:1c:e4:95:fa:43:25:58:e0:4a:53:e0:39:8c:
c5:7e:c8:de:ec:82:a2:d2:c5:aa:63:c9:ce:5e:6c:86:86:4a:
ae:22:4f:39:a2:76:30:af:a3:19:8f:ed:a7:d6:f5:f1:8d:a5:
c9:1f:21:7e:3a:fe:b3:5d:e4:46:c8:64:d9:ab:29:06:5e:c1:
6c:10:f7:a3:16:15:07:b2:d2:40:05:24:98:26:3f:d3:7b:82:
f7:9b:a2:5d:ca:1b:e8:44:08:ba:5f:8c:30:bf:12:57:db:e1:
66:00:6a:b9:aa:fc:a9:3b:c4:44:19:03:35:6f:29:d0:4c:cc:
b7:e1:62:df:08:56:27:4a:5d:88:93:87:39:58:ff:ee:ed:dc:
92:83:3f:6d:2d:51:7a:e2:50:88:3c:13:cc:fc:38:79:02:10:
e6:4d:0c:30:42:d9:e5:62:01:a2:bd:6d:f2:8a:d6:68:1e:28:
60:93:07:f0:08:de:be:4b:4b:f8:e7:a8:ef:d7:db:02:03:54:
d4:fe:07:aa:61:23:5b:59:63:c2:4a:1d:2e:08:d1:d0:eb:9b:
61:d0:19:51:6e:93:1d:b9:2d:3d:bf:99:ea:7d:ed:3b:0d:b4:
e3:9f:bb:64:60:5d:3b:17:72:1c:06:b7:bb:ea:e5:8a:95:9d:
6f:6f:89:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:16:21 2025 by rpki-client