Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft
File: E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft (raw, json)
Hash identifier: tNC5V8smXkQEePzSlrZ2ZH3W3pRy+M1hHtABuLzcpgs=
Subject key identifier: B9:43:8C:55:06:FC:B9:C4:7B:7F:7F:60:BA:4C:12:3B:FB:48:4F:87
Authority key identifier: 13:6A:39:C7:63:0A:3C:74:91:05:0D:3E:9D:BD:5B:6F:79:06:FD:75
Certificate issuer: /CN=136A39C7630A3C7491050D3E9DBD5B6F7906FD75
Certificate serial: 09D4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft
Manifest number: 09D1
Signing time: Fri 31 Jan 2025 15:24:40 +0000
Manifest this update: Fri 31 Jan 2025 15:24:40 +0000
Manifest next update: Fri 31 Jan 2025 21:24:40 +0000
Files and hashes: 1: E2o5x2MKPHSRBQ0-nb1bb3kG_XU.crl (hash: nVH2Fit8UM1C9iqM5FP6Ibrre7REoCbf73202Yw/JWA=)
2: dZXEqaGxmzAzSwQfOSuj4GVQ0gg.roa (hash: acKWSIHX1ZbTm99RSURHM2kfCk/nXcKQCe+6vMB1VMY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2516 (0x9d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=136A39C7630A3C7491050D3E9DBD5B6F7906FD75
Validity
Not Before: Jan 31 15:24:40 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B9438C5506FCB9C47B7F7F60BA4C123BFB484F87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:84:3c:bc:71:4c:46:3d:ab:2e:d8:52:f4:
b7:ec:1a:b2:26:2c:91:04:ab:9d:e5:db:17:1c:5a:
30:36:89:dd:3e:9a:0f:9a:16:e5:8b:34:05:67:0f:
da:fe:e5:81:1b:06:9d:46:f5:de:30:76:34:a6:34:
ce:34:e5:88:0b:72:dd:0c:e7:11:59:cb:06:28:04:
be:61:e0:cf:8a:93:47:cc:16:df:d1:94:62:f7:60:
26:f4:c5:25:97:28:90:96:0e:51:0b:f4:56:0b:87:
b5:28:e8:ff:45:69:e9:35:08:5c:a5:91:c5:6b:a5:
c2:07:fe:f2:c3:6f:cb:44:ec:25:1f:36:e2:4e:de:
60:ab:54:cd:87:10:48:68:cb:88:62:d0:f5:4f:4f:
ac:92:4b:7a:a6:a4:4e:ee:68:0e:67:4f:f1:2a:36:
0e:f1:43:e0:3a:da:78:ee:ca:89:a0:dc:88:54:c6:
04:f5:1e:a2:58:04:04:85:8b:8a:b0:9e:21:b8:61:
66:42:61:84:53:f6:ef:4f:45:9c:f8:a5:83:ad:9b:
9a:1c:a4:0b:1d:63:b8:9e:67:c0:4f:8a:e0:d2:02:
88:84:91:d9:06:b0:1c:b3:1e:ed:54:d8:34:e5:34:
50:4e:c8:2e:4f:7c:1c:74:a0:e4:65:a5:f7:a5:8e:
c9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:43:8C:55:06:FC:B9:C4:7B:7F:7F:60:BA:4C:12:3B:FB:48:4F:87
X509v3 Authority Key Identifier:
keyid:13:6A:39:C7:63:0A:3C:74:91:05:0D:3E:9D:BD:5B:6F:79:06:FD:75
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:98:13:2c:a1:fd:fc:34:5e:e9:7a:b9:33:59:27:11:bb:68:
c5:96:83:bb:a1:ce:9e:ec:e4:f3:86:2c:d0:17:e7:65:c6:48:
37:5d:be:dd:a0:96:54:99:b5:d5:23:66:d8:9e:f9:01:ad:36:
9f:86:cc:0e:bd:fd:56:6e:f9:26:f8:df:1b:c2:9d:26:52:81:
92:fc:65:d5:14:0c:78:a0:92:e2:d9:c4:ef:2a:b2:36:55:6b:
64:fd:b7:8d:f0:d4:11:70:bc:95:30:22:a1:d7:8e:ac:37:eb:
0b:fe:b0:7a:fd:8a:9f:b1:d4:2e:20:52:95:d6:72:1c:a5:fe:
8a:cb:50:ef:45:36:b1:ca:83:ab:c5:fc:fc:29:25:e5:8b:d0:
ae:63:d7:96:5e:cf:bd:bb:3d:4f:b5:d3:ff:15:1f:2e:14:8d:
bb:9c:a0:f4:1f:36:1a:97:3c:6b:7a:8c:bc:eb:ba:b1:67:80:
b3:7c:a6:bc:eb:79:9a:b9:07:7b:eb:1a:1f:1e:17:d0:b6:05:
81:4a:3b:f6:b6:4a:b5:16:f5:84:cb:42:bc:a5:b8:84:ce:6a:
11:e0:51:c7:3d:cf:d2:49:d0:53:7d:00:f5:c0:d3:11:c2:62:
39:b5:19:6a:ec:5d:83:69:17:c5:38:31:14:59:42:58:6c:3b:
3b:aa:bd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:23:37 2025 by rpki-client