Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.mft
File: xMVT2QII7y67l2ljJf_-xcD_FW8.mft (raw, json)
Hash identifier: 4fidr8+RvYCzx+XvPDzQAeGz+QMb66CUqHWBCoB+79U=
Subject key identifier: 8C:B7:3A:32:E9:8E:0A:72:70:9F:7C:20:B4:6C:46:D4:AF:F2:54:30
Authority key identifier: C4:C5:53:D9:02:08:EF:2E:BB:97:69:63:25:FF:FE:C5:C0:FF:15:6F
Certificate issuer: /CN=C4C553D90208EF2EBB97696325FFFEC5C0FF156F
Certificate serial: 0D31
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xMVT2QII7y67l2ljJf_-xcD_FW8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.mft
Manifest number: 0D31
Signing time: Fri 31 Jan 2025 17:54:09 +0000
Manifest this update: Fri 31 Jan 2025 17:54:09 +0000
Manifest next update: Fri 31 Jan 2025 23:54:09 +0000
Files and hashes: 1: xMVT2QII7y67l2ljJf_-xcD_FW8.crl (hash: pSq4MGVyIcuQ1x32ZA+8vVqyt8qu3PabQbveQnj6nKo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3377 (0xd31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4C553D90208EF2EBB97696325FFFEC5C0FF156F
Validity
Not Before: Jan 31 17:54:09 2025 GMT
Not After : Sep 27 02:44:52 2025 GMT
Subject: CN=8CB73A32E98E0A72709F7C20B46C46D4AFF25430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:95:d3:f0:dc:d7:0c:1c:8c:19:02:4b:2c:
52:1f:78:c1:a0:af:a0:00:6d:29:f9:3d:52:4f:6e:
17:92:ea:c7:d6:43:7e:51:b5:ab:23:f2:93:2d:45:
ab:61:9c:8e:0a:7b:1e:02:1b:47:ad:cf:b2:05:9f:
7f:90:e1:d4:04:cb:34:85:5a:91:84:f8:c2:9e:35:
5e:58:1f:5d:2b:d3:85:f9:f1:aa:47:1d:d5:ea:e0:
5f:f0:97:7f:21:96:dc:54:17:40:0d:5b:3c:1b:cb:
64:f3:56:e4:26:9f:a9:41:f1:35:fb:ad:95:9f:c7:
e8:68:60:2f:1d:83:f7:5f:20:b7:7e:e2:e4:32:14:
fb:58:e2:08:c2:4f:9f:89:71:36:b5:ff:4b:a5:b8:
76:ae:77:14:74:ae:ed:ad:06:ce:c4:4e:67:34:79:
de:9d:6e:5c:10:a9:31:38:00:e7:19:60:97:f9:b7:
7c:d1:a9:46:fc:7f:79:31:9c:07:1a:20:4b:72:c5:
58:f2:56:58:16:d9:00:0d:9a:43:9a:3e:14:40:0c:
18:63:61:86:a5:bb:08:64:58:f7:df:a1:d5:98:ba:
72:27:77:20:e2:c0:8c:c7:1c:85:1c:88:3d:6f:87:
bd:b3:76:76:1b:85:2c:94:f7:f9:4c:84:ce:44:5b:
6d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B7:3A:32:E9:8E:0A:72:70:9F:7C:20:B4:6C:46:D4:AF:F2:54:30
X509v3 Authority Key Identifier:
keyid:C4:C5:53:D9:02:08:EF:2E:BB:97:69:63:25:FF:FE:C5:C0:FF:15:6F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xMVT2QII7y67l2ljJf_-xcD_FW8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:25:95:69:4f:60:ad:03:2c:58:85:37:8c:9e:03:35:39:15:
aa:e4:6a:a9:85:23:23:05:62:04:3f:19:b0:20:89:a6:df:ba:
e6:f3:c9:1c:ed:9d:a1:a8:1b:41:e8:a5:5d:3f:08:f0:da:04:
34:2e:4c:c4:4f:08:88:38:e2:82:23:d8:d1:25:e9:f0:72:b6:
af:61:63:1e:cb:df:6a:6a:a7:41:6d:70:07:d9:04:8f:e8:a1:
f2:35:29:42:b5:39:d4:58:bd:25:e9:03:f9:1c:24:45:c0:d7:
0d:c3:56:72:65:46:32:ed:e2:7b:cd:b7:78:3f:eb:87:17:8a:
4a:33:b7:45:dd:e6:a0:fd:06:f3:ba:73:fb:22:9f:29:4c:10:
79:33:62:e2:7f:66:05:34:7e:bc:3b:b7:0f:83:45:cd:e4:12:
98:5c:a4:13:ad:b0:ae:0f:9a:80:8e:3d:7e:02:87:e9:a6:d6:
f1:9a:0d:09:25:1d:5d:b7:78:1b:48:a4:bb:78:56:e1:93:9c:
9f:ab:9a:15:af:4c:d2:6d:7a:7a:0f:eb:dc:f8:a7:3b:f5:19:
39:00:be:08:f4:46:c6:4f:cf:62:bb:85:c6:d9:6f:a9:30:9d:
a1:e6:58:37:f6:9b:2a:8e:a4:85:69:fc:d9:10:8a:d4:cc:b7:
ea:fc:c0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:12:29 2025 by rpki-client