Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3224/D1ffNJk0GeUIMAyS3GhFGYmw9VM.mft
File: D1ffNJk0GeUIMAyS3GhFGYmw9VM.mft (raw, json)
Hash identifier: sRMVfZdtmDe2eBguZ90FVpLG/GXJLA+gzEUi69VxjJk=
Subject key identifier: E3:49:85:A2:81:67:74:E0:0A:8C:B7:B4:FB:AE:68:94:13:5F:11:88
Authority key identifier: 0F:57:DF:34:99:34:19:E5:08:30:0C:92:DC:68:45:19:89:B0:F5:53
Certificate issuer: /CN=0F57DF34993419E508300C92DC68451989B0F553
Certificate serial: 0B65
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/D1ffNJk0GeUIMAyS3GhFGYmw9VM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/D1ffNJk0GeUIMAyS3GhFGYmw9VM.mft
Manifest number: 0B65
Signing time: Fri 31 Jan 2025 15:27:46 +0000
Manifest this update: Fri 31 Jan 2025 15:27:46 +0000
Manifest next update: Fri 31 Jan 2025 21:27:46 +0000
Files and hashes: 1: D1ffNJk0GeUIMAyS3GhFGYmw9VM.crl (hash: ISG3bPvVlYAMQqlvfHj67Grmo1tcyDe7XFUkAbKCn9A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2917 (0xb65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F57DF34993419E508300C92DC68451989B0F553
Validity
Not Before: Jan 31 15:27:46 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E34985A2816774E00A8CB7B4FBAE6894135F1188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:7c:06:07:a7:f3:b5:c4:8a:2d:fc:6d:1b:
40:32:6d:a8:3e:1d:fb:0b:e2:ac:e2:74:e8:8b:fc:
35:76:d2:9a:e5:79:4f:a5:1d:98:83:df:8b:4d:91:
9c:3e:58:52:83:ea:84:79:89:25:03:a6:b1:14:25:
41:72:b5:d3:4d:7f:1e:f0:f5:f2:6c:51:c3:e1:17:
5c:4f:50:f1:48:e7:d7:e7:4a:1c:43:3b:af:c8:58:
40:c7:12:36:14:12:0b:ca:75:22:7b:78:cc:b0:29:
0b:af:03:a9:2e:66:97:03:6a:38:3f:42:44:3e:c3:
49:6d:d2:88:5e:62:4f:f7:aa:aa:d7:e5:39:ff:29:
34:b1:64:ec:07:32:4c:a3:6e:6a:06:29:60:ec:71:
d1:cd:f1:89:28:a7:e7:94:9c:5d:23:17:2c:29:ea:
8d:76:dd:7c:b8:8e:f9:c3:13:e9:1e:9e:a6:13:d1:
ed:97:99:f0:cb:40:6d:fe:1f:90:e0:ca:37:1e:ce:
50:0a:95:aa:3d:5d:a9:a5:f1:0d:4d:f2:5e:7e:06:
54:a4:b3:5c:60:15:a5:e0:f6:39:25:79:b2:c6:30:
44:b9:92:e9:85:8f:85:89:c5:c1:86:c9:ae:97:39:
59:38:ab:fd:3b:da:75:07:dd:ee:63:3a:60:17:c9:
8b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:49:85:A2:81:67:74:E0:0A:8C:B7:B4:FB:AE:68:94:13:5F:11:88
X509v3 Authority Key Identifier:
keyid:0F:57:DF:34:99:34:19:E5:08:30:0C:92:DC:68:45:19:89:B0:F5:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/D1ffNJk0GeUIMAyS3GhFGYmw9VM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/D1ffNJk0GeUIMAyS3GhFGYmw9VM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/D1ffNJk0GeUIMAyS3GhFGYmw9VM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:a0:7f:df:0e:7d:e5:01:67:7e:3e:cf:af:25:4d:50:e2:d1:
f6:86:eb:86:fe:f3:c3:6e:72:ce:78:43:8c:6d:bb:f4:5b:92:
de:d3:bf:05:4d:89:11:71:ad:c2:fa:d6:cb:2f:e6:c0:85:fa:
3a:7d:da:ec:89:d5:dd:f9:5c:56:92:71:e4:1d:86:46:05:56:
30:52:f1:cf:d4:ef:6f:e6:99:34:c4:8c:d2:d0:05:09:74:e3:
c8:d2:86:3f:ff:34:9a:61:bf:ab:51:d7:1a:c0:dd:fd:12:25:
05:12:57:0e:db:e6:7a:6e:9f:a2:5a:1a:de:79:71:39:22:a7:
35:07:56:9c:a0:f3:db:11:a5:a7:73:a8:a8:e6:49:79:63:b6:
e4:e7:a1:01:c2:89:55:90:62:fc:af:3c:4c:c5:33:c1:1c:3b:
5b:01:bb:21:2d:b6:43:f8:0b:2d:ff:e7:8a:9e:bb:71:91:53:
c1:0d:96:74:f0:42:de:7c:1f:04:42:9e:93:d7:08:2b:bf:cc:
52:12:17:6d:ac:77:40:dc:de:78:9f:1a:85:d3:39:fe:69:e8:
2a:b4:1c:6a:4d:4e:9f:19:c6:c5:c0:13:f1:54:6a:a6:df:12:
20:3e:be:02:07:10:eb:0f:4f:2f:68:ce:14:79:ee:77:af:c4:
5b:38:75:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:15:01 2025 by rpki-client