Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft
File: YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft (raw, json)
Hash identifier: VIEIko5lDofSvN9qkC7h6wMJiAquuoA29UISL149XzY=
Subject key identifier: 44:17:D6:FB:FF:B0:DC:02:5A:87:45:6F:40:A5:FE:AD:98:D1:BA:E1
Authority key identifier: 60:B2:D8:F9:0D:21:05:C8:EB:87:68:56:AA:97:5B:53:C4:32:69:96
Certificate issuer: /CN=60B2D8F90D2105C8EB876856AA975B53C4326996
Certificate serial: 0B1F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft
Manifest number: 0B1F
Signing time: Fri 31 Jan 2025 15:25:45 +0000
Manifest this update: Fri 31 Jan 2025 15:25:45 +0000
Manifest next update: Fri 31 Jan 2025 21:25:45 +0000
Files and hashes: 1: YLLY-Q0hBcjrh2hWqpdbU8QyaZY.crl (hash: hk9z/Yc/E0TI5fVKIyevRH8PVOHygPG95idndSl81Jw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2847 (0xb1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60B2D8F90D2105C8EB876856AA975B53C4326996
Validity
Not Before: Jan 31 15:25:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4417D6FBFFB0DC025A87456F40A5FEAD98D1BAE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d3:b3:11:0c:da:e4:3c:97:50:8b:7c:6d:03:
b5:6c:ca:8e:44:3c:8b:55:d7:96:cc:6a:28:e2:a2:
ea:14:25:db:38:84:83:92:2d:26:f8:6e:0f:9e:4a:
c5:17:05:51:fa:ed:c5:11:aa:0b:f5:ec:d6:26:64:
f6:37:df:19:04:18:2b:87:35:b9:76:6c:78:52:44:
de:96:23:8e:da:82:8a:a8:63:60:1a:5f:e3:f6:c4:
5e:da:ab:fa:c2:c7:60:89:fb:29:f0:38:90:ff:e3:
df:02:6b:c6:f0:c3:fe:ee:a5:68:95:ad:58:8d:ba:
db:a5:03:34:b1:d6:74:e4:c1:30:6c:07:b7:6f:29:
b0:60:91:70:a1:8a:ce:89:e8:39:a9:26:3a:98:f7:
87:63:6f:d6:b7:42:38:a5:e6:72:4f:f5:52:07:4e:
85:5a:2e:6a:a5:1a:7f:e5:4f:7a:94:61:be:22:52:
b3:ec:86:fe:50:fa:c0:18:5a:a5:27:95:8f:10:f4:
19:fd:18:2b:8c:0b:91:70:fb:d6:59:77:b1:c7:7c:
c0:57:2e:b8:2c:8f:4b:46:04:ad:46:90:9a:73:dc:
0d:7d:41:a7:f0:0d:8a:6c:50:89:5f:b4:36:3a:8e:
6a:52:89:ac:46:b5:10:bd:0f:7e:7b:38:4f:df:52:
82:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:17:D6:FB:FF:B0:DC:02:5A:87:45:6F:40:A5:FE:AD:98:D1:BA:E1
X509v3 Authority Key Identifier:
keyid:60:B2:D8:F9:0D:21:05:C8:EB:87:68:56:AA:97:5B:53:C4:32:69:96
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:4b:ae:5c:19:bf:3f:bc:27:72:14:9b:55:43:a1:f5:f4:ba:
62:b4:76:aa:cc:4c:0b:1e:37:8a:15:ac:8f:5f:91:8b:8e:6a:
69:3e:fe:29:26:1c:4a:20:65:4b:37:57:0b:ab:c2:be:71:3b:
73:5d:c1:98:20:2d:53:1d:0b:22:1b:84:13:43:3b:a9:10:8c:
ca:57:c1:40:cd:ef:5a:2f:20:21:6d:db:63:b1:1d:6c:b6:9a:
82:c4:c1:16:92:fc:a9:7d:9b:bf:96:00:7c:ff:87:c2:e5:77:
df:e3:87:64:73:94:33:b2:c5:76:76:86:c3:76:99:49:a7:c8:
2f:92:75:3f:b4:0a:05:ae:43:53:92:44:b6:9a:5c:9a:35:49:
08:d0:20:cf:f0:95:8d:33:db:b0:4f:a4:f3:ea:00:42:12:27:
6c:57:45:be:a1:dc:e8:15:75:ee:c1:6a:55:65:69:dd:ec:32:
88:a0:13:94:48:5c:f4:44:be:18:fd:11:7b:c6:86:b0:42:b0:
c6:ae:8a:98:1a:1a:29:a5:81:ee:47:12:04:90:a6:87:e7:33:
f3:30:c2:f2:e6:c5:c5:63:d1:1b:72:d6:c5:84:67:a2:ca:8f:
24:9b:d9:ef:12:77:18:00:98:65:7f:1f:09:94:66:3c:3f:86:
6a:d7:a8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:24:57 2025 by rpki-client