Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft
File: M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft (raw, json)
Hash identifier: FZnjWEf2vy8xuICWjPKFt4FqU7R3+3d2Vl6YEcfO0ZM=
Subject key identifier: ED:36:A9:4A:5A:D0:EC:FE:0D:6E:81:AD:B7:E3:75:D2:E5:C2:40:13
Authority key identifier: 33:46:8F:56:82:61:F2:D8:08:F7:03:0E:09:CF:AB:BE:1E:E0:ED:14
Certificate issuer: /CN=33468F568261F2D808F7030E09CFABBE1EE0ED14
Certificate serial: 0AF2
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft
Manifest number: 0AF2
Signing time: Fri 31 Jan 2025 15:27:10 +0000
Manifest this update: Fri 31 Jan 2025 15:27:10 +0000
Manifest next update: Fri 31 Jan 2025 21:27:10 +0000
Files and hashes: 1: M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl (hash: JSCqyKD5OZPq1qjaWvegMxqULzk+zOICBT8+SxbsjW8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2802 (0xaf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33468F568261F2D808F7030E09CFABBE1EE0ED14
Validity
Not Before: Jan 31 15:27:10 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=ED36A94A5AD0ECFE0D6E81ADB7E375D2E5C24013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6b:a7:6e:3b:c7:5d:17:9a:a4:66:67:49:8c:
6a:96:c6:86:41:c0:df:00:c5:aa:1d:9f:cd:8f:62:
a1:d7:c3:2f:89:8c:e0:4f:59:ca:44:40:6a:4b:a5:
2b:bc:5e:bc:0b:07:9d:c2:69:d4:c5:1c:06:40:04:
54:50:5b:87:2e:b5:d0:ac:33:3d:0a:01:c6:e0:03:
df:f7:b2:1d:fa:03:e7:b1:f5:49:f7:e3:5c:0f:db:
c6:b0:39:08:01:78:6f:88:49:65:a4:09:de:b5:a2:
30:06:d6:68:8a:15:bf:f7:51:77:74:df:33:df:32:
00:a2:42:d8:01:3d:fe:d5:93:52:27:3b:e5:35:92:
4c:45:67:b6:37:18:65:94:0e:d8:e7:72:70:cb:d1:
6d:44:ef:98:1c:23:8e:2b:7f:7b:52:8f:7d:11:ac:
c4:41:29:a3:17:a3:de:47:14:a3:9b:98:ea:70:b4:
24:61:d8:c3:cd:d4:66:77:36:c0:dd:f0:9f:8c:9c:
fc:58:57:ed:10:a5:47:51:58:58:54:c7:80:82:42:
8e:b9:c7:9e:51:6a:f5:b9:31:2a:24:9d:e4:8f:cc:
30:fd:24:1e:ae:04:42:cf:ae:7f:40:28:b1:23:03:
1d:7c:1d:9e:a6:8e:47:49:50:1d:e8:19:80:5e:18:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:36:A9:4A:5A:D0:EC:FE:0D:6E:81:AD:B7:E3:75:D2:E5:C2:40:13
X509v3 Authority Key Identifier:
keyid:33:46:8F:56:82:61:F2:D8:08:F7:03:0E:09:CF:AB:BE:1E:E0:ED:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:fa:e0:20:9e:7c:60:2f:7d:b2:6c:19:4b:89:8b:5b:50:93:
dd:4d:11:b9:5b:38:04:9a:f1:bb:e1:bd:d6:77:3f:51:97:22:
c8:96:eb:c8:74:d3:b3:07:8a:c8:c7:3f:b5:c3:06:88:6c:2a:
5f:05:1e:89:38:a2:32:cc:6f:cd:55:31:14:12:08:71:2f:fc:
ae:60:d8:34:39:48:75:24:da:84:f4:ac:0c:d7:84:f2:f3:65:
29:7b:d2:13:ac:29:26:56:6e:d5:97:47:5a:70:53:1a:1e:09:
e3:be:c5:b6:77:e0:75:33:02:ca:2e:ad:ff:0f:c9:4e:2a:8f:
88:40:62:63:1e:47:f9:03:5a:21:49:fa:56:a2:0b:47:74:1f:
9d:f9:ee:66:1b:2c:e7:25:83:c2:32:aa:33:b5:47:d7:99:82:
5d:c9:be:53:6c:65:16:03:19:84:94:0e:35:85:e6:23:61:7c:
9f:18:1b:ff:d1:95:3b:a8:cb:6a:b4:0a:35:45:e0:75:b4:cd:
61:22:58:db:59:2c:4e:16:70:db:0f:63:ec:05:21:04:83:68:
52:04:c3:a4:60:43:a6:af:c7:28:e9:9f:8c:e9:32:1c:9d:7a:
b7:c7:e1:9b:2c:ac:da:b1:8d:b3:5a:0d:2f:4d:9e:f4:95:46:
e0:0a:48:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:56:17 2025 by rpki-client