Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3229/hkJ-VFo-gGs0Xw0gwOOeIcToUBw.mft
File: hkJ-VFo-gGs0Xw0gwOOeIcToUBw.mft (raw, json)
Hash identifier: XzdGOS90fwYrAU+rEJKuu8+5TNaLOOBla8zdz5idLKc=
Subject key identifier: 5A:E5:EB:E6:F2:69:00:47:5A:8B:A4:8D:FD:4E:DA:E4:5D:DB:34:BF
Authority key identifier: 86:42:7E:54:5A:3E:80:6B:34:5F:0D:20:C0:E3:9E:21:C4:E8:50:1C
Certificate issuer: /CN=86427E545A3E806B345F0D20C0E39E21C4E8501C
Certificate serial: 0A8F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hkJ-VFo-gGs0Xw0gwOOeIcToUBw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/hkJ-VFo-gGs0Xw0gwOOeIcToUBw.mft
Manifest number: 0A8F
Signing time: Fri 31 Jan 2025 15:24:50 +0000
Manifest this update: Fri 31 Jan 2025 15:24:50 +0000
Manifest next update: Fri 31 Jan 2025 21:24:50 +0000
Files and hashes: 1: hkJ-VFo-gGs0Xw0gwOOeIcToUBw.crl (hash: L92qZSA1RzlHOTNEwpMrPk1wN/3SV9URUgwdMnuIcQ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2703 (0xa8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86427E545A3E806B345F0D20C0E39E21C4E8501C
Validity
Not Before: Jan 31 15:24:50 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5AE5EBE6F26900475A8BA48DFD4EDAE45DDB34BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1e:4d:89:ad:a4:d1:cf:95:af:20:d2:72:38:
c8:10:41:3a:e8:23:5d:d7:16:57:21:b6:a1:2d:cd:
37:8c:84:f4:c0:4f:89:ab:6c:d5:dd:7b:d5:e0:7f:
f3:3f:af:a6:fb:8e:b7:98:ab:91:d0:66:6b:14:fe:
ad:d6:f1:55:51:f2:0b:00:8f:e4:30:ac:35:cc:03:
91:99:87:8f:d5:a8:b6:61:1f:1c:ca:bc:86:e4:93:
00:eb:89:c4:89:c1:27:42:a6:28:3b:47:cc:ca:06:
41:a8:f0:6b:9c:ab:08:ce:6d:4a:18:b3:2a:ee:98:
ca:54:87:81:ed:a7:08:d4:e0:fe:84:b3:a1:d2:39:
61:15:02:16:10:08:ea:3c:f5:98:a9:89:71:7a:05:
5b:a9:17:4b:46:f6:f9:c7:74:5a:b0:96:2a:f2:e9:
b1:a6:d2:5c:ad:c7:c8:58:ac:d4:a2:2c:5c:51:6c:
71:5e:dd:4e:58:97:31:43:64:25:41:f2:5b:aa:b6:
53:dc:c3:b9:41:6f:1d:e4:31:b4:1c:03:0e:8c:53:
24:c2:04:9d:f1:2b:9f:42:9e:97:9e:92:58:78:27:
9e:dd:1f:df:e1:8e:49:a6:03:2a:4f:54:f2:d9:1d:
5b:c7:da:79:aa:04:d9:a7:5b:49:e4:d9:0e:a3:d8:
dd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E5:EB:E6:F2:69:00:47:5A:8B:A4:8D:FD:4E:DA:E4:5D:DB:34:BF
X509v3 Authority Key Identifier:
keyid:86:42:7E:54:5A:3E:80:6B:34:5F:0D:20:C0:E3:9E:21:C4:E8:50:1C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/hkJ-VFo-gGs0Xw0gwOOeIcToUBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hkJ-VFo-gGs0Xw0gwOOeIcToUBw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/hkJ-VFo-gGs0Xw0gwOOeIcToUBw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:6e:7c:05:38:5c:b2:e0:dd:14:d2:82:22:c5:a9:25:4f:33:
fd:c0:10:d9:3f:54:3a:ea:37:b9:46:51:c7:32:09:28:fb:63:
e3:f0:5d:5b:de:a8:4a:a1:7f:ca:46:bf:e3:c6:81:9d:9b:d3:
2b:88:f2:98:83:0d:9a:19:0f:5b:e6:35:36:83:7d:97:56:90:
76:04:b1:1b:f6:de:f7:bd:08:1e:23:bf:04:b9:a5:6b:dc:2a:
e5:65:27:86:b1:30:fb:b8:42:bd:b1:80:30:f6:22:21:4a:89:
6a:36:1c:fc:39:68:05:3c:f9:8a:df:19:2b:a3:82:a5:f8:4e:
8d:6c:38:3d:6d:95:56:77:d3:7f:21:ab:70:c8:59:fa:32:f2:
ec:77:5f:dd:3f:cd:44:fb:c3:33:6b:3b:1e:35:e0:b9:48:08:
ec:df:20:c9:8a:a6:c2:54:e4:0f:96:cb:69:47:a6:dc:9b:0d:
3a:cb:68:3b:f1:8a:2c:20:16:fd:4b:f5:47:38:79:90:dd:b8:
3a:5f:9a:2a:30:93:51:15:15:66:b3:61:96:ba:2b:e7:0d:83:
17:70:a4:52:8a:6c:a3:47:40:d5:91:2a:bd:eb:30:fa:c4:74:
de:3d:c0:cb:d7:81:a3:65:62:4f:f3:90:df:96:93:69:03:8b:
47:d8:12:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:54:49 2025 by rpki-client