Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft
File: gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft (raw, json)
Hash identifier: qjqpTZXd8yu6pllHL5ZEgLiB8Pe0sozwow7xTow4mMk=
Subject key identifier: DD:62:A6:BE:3E:2F:11:89:37:96:CB:45:53:25:70:6C:C7:E6:E2:0F
Authority key identifier: 80:05:36:27:8B:DF:A4:59:9F:E0:66:67:27:0C:57:D4:85:68:05:F1
Certificate issuer: /CN=800536278BDFA4599FE06667270C57D4856805F1
Certificate serial: 0AD5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gAU2J4vfpFmf4GZnJwxX1IVoBfE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft
Manifest number: 0AD5
Signing time: Fri 31 Jan 2025 18:24:16 +0000
Manifest this update: Fri 31 Jan 2025 18:24:16 +0000
Manifest next update: Sat 01 Feb 2025 00:24:16 +0000
Files and hashes: 1: gAU2J4vfpFmf4GZnJwxX1IVoBfE.crl (hash: WsFYyxItuhT/YMfAp5AIx2UV1cZknR3fAVz4pyz9KjA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2773 (0xad5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=800536278BDFA4599FE06667270C57D4856805F1
Validity
Not Before: Jan 31 18:24:16 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DD62A6BE3E2F11893796CB455325706CC7E6E20F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f3:a8:ff:f6:9c:9d:87:48:ca:a9:48:dd:72:
c7:f5:e6:f4:45:8b:25:5e:8d:ab:f7:f7:db:fd:bd:
d0:b3:43:09:01:46:d1:da:78:31:e1:c0:ab:16:7c:
a6:ad:67:65:11:fe:38:06:ba:fc:ea:2c:ce:e3:74:
dd:9f:29:c6:45:36:2d:f7:bb:56:c3:bd:a1:04:aa:
14:ba:34:68:a7:68:d4:8b:fc:af:83:89:07:d5:32:
42:33:c3:78:f3:80:7c:c0:f7:85:88:ba:b7:42:5f:
15:84:0f:4a:0a:75:5c:d1:cb:08:14:47:a6:ab:8c:
e6:93:ce:ed:30:cd:02:df:4c:bd:fd:a9:a5:c4:5e:
ba:51:22:4d:6b:6c:f6:06:f7:73:b5:ed:e3:9f:a9:
bc:27:a5:a0:f9:3f:36:b5:4c:cd:50:a6:61:c1:0d:
1f:17:75:db:0b:e4:58:bd:33:13:97:08:77:12:f1:
c4:d4:76:94:d5:e8:7a:b0:39:cb:1d:4a:c2:c3:f4:
1b:30:20:6f:b6:1a:92:89:56:7b:cc:b7:7a:4f:47:
4c:b7:a3:3e:bd:d5:2a:75:45:07:ba:92:59:d6:14:
11:d5:ec:bc:4d:e7:0c:26:21:1b:cc:0f:53:d4:25:
e2:28:5b:cd:a3:83:c6:51:1b:2a:d3:97:ad:6d:b1:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:62:A6:BE:3E:2F:11:89:37:96:CB:45:53:25:70:6C:C7:E6:E2:0F
X509v3 Authority Key Identifier:
keyid:80:05:36:27:8B:DF:A4:59:9F:E0:66:67:27:0C:57:D4:85:68:05:F1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gAU2J4vfpFmf4GZnJwxX1IVoBfE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:85:9e:0d:d3:c7:99:3b:ac:de:5e:cd:c1:6e:5f:db:0f:48:
2f:07:8b:fa:c5:ca:e0:d4:db:5c:48:2b:d5:2c:d9:fe:c7:bf:
f9:7f:d3:43:5c:af:a0:58:85:f2:e7:0f:f7:b9:dd:84:57:b3:
fa:ef:90:a9:8d:99:b5:61:09:47:81:38:64:8a:9a:d4:90:25:
ab:93:9b:ab:5b:11:d2:0f:20:d3:23:47:27:19:02:7d:d9:f8:
a5:cd:51:b3:c2:2f:cb:6b:18:4d:df:ff:a7:80:e1:8a:07:91:
b5:03:a4:02:17:12:ee:e8:43:e0:27:ec:03:1b:08:35:89:f5:
74:a5:dc:ff:a4:2f:08:36:89:13:53:40:ef:be:e8:c4:73:f5:
8f:52:21:91:e7:77:5e:7e:6b:0d:ec:3b:e3:e3:b0:d6:67:eb:
bf:95:60:6c:5a:49:db:f5:5b:6f:1c:0b:a2:c4:87:12:af:c4:
c3:29:cd:23:ce:1f:ce:ff:d2:9c:42:82:e4:d4:ec:37:77:76:
7c:63:35:6d:ae:0a:15:42:8b:84:46:d2:db:58:f1:b1:dc:c7:
72:04:3c:27:f1:19:a1:ba:7e:be:6a:de:5b:b1:7c:70:bb:63:
84:5a:1d:0b:bb:27:94:6a:40:d0:18:9d:3d:61:a3:0a:d1:ff:
c5:89:af:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:06:10 2025 by rpki-client