Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft
File: jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft (raw, json)
Hash identifier: grMsr6tZNzcKP8vOSBlJX5ysRiO1v5d9FBiWQX3sTiE=
Subject key identifier: CD:E3:96:20:23:2D:34:93:A8:08:C6:61:D8:F0:44:1D:B9:B4:9F:67
Authority key identifier: 8E:8D:A5:9C:81:0F:13:2F:12:06:E4:F7:2C:E6:86:FD:E3:05:4E:6D
Certificate issuer: /CN=8E8DA59C810F132F1206E4F72CE686FDE3054E6D
Certificate serial: 0A20
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jo2lnIEPEy8SBuT3LOaG_eMFTm0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft
Manifest number: 0A20
Signing time: Fri 31 Jan 2025 15:25:51 +0000
Manifest this update: Fri 31 Jan 2025 15:25:51 +0000
Manifest next update: Fri 31 Jan 2025 21:25:51 +0000
Files and hashes: 1: jo2lnIEPEy8SBuT3LOaG_eMFTm0.crl (hash: Jwd0Id49ietCXbg/sAvq6HBXPnJqfEDKkqZs9NbYLbw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2592 (0xa20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E8DA59C810F132F1206E4F72CE686FDE3054E6D
Validity
Not Before: Jan 31 15:25:51 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CDE39620232D3493A808C661D8F0441DB9B49F67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:c5:81:52:c3:c3:16:cf:5d:20:16:5c:99:
ba:5a:3b:ed:cf:8f:ac:8d:c7:ff:66:e4:12:18:ec:
3c:ab:b3:91:ce:a2:b7:d0:2f:6c:aa:94:d1:25:fe:
ff:2b:20:8e:52:f3:c0:7c:6b:ca:6e:58:0e:5d:85:
d3:ec:77:53:3d:d5:30:b5:b4:f8:30:c2:5b:88:95:
2d:4c:ac:21:8f:9d:bf:39:3a:78:56:33:3c:62:dc:
ad:30:f6:a4:9f:2f:9e:f7:5a:11:33:f4:fe:0f:cd:
f1:7d:d4:a2:b3:49:95:c2:26:91:79:7f:ec:cb:7f:
d2:1d:1f:f9:4a:ff:f1:4d:32:93:ab:3c:a2:a6:92:
00:b6:36:a1:2f:ad:5c:c2:b5:bb:a2:56:be:b2:03:
87:29:36:1b:a1:d1:e4:b4:5d:82:b6:6b:34:ef:b1:
7b:4b:db:b8:a9:8f:e2:c0:7c:91:cb:67:4c:ae:56:
e2:42:6a:cd:8d:e3:e2:97:ae:93:81:f9:3c:9d:77:
32:81:6e:16:76:a3:2f:9e:fc:6f:61:e1:2c:ed:cb:
1b:ae:52:d7:9a:e8:ae:cd:d5:50:91:57:98:0b:2b:
28:4a:2e:63:2b:cd:12:ca:2f:0a:88:c6:e8:c5:72:
4f:55:d4:ae:56:f4:8d:7e:40:f5:e0:89:06:34:fa:
c2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E3:96:20:23:2D:34:93:A8:08:C6:61:D8:F0:44:1D:B9:B4:9F:67
X509v3 Authority Key Identifier:
keyid:8E:8D:A5:9C:81:0F:13:2F:12:06:E4:F7:2C:E6:86:FD:E3:05:4E:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jo2lnIEPEy8SBuT3LOaG_eMFTm0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:db:51:bf:11:1b:b8:26:55:76:09:a7:98:7e:8e:82:5a:74:
d1:0f:5d:b4:6d:6b:c5:4a:3c:88:8d:f9:15:5b:56:03:2a:bb:
61:50:d4:3a:bb:69:a1:38:35:7b:ff:a5:27:8e:97:67:e2:de:
fa:80:35:37:96:95:7d:8c:f5:b0:1a:27:8a:82:4b:c5:6c:0e:
15:fa:80:4c:92:9f:63:33:73:be:f2:8e:0f:8a:bf:f8:b3:ce:
73:83:43:dc:23:df:ca:31:d3:18:5c:f9:a6:0c:2e:4c:04:f5:
79:33:04:fa:8c:b9:97:71:6a:77:58:2b:e7:3d:63:b4:1e:a8:
9a:18:b3:e0:ef:40:2a:25:00:67:6c:94:8f:24:87:bf:6f:05:
76:9f:5d:13:13:f0:ad:2f:02:80:16:4c:e8:6f:80:8f:bf:db:
d2:75:9c:11:ce:9a:20:3f:f6:2b:3d:a7:fb:20:bc:19:ea:c4:
9f:18:ad:78:d6:7b:a7:51:0f:2f:73:2c:1f:f2:91:48:c9:f5:
32:67:cb:69:0b:8e:5f:b8:90:fd:75:b0:06:3f:24:fc:a5:84:
d1:9b:f1:8e:90:d7:47:ad:4b:26:32:38:f1:05:51:79:7d:95:
53:27:20:20:b6:3f:19:a3:45:c5:d8:24:0a:2b:43:a4:de:08:
2b:a4:b1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:24:58 2025 by rpki-client