Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3239/K_-tbb6GgEycV_BdDDuGxFNO9xg.mft
File: K_-tbb6GgEycV_BdDDuGxFNO9xg.mft (raw, json)
Hash identifier: TgTM7QYlY9wH3YQ4HWhoAIUy+FG4mnKu9igOA2i8mpk=
Subject key identifier: 17:8D:4B:51:69:CD:A2:4E:9A:65:E8:CA:42:C3:9D:0F:BD:F7:1C:62
Authority key identifier: 2B:FF:AD:6D:BE:86:80:4C:9C:57:F0:5D:0C:3B:86:C4:53:4E:F7:18
Certificate issuer: /CN=2BFFAD6DBE86804C9C57F05D0C3B86C4534EF718
Certificate serial: 09FF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K_-tbb6GgEycV_BdDDuGxFNO9xg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3239/K_-tbb6GgEycV_BdDDuGxFNO9xg.mft
Manifest number: 09FF
Signing time: Fri 31 Jan 2025 15:25:13 +0000
Manifest this update: Fri 31 Jan 2025 15:25:13 +0000
Manifest next update: Fri 31 Jan 2025 21:25:13 +0000
Files and hashes: 1: K_-tbb6GgEycV_BdDDuGxFNO9xg.crl (hash: 2Fq5A0eM6Tt6ukScC1zSsGw1Lr4CqjiD44c5s+mr0TM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2559 (0x9ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BFFAD6DBE86804C9C57F05D0C3B86C4534EF718
Validity
Not Before: Jan 31 15:25:13 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=178D4B5169CDA24E9A65E8CA42C39D0FBDF71C62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3b:93:54:95:aa:c3:53:d8:6c:da:56:3d:b5:
35:8c:0e:5c:19:d3:2b:cd:70:77:75:b0:a3:69:d8:
30:6d:23:94:3d:85:aa:3e:2e:9f:6e:a5:ee:4a:6d:
66:dd:46:42:ce:45:38:e7:f5:e6:2d:19:43:8b:cf:
4e:20:96:5c:4c:a9:48:59:6f:5e:c3:c3:c7:fe:14:
3d:27:bc:1b:6d:ad:28:6c:af:c5:19:8e:ac:44:27:
93:52:76:e5:58:16:b9:b3:1e:a3:ea:cf:1d:a3:ad:
72:b2:fe:ab:30:20:0a:4e:61:b0:a2:b9:1d:d8:9e:
55:bd:25:2a:04:74:81:4f:fd:8c:cc:22:44:4d:2e:
da:88:b8:38:65:0a:03:7a:7e:c7:1f:b1:9a:be:b7:
52:85:b4:ed:6a:78:93:d7:a5:8e:f8:9c:85:c5:7a:
77:48:2a:6e:b9:97:05:ff:29:92:28:90:f1:80:0b:
d8:7c:bc:db:09:40:d1:ed:8e:1c:01:c4:54:7e:08:
4a:b9:21:73:73:3f:83:0b:f0:ee:3a:43:eb:69:67:
b4:c2:e7:a4:35:44:96:5a:66:bc:cc:b2:fe:a2:c8:
8d:58:70:a6:20:e3:ff:9e:b7:bb:ff:9e:f3:18:bf:
c8:da:56:a4:07:87:cc:fc:06:a3:a4:e5:1c:a7:eb:
21:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8D:4B:51:69:CD:A2:4E:9A:65:E8:CA:42:C3:9D:0F:BD:F7:1C:62
X509v3 Authority Key Identifier:
keyid:2B:FF:AD:6D:BE:86:80:4C:9C:57:F0:5D:0C:3B:86:C4:53:4E:F7:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3239/K_-tbb6GgEycV_BdDDuGxFNO9xg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K_-tbb6GgEycV_BdDDuGxFNO9xg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3239/K_-tbb6GgEycV_BdDDuGxFNO9xg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:ab:75:ce:6e:97:4a:0c:4d:5a:9b:42:0f:7c:51:a5:f1:d6:
c7:26:26:0e:0b:13:a8:2d:4f:06:6d:52:4c:2f:14:4c:ee:c7:
2f:3a:f6:2b:9a:9f:c8:dd:8a:ae:b6:3e:4e:24:1d:0d:89:8f:
0b:ec:a4:90:39:b0:ff:5d:f5:c5:2a:12:2b:d3:90:d4:8c:ea:
ff:64:b8:84:3e:84:e8:75:f1:2b:db:38:bc:0d:41:43:d7:a9:
08:ef:3c:bc:f1:ed:d2:2b:19:f2:76:a1:19:52:d3:2c:20:96:
7a:45:f7:5d:8a:89:3c:6f:b4:92:37:20:3a:a7:8d:e5:04:ef:
d7:24:86:4e:b6:2d:3b:18:ef:d2:28:c4:4b:7f:4e:93:0b:c4:
42:e9:19:91:18:b9:74:c1:b8:85:10:e4:68:e2:8e:d2:35:71:
0d:e6:1d:8d:c1:63:14:43:ec:97:b3:2f:d5:ef:31:30:1d:d1:
27:33:3b:50:93:b0:80:21:9f:ab:b3:b7:ed:5b:07:bb:73:14:
4e:24:a0:b4:b3:fa:44:23:3b:86:70:b7:4a:c7:5d:70:35:12:
fd:85:cc:0c:4c:1b:ed:7a:66:01:d3:20:6d:83:07:a5:e5:ee:
3d:89:e1:59:cc:6a:2f:86:36:99:83:74:73:6d:04:5d:67:39:
04:bc:af:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:02:44 2025 by rpki-client