Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft
File: SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft (raw, json)
Hash identifier: oJsO/tOLBeu/RqLcBCaQoWkxdl+S4+ILeJsAkUa4Pb0=
Subject key identifier: 3E:57:93:88:59:E1:87:A2:C4:51:D1:66:42:21:06:DB:45:82:10:85
Authority key identifier: 48:E4:8A:FA:F1:F8:99:4A:66:75:66:CF:5F:D3:64:FA:75:B0:68:6F
Certificate issuer: /CN=48E48AFAF1F8994A667566CF5FD364FA75B0686F
Certificate serial: 0863
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft
Manifest number: 0863
Signing time: Fri 31 Jan 2025 17:24:14 +0000
Manifest this update: Fri 31 Jan 2025 17:24:14 +0000
Manifest next update: Fri 31 Jan 2025 23:24:14 +0000
Files and hashes: 1: SOSK-vH4mUpmdWbPX9Nk-nWwaG8.crl (hash: XsSvXG2FP+dAA0nu6Q/86Sxm2brRwNRMb0Sfd9IrNMo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2147 (0x863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48E48AFAF1F8994A667566CF5FD364FA75B0686F
Validity
Not Before: Jan 31 17:24:14 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3E57938859E187A2C451D166422106DB45821085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ed:ef:9a:86:f7:ef:22:38:0b:68:89:27:3e:
83:99:5a:37:75:00:79:34:33:93:4a:ed:6c:85:53:
ca:31:28:da:8b:e0:e1:7a:ae:0a:76:f2:47:a5:79:
0e:8e:5c:15:3c:cd:96:0c:65:ca:2a:d8:bc:ee:a4:
11:fb:e5:d1:33:94:31:d7:af:1c:64:f7:f7:81:06:
88:6c:9e:4a:59:8e:82:14:b1:a9:8a:2f:14:fd:2a:
0e:b6:aa:fc:48:51:e0:55:c1:2a:70:e7:ca:f5:77:
6c:0e:b9:9a:e2:fc:cf:59:4c:4b:66:c8:41:67:3c:
e5:18:9d:65:cd:da:04:00:d1:6f:4d:64:0a:44:ef:
3b:e4:d2:70:b6:98:36:a0:0c:fd:ac:2c:bd:73:c1:
aa:3a:45:6d:3c:63:6d:de:e6:1f:77:9e:94:62:00:
ea:05:da:02:72:e2:ca:9e:bf:a6:08:51:f6:7a:0d:
09:06:1a:66:54:53:4e:38:f2:f8:65:46:f0:0b:ad:
ea:4d:c3:fa:a2:52:78:ee:a8:ab:24:78:e9:90:9b:
f9:44:1e:7e:fa:1b:35:e7:32:7b:1c:1e:a1:e9:76:
d1:ee:a1:5a:13:98:8e:3a:d1:97:82:5d:11:52:f1:
de:d7:b5:ff:8b:3a:7c:3d:f7:30:23:54:c9:ac:60:
b6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:57:93:88:59:E1:87:A2:C4:51:D1:66:42:21:06:DB:45:82:10:85
X509v3 Authority Key Identifier:
keyid:48:E4:8A:FA:F1:F8:99:4A:66:75:66:CF:5F:D3:64:FA:75:B0:68:6F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ec:91:d2:1a:93:32:06:21:ef:20:35:17:f9:1d:3b:f9:c7:5c:
2b:56:4f:f1:92:4d:1e:93:9b:09:4f:87:c3:6b:3b:ec:bd:e3:
9d:13:e3:a0:8e:02:0f:90:7a:51:bf:52:c0:64:5c:0d:0f:7a:
ce:90:d5:e3:a0:45:84:21:ac:a3:f6:72:f4:e7:19:ce:ea:10:
e7:85:f8:b9:a7:9a:18:60:a5:5e:6b:30:44:c6:58:5a:91:4a:
0b:a4:ee:22:da:95:d7:7d:39:8e:ad:7e:5d:e4:ea:68:17:b1:
63:c6:66:7f:7d:57:6b:e8:47:ee:dc:ba:70:c0:a8:43:c0:05:
88:b2:36:b8:75:c4:ea:01:4b:89:4d:1a:76:65:6b:cf:8a:3c:
0d:8a:60:8c:59:9e:31:25:a2:72:d9:89:6d:2e:71:db:e2:3a:
ee:2b:9b:78:ba:9d:df:ba:66:45:09:14:54:be:97:03:1d:e0:
ca:6d:e7:65:26:35:6b:74:2e:25:3b:b5:c7:32:53:2b:81:23:
94:38:a0:ed:8c:8b:75:94:56:fb:62:d5:2e:cf:4f:93:67:26:
c4:49:87:8c:d6:5c:35:33:73:cf:50:df:3f:9f:c7:10:c6:47:
6f:9e:5c:dc:64:4c:ad:8b:22:73:40:5d:af:4c:4e:98:55:5b:
5b:18:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:34:16 2025 by rpki-client