Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft
File: PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft (raw, json)
Hash identifier: GOp6uRj6DRrgxr4b2MGCXc5g5BRt7cobvIGS9vC59EY=
Subject key identifier: 07:4D:0A:C2:BA:E8:11:F7:78:4C:6B:DE:28:5A:83:A1:EF:25:9D:E3
Authority key identifier: 3C:08:EF:D5:98:09:C1:9F:A1:3A:F4:46:4F:07:4E:F2:D8:23:0F:BA
Certificate issuer: /CN=3C08EFD59809C19FA13AF4464F074EF2D8230FBA
Certificate serial: 0827
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft
Manifest number: 0827
Signing time: Fri 31 Jan 2025 15:28:02 +0000
Manifest this update: Fri 31 Jan 2025 15:28:02 +0000
Manifest next update: Fri 31 Jan 2025 21:28:02 +0000
Files and hashes: 1: PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.crl (hash: R5vOSE7AbyF+E6DKmMv/GWuOdElYHzAw3ap97WnZUE0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2087 (0x827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C08EFD59809C19FA13AF4464F074EF2D8230FBA
Validity
Not Before: Jan 31 15:28:02 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=074D0AC2BAE811F7784C6BDE285A83A1EF259DE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3f:6e:10:c5:a5:7f:48:a5:30:8d:d9:ff:92:
31:c7:f3:6f:c3:9d:87:43:8f:17:92:1a:0b:87:a4:
43:d8:0e:5b:24:2c:4a:38:51:ec:89:c8:49:67:de:
82:53:ee:cf:e4:25:36:e2:54:0a:be:24:0e:76:ef:
2e:ca:ba:ba:7a:f4:ff:8f:ae:f6:d5:6c:05:ae:4b:
50:2c:e3:0b:19:92:f3:29:c6:c6:91:d2:5f:03:77:
e7:45:26:7f:b9:40:6e:ff:99:ab:7e:c1:7f:d0:ce:
cd:e8:10:3d:57:31:c8:c9:d5:d6:5f:3f:98:44:b7:
08:d3:40:b9:ae:6c:31:22:77:c9:2d:2d:a3:6a:85:
f8:ba:a1:bb:e2:15:e4:a5:a5:1c:fb:d9:09:63:11:
95:e5:43:0e:8f:68:79:ad:a8:0e:4a:2f:c5:be:02:
5d:22:fc:f3:8a:26:9a:24:52:de:83:52:02:a2:89:
58:ae:c3:eb:dd:64:a2:b8:bf:d3:94:98:da:20:8b:
84:4c:6d:7c:bf:6a:e1:62:af:a6:0d:85:69:8a:44:
15:cd:b3:3a:32:ee:df:ac:e9:eb:74:33:a5:2b:91:
25:40:77:44:08:1d:74:2d:1f:d9:5b:1e:51:bb:6f:
40:73:63:fb:88:5c:1f:8e:2d:aa:ab:12:d5:a6:41:
69:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4D:0A:C2:BA:E8:11:F7:78:4C:6B:DE:28:5A:83:A1:EF:25:9D:E3
X509v3 Authority Key Identifier:
keyid:3C:08:EF:D5:98:09:C1:9F:A1:3A:F4:46:4F:07:4E:F2:D8:23:0F:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:54:02:71:73:2c:8c:b7:fe:47:b1:c0:81:bf:7c:9a:b5:97:
64:ca:c5:33:14:be:b3:5f:29:79:5c:93:1d:71:d5:d4:89:a4:
d3:4a:5d:cb:ed:ab:56:25:45:c5:e5:9f:83:bd:cd:94:a0:f2:
1b:87:e4:3a:79:05:cb:8d:ce:06:e4:fa:28:6a:c4:96:a6:45:
40:bc:f2:ef:e8:a1:7d:9d:e0:b9:b0:16:b3:9b:55:ce:1c:3f:
0c:9a:75:5e:cd:49:8a:34:b8:b4:b4:d5:be:1e:ec:44:b5:27:
5c:41:b7:e1:39:a7:b5:d0:ac:3e:66:00:f6:c7:67:70:68:42:
5f:91:dd:73:63:76:af:72:b1:54:05:8b:1b:a3:06:cd:fc:ce:
09:bc:d6:41:bf:24:8b:ee:63:64:2d:d9:b4:6f:f5:b9:c0:55:
13:73:6d:31:07:63:5b:9d:47:0c:ee:db:0b:bc:47:eb:35:54:
b0:d0:c4:b4:29:c6:54:c8:3f:54:2d:08:75:99:05:19:7f:f1:
75:56:35:1e:7a:aa:35:6a:74:99:b2:72:67:f6:3d:bc:50:bd:
4f:b7:df:b1:2f:d1:c0:7c:47:72:fc:54:f6:a0:15:ca:a4:04:
78:5c:70:3d:ab:08:58:79:74:ce:a9:09:a1:81:87:83:c3:e0:
66:81:0e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:10:53 2025 by rpki-client