Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3265/tWGZILjL08qnMy3Uu5GM4uZcmlI.mft
File: tWGZILjL08qnMy3Uu5GM4uZcmlI.mft (raw, json)
Hash identifier: oLK/0EepbcH74if3Lu8peVWuPWXeBr/AWqg2dxik2CA=
Subject key identifier: 84:E2:E5:99:8E:9D:9B:86:DF:96:33:76:93:CD:0B:BE:7F:8A:5F:54
Authority key identifier: B5:61:99:20:B8:CB:D3:CA:A7:33:2D:D4:BB:91:8C:E2:E6:5C:9A:52
Certificate issuer: /CN=B5619920B8CBD3CAA7332DD4BB918CE2E65C9A52
Certificate serial: 070D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tWGZILjL08qnMy3Uu5GM4uZcmlI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/tWGZILjL08qnMy3Uu5GM4uZcmlI.mft
Manifest number: 070D
Signing time: Fri 31 Jan 2025 15:24:57 +0000
Manifest this update: Fri 31 Jan 2025 15:24:57 +0000
Manifest next update: Fri 31 Jan 2025 21:24:57 +0000
Files and hashes: 1: tWGZILjL08qnMy3Uu5GM4uZcmlI.crl (hash: cOap4vxch+q7QhRN/4Zpo/wxgDaXjxditKe3T5tKoM0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1805 (0x70d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5619920B8CBD3CAA7332DD4BB918CE2E65C9A52
Validity
Not Before: Jan 31 15:24:57 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=84E2E5998E9D9B86DF96337693CD0BBE7F8A5F54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ab:2b:f3:96:58:10:7e:78:29:d4:13:8f:3c:
52:d7:5f:79:f2:df:f2:3d:23:ee:1e:b0:ee:a2:85:
29:7a:e7:03:0b:09:48:d5:02:50:f6:01:14:47:c4:
29:47:5a:0b:41:5c:49:a6:a8:4c:c4:24:91:36:3f:
f8:cf:0d:3f:11:1e:0b:2c:ee:04:36:4f:22:84:b1:
8e:0a:c3:4a:82:86:3d:54:da:0d:22:3b:27:bd:3f:
d4:44:79:04:eb:db:4a:50:01:0c:6b:7e:48:8b:fe:
a2:83:96:bd:d1:b3:1c:6d:fc:8f:0f:23:92:f0:ae:
2f:99:1f:68:14:25:c9:97:f1:88:1c:a9:d4:cd:d7:
a8:3d:a5:5b:fd:56:4b:ab:07:53:ec:37:f8:37:1b:
09:6c:04:6e:b0:e4:fa:c4:81:a5:ff:d8:e0:7c:99:
ad:9f:ae:ce:d1:0e:34:22:fa:b6:bf:f2:d0:13:89:
cb:5c:88:89:31:ef:f1:05:3c:95:df:13:7d:9a:a4:
63:4d:b5:2b:2a:b7:db:bc:af:6a:c0:b7:ad:ed:4b:
6a:e9:f0:65:76:d6:b1:06:e3:f7:a8:5b:d1:0a:68:
a7:58:90:83:27:b7:52:b6:67:02:fb:3d:4e:8a:2e:
56:45:f6:de:5e:7a:54:ca:bf:96:af:9e:50:00:25:
2f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E2:E5:99:8E:9D:9B:86:DF:96:33:76:93:CD:0B:BE:7F:8A:5F:54
X509v3 Authority Key Identifier:
keyid:B5:61:99:20:B8:CB:D3:CA:A7:33:2D:D4:BB:91:8C:E2:E6:5C:9A:52
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/tWGZILjL08qnMy3Uu5GM4uZcmlI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tWGZILjL08qnMy3Uu5GM4uZcmlI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/tWGZILjL08qnMy3Uu5GM4uZcmlI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:77:a1:5b:a4:9f:c0:4c:44:31:e3:aa:f1:59:a4:d6:7f:33:
3c:22:c7:c2:e4:b0:22:da:f5:76:00:ef:c7:19:55:a4:78:99:
40:53:7e:ee:26:e9:29:ae:95:ca:e1:ab:28:8c:80:6e:64:ac:
a9:94:4b:3f:6e:e9:50:4a:b4:f8:f3:cc:97:bf:97:c1:c9:0d:
cb:12:86:66:50:49:6a:a5:14:4d:59:e3:dd:72:c6:a0:24:c3:
6f:7c:5e:89:a8:a3:ed:11:91:16:39:c8:4b:8e:30:60:57:0a:
16:b6:fa:90:1b:67:79:29:8b:f5:51:e2:3d:90:a5:b7:0c:59:
7d:f6:c9:7c:38:f3:23:d1:f3:0b:fd:00:fb:fe:93:b7:9a:1a:
3e:bf:48:8f:4e:a6:ef:85:73:d4:f0:b2:e6:2c:6d:86:09:aa:
0a:12:99:0f:29:d8:f8:24:bb:49:ed:3a:0a:66:c9:43:bf:02:
3d:56:af:cf:67:14:31:58:9b:f3:34:57:fd:4a:87:0b:da:fc:
2b:cb:23:4f:37:e7:39:43:6f:34:c1:4e:6c:15:d2:9f:1f:42:
29:38:b3:9d:d9:88:0c:4a:47:4c:c6:27:38:3a:cb:a4:2b:18:
4e:10:2f:b2:57:bb:e2:3a:0b:6f:72:a5:02:a3:4c:f9:f7:7a:
b6:14:1a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:27:01 2025 by rpki-client