Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3271/5odkXtr0lXS_3oajcUhO5DBK3n4.mft
File: 5odkXtr0lXS_3oajcUhO5DBK3n4.mft (raw, json)
Hash identifier: Q5+0t2vsoGlxqX2Z7iwHS9jDUAWZja/qpGo82PwH7Hw=
Subject key identifier: C4:87:01:43:26:D8:A3:CC:22:13:70:31:93:98:79:39:6F:AD:37:0A
Authority key identifier: E6:87:64:5E:DA:F4:95:74:BF:DE:86:A3:71:48:4E:E4:30:4A:DE:7E
Certificate issuer: /CN=E687645EDAF49574BFDE86A371484EE4304ADE7E
Certificate serial: 061A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5odkXtr0lXS_3oajcUhO5DBK3n4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/5odkXtr0lXS_3oajcUhO5DBK3n4.mft
Manifest number: 061A
Signing time: Fri 31 Jan 2025 15:27:01 +0000
Manifest this update: Fri 31 Jan 2025 15:27:01 +0000
Manifest next update: Fri 31 Jan 2025 21:27:01 +0000
Files and hashes: 1: 5odkXtr0lXS_3oajcUhO5DBK3n4.crl (hash: VuYBRfWKJ1zT2OhmwU0hTUJ7Gfe5qIlyS920h5eiNQk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1562 (0x61a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E687645EDAF49574BFDE86A371484EE4304ADE7E
Validity
Not Before: Jan 31 15:27:01 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C487014326D8A3CC22137031939879396FAD370A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bd:95:22:d4:0b:59:32:63:74:40:f9:ee:30:
d0:c7:54:11:e5:a7:b8:55:c1:9f:77:7f:1d:5c:8f:
dc:48:ae:b3:31:9b:d3:8c:3f:49:9c:14:09:9a:c2:
26:46:21:6c:e0:a9:5b:54:1f:8d:a0:b8:ba:55:d9:
5a:b0:bd:69:50:25:ef:73:f8:92:53:8e:58:67:48:
27:87:02:72:8d:49:43:02:2d:ce:40:a3:d6:7b:43:
3d:a9:ed:f2:ec:e6:ee:73:cc:fc:89:91:ea:4b:93:
07:4f:3a:e4:66:e7:a3:a1:16:ed:16:c0:c0:b6:32:
e6:b3:d7:88:88:73:92:e0:e9:f7:64:92:d1:dc:7b:
14:80:08:e6:5a:93:9b:f0:f2:03:2b:2a:74:f5:53:
75:5c:c2:0b:f3:8f:f6:5f:40:2a:98:35:c1:63:0e:
07:4b:9f:ab:94:11:e5:d5:bb:a2:74:ae:6b:f2:60:
28:fe:8f:57:aa:57:d9:92:fc:ee:ec:d1:bc:38:7c:
8c:74:7f:24:e7:e5:1e:eb:ab:4c:a9:97:c9:0b:39:
82:1a:14:cb:da:b3:14:09:d6:d1:ac:a8:d1:1a:11:
a3:5b:5a:be:63:f5:b8:2a:27:b4:69:74:1b:36:97:
23:a8:1a:af:d4:0d:8a:85:db:fc:33:39:65:ad:33:
56:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:87:01:43:26:D8:A3:CC:22:13:70:31:93:98:79:39:6F:AD:37:0A
X509v3 Authority Key Identifier:
keyid:E6:87:64:5E:DA:F4:95:74:BF:DE:86:A3:71:48:4E:E4:30:4A:DE:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/5odkXtr0lXS_3oajcUhO5DBK3n4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5odkXtr0lXS_3oajcUhO5DBK3n4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/5odkXtr0lXS_3oajcUhO5DBK3n4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:87:0a:0c:0f:a9:b6:bb:0e:1a:2d:76:e5:15:f2:38:3a:b2:
4a:3e:6f:36:3e:27:36:4c:4f:ef:88:3f:80:8c:66:8b:d3:71:
34:7e:2a:00:9d:ff:f6:96:9a:b2:72:67:06:d7:fb:db:0c:e9:
21:c3:3e:a7:96:3b:ae:f3:92:18:44:5e:88:e4:b2:86:99:93:
f4:76:09:d6:ca:9b:b2:e6:e3:41:7a:97:6f:c4:68:24:f9:42:
63:fc:69:cf:74:15:6b:53:41:8c:8b:2c:c0:fe:7d:bb:39:32:
20:51:a5:a4:4e:fb:77:4c:88:5c:a8:e4:e0:3e:e5:3a:78:01:
f8:3f:98:22:ec:2c:59:2a:6f:41:f0:ad:d4:c1:e1:a1:56:7f:
9b:fc:a7:44:0a:76:e0:f4:b2:f6:f1:4a:b9:c1:00:fe:f1:f8:
59:5e:61:6d:35:a2:11:a6:f7:dd:92:91:72:9b:8e:a6:43:a1:
70:79:dd:cc:23:78:56:75:7e:65:a4:02:ae:ac:00:0f:71:10:
4f:ee:9f:ec:f3:9f:e1:20:44:4a:6d:b6:c5:83:4a:b3:a8:e3:
76:9e:50:80:7c:62:f3:c2:12:d7:05:65:72:05:b6:3c:43:4b:
de:f7:7c:15:f2:6a:b6:df:c5:67:52:d3:eb:29:0b:66:37:86:
be:27:2d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:24:35 2025 by rpki-client