Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3282/TPCRRt5gTA5ELVbGj8hsxQQArSE.mft
File: TPCRRt5gTA5ELVbGj8hsxQQArSE.mft (raw, json)
Hash identifier: BlykJtW9el1gIkHkOsBP2hHSb6tniUMOGYR++Tr6lzo=
Subject key identifier: 3D:E4:46:07:C7:25:81:96:BF:B2:E4:51:4E:F5:22:AC:03:3E:12:0A
Authority key identifier: 4C:F0:91:46:DE:60:4C:0E:44:2D:56:C6:8F:C8:6C:C5:04:00:AD:21
Certificate issuer: /CN=4CF09146DE604C0E442D56C68FC86CC50400AD21
Certificate serial: 0511
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TPCRRt5gTA5ELVbGj8hsxQQArSE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TPCRRt5gTA5ELVbGj8hsxQQArSE.mft
Manifest number: 0511
Signing time: Fri 31 Jan 2025 15:27:16 +0000
Manifest this update: Fri 31 Jan 2025 15:27:16 +0000
Manifest next update: Fri 31 Jan 2025 21:27:16 +0000
Files and hashes: 1: TPCRRt5gTA5ELVbGj8hsxQQArSE.crl (hash: Dm94P9QA6N15MT8mAdfabfH+c+vk6J7T+HypLpzWTTY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1297 (0x511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CF09146DE604C0E442D56C68FC86CC50400AD21
Validity
Not Before: Jan 31 15:27:16 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3DE44607C7258196BFB2E4514EF522AC033E120A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:57:8b:9f:48:fe:72:52:d5:33:80:7f:8a:
c7:e8:8e:f7:d8:2a:b2:4f:bd:6d:ca:0f:94:85:2d:
55:99:15:1d:fc:b6:eb:26:3c:1c:fa:15:e5:3c:d2:
c9:bf:b1:b2:dc:61:69:84:79:cc:d0:8b:43:f7:23:
20:f7:b8:92:c2:dc:a6:24:c4:70:f6:64:4d:a0:05:
ef:64:1c:04:e5:60:85:72:53:ed:11:83:30:7b:c7:
db:b9:83:a9:17:42:7a:c0:3b:5d:89:30:1c:1f:3d:
9a:c5:42:5c:8f:ec:1a:32:ca:a5:25:db:7d:43:8e:
d3:6c:4e:66:4b:55:ac:c5:a9:09:bd:d9:0e:2a:1c:
9f:44:80:a8:b1:3c:30:48:46:da:79:b8:bb:12:c2:
f4:b3:ff:5e:86:a7:32:db:11:b3:cc:d4:36:86:81:
85:73:50:fb:d2:4d:c8:f6:7f:08:52:89:3b:cb:87:
47:ab:f3:ac:7c:4d:73:bb:e0:16:b5:ae:92:36:5a:
d6:8d:7e:7b:1c:b9:16:22:b9:50:89:c9:de:9d:bf:
37:0a:05:2b:2f:60:ec:fc:bc:d0:56:5d:7f:d5:d7:
84:60:66:31:df:0c:7c:41:05:b4:f3:9d:42:26:7d:
e6:20:17:d2:d9:ac:43:6c:95:9c:a5:df:c4:5c:92:
86:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E4:46:07:C7:25:81:96:BF:B2:E4:51:4E:F5:22:AC:03:3E:12:0A
X509v3 Authority Key Identifier:
keyid:4C:F0:91:46:DE:60:4C:0E:44:2D:56:C6:8F:C8:6C:C5:04:00:AD:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TPCRRt5gTA5ELVbGj8hsxQQArSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TPCRRt5gTA5ELVbGj8hsxQQArSE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TPCRRt5gTA5ELVbGj8hsxQQArSE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:2d:95:bf:cb:b3:b3:d4:27:46:ec:ee:5c:f0:64:86:85:c7:
c0:27:d2:4b:d6:81:64:5d:be:95:39:8e:95:8f:10:8d:6f:63:
b1:2d:24:a8:03:78:32:1b:b4:94:bc:87:49:bd:11:4a:fc:f3:
7e:67:72:d4:9f:7e:89:0d:7b:31:b4:73:a1:e0:4e:f1:c7:cc:
cc:1c:a5:69:c7:87:23:e2:ea:ac:fd:c1:32:fb:eb:87:f4:6f:
50:38:33:77:69:fb:b8:04:0e:1f:18:d1:34:6f:df:87:ae:af:
af:21:64:66:78:b4:53:43:5f:30:4a:a8:6e:8b:9f:55:99:90:
fc:88:a9:0d:bd:9d:40:8e:2e:54:6f:57:dc:2f:af:e1:3f:04:
05:dc:16:e4:7e:2c:aa:24:74:5a:40:cd:a7:77:a0:f7:40:b3:
0d:b2:99:d9:39:9a:3e:5a:43:46:be:c8:21:dc:6e:a5:52:bd:
e3:d1:36:91:1c:e2:06:54:bc:e2:21:e4:53:ba:4c:98:ab:8b:
d8:6b:e1:8d:de:f9:10:e9:77:76:e7:47:00:0c:84:8d:80:6e:
41:b4:98:1f:a6:15:8d:ed:32:b0:c8:de:3f:f2:25:cf:e2:f6:
a5:1b:e4:76:87:1b:0a:9b:38:27:46:c3:bb:dd:cc:ee:da:46:
1d:c1:25:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:49:05 2025 by rpki-client