Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3283/R9n8VhrefVa8dc2H8ZXcoOSg0M8.mft
File: R9n8VhrefVa8dc2H8ZXcoOSg0M8.mft (raw, json)
Hash identifier: IS3KH7zBAm+DylpmEQ2tybqNiXGBDHFR/j7ERHRwI1s=
Subject key identifier: 0E:56:4F:28:ED:01:76:81:E6:4A:0D:DC:DA:66:E1:14:5B:B7:B9:81
Authority key identifier: 47:D9:FC:56:1A:DE:7D:56:BC:75:CD:87:F1:95:DC:A0:E4:A0:D0:CF
Certificate issuer: /CN=47D9FC561ADE7D56BC75CD87F195DCA0E4A0D0CF
Certificate serial: 0508
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/R9n8VhrefVa8dc2H8ZXcoOSg0M8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/R9n8VhrefVa8dc2H8ZXcoOSg0M8.mft
Manifest number: 0508
Signing time: Fri 31 Jan 2025 15:27:22 +0000
Manifest this update: Fri 31 Jan 2025 15:27:22 +0000
Manifest next update: Fri 31 Jan 2025 21:27:22 +0000
Files and hashes: 1: R9n8VhrefVa8dc2H8ZXcoOSg0M8.crl (hash: IGVafncITu2EBAsH2zTaeNuDS67MA2nsBhBsaiNVa3w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1288 (0x508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47D9FC561ADE7D56BC75CD87F195DCA0E4A0D0CF
Validity
Not Before: Jan 31 15:27:22 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0E564F28ED017681E64A0DDCDA66E1145BB7B981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d3:22:71:1f:e4:ef:11:08:8b:68:36:ce:86:
e7:46:7f:34:cc:5e:dc:0c:28:90:f0:12:8d:89:e5:
62:48:04:7c:9c:ac:14:c3:27:17:f5:17:3b:3a:ee:
23:d9:fe:0e:99:61:ca:34:cd:1e:74:db:7a:51:94:
29:4e:6f:d2:66:2f:6a:48:ca:32:d9:ce:fe:db:17:
20:05:53:94:50:1c:06:41:70:78:7d:4f:53:e9:5d:
21:6b:f5:ff:77:76:05:60:60:69:0c:c6:07:b2:8b:
f8:3a:6c:fb:da:47:73:81:38:a2:85:ce:de:31:c3:
62:a2:42:69:f2:d3:99:e0:d9:26:78:cb:12:1f:f3:
56:48:b3:1c:9f:5d:8d:d2:e2:43:eb:b0:77:b5:a3:
33:b9:71:74:d6:ba:a8:bb:11:be:90:5c:c8:68:ed:
f5:1e:4e:8f:7e:ae:da:59:e3:ee:97:bd:c3:76:79:
79:25:ce:dc:2f:93:8f:6a:4f:66:fb:32:e7:81:c1:
c3:09:27:73:0a:19:50:fd:ef:93:a5:2b:ef:9b:a0:
c0:2d:d0:2f:05:a9:ec:b2:e5:06:d1:90:b7:7a:2f:
5f:58:ae:bd:78:1c:c7:af:58:7b:f7:e0:9d:8b:fe:
7a:41:8f:91:14:6d:05:3e:f7:2e:3d:ca:dc:57:10:
0b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:56:4F:28:ED:01:76:81:E6:4A:0D:DC:DA:66:E1:14:5B:B7:B9:81
X509v3 Authority Key Identifier:
keyid:47:D9:FC:56:1A:DE:7D:56:BC:75:CD:87:F1:95:DC:A0:E4:A0:D0:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/R9n8VhrefVa8dc2H8ZXcoOSg0M8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/R9n8VhrefVa8dc2H8ZXcoOSg0M8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/R9n8VhrefVa8dc2H8ZXcoOSg0M8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:ac:2a:f4:c3:8d:37:74:79:70:cc:84:83:ad:2b:89:3d:58:
d9:72:0e:a7:1c:a2:32:8f:a5:92:ba:62:6b:df:0e:eb:98:92:
05:81:a4:c9:2d:68:64:6b:e8:03:2b:01:66:d4:62:fb:ed:d5:
b5:22:49:cf:c9:21:a7:8c:77:bf:5b:da:a7:47:e6:1f:d1:2c:
b5:36:c0:a0:b4:c5:fc:ec:f4:cd:fb:f8:66:63:8e:5c:6a:18:
93:e7:e1:fe:ff:bb:b8:c6:ba:c4:e2:8c:c2:2d:67:b5:51:7a:
66:5d:14:2b:7b:e1:76:35:b8:95:4d:40:76:67:c1:1f:8e:ad:
97:a8:0f:49:01:62:79:2b:42:e6:fc:da:b5:c8:5b:e0:c8:44:
c0:74:0d:cb:34:c7:98:0e:9f:7b:6c:95:37:91:6a:3f:2e:3d:
14:5f:04:de:97:3c:6b:55:1a:95:5f:62:c1:91:8d:0d:c8:c2:
82:0d:b9:d4:cf:60:66:98:43:3c:46:20:4b:2e:db:45:54:41:
c2:9d:a2:3e:53:01:7d:a9:79:83:e0:dd:e7:a1:41:e8:ab:ba:
23:f8:27:66:19:d6:9d:c8:71:87:54:e8:17:c1:c4:e9:de:28:
dd:ae:a6:62:70:fa:72:06:24:d4:19:c8:f7:cd:3c:bf:a6:3a:
8d:7e:d5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:42:04 2025 by rpki-client