Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3288/20kOavCkTf-CaNSAeFjUum7WBtk.mft
File: 20kOavCkTf-CaNSAeFjUum7WBtk.mft (raw, json)
Hash identifier: nr6NIF5LCPkzN14BQUBLVN408km/MkyVXibX8/mck6I=
Subject key identifier: 4D:97:94:07:C5:7C:64:38:66:39:BA:F7:B7:31:97:0F:D5:BE:CF:78
Authority key identifier: DB:49:0E:6A:F0:A4:4D:FF:82:68:D4:80:78:58:D4:BA:6E:D6:06:D9
Certificate issuer: /CN=DB490E6AF0A44DFF8268D4807858D4BA6ED606D9
Certificate serial: 04A8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/20kOavCkTf-CaNSAeFjUum7WBtk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3288/20kOavCkTf-CaNSAeFjUum7WBtk.mft
Manifest number: 04A8
Signing time: Fri 31 Jan 2025 15:25:00 +0000
Manifest this update: Fri 31 Jan 2025 15:25:00 +0000
Manifest next update: Fri 31 Jan 2025 21:25:00 +0000
Files and hashes: 1: 20kOavCkTf-CaNSAeFjUum7WBtk.crl (hash: dOHf35NrUg6dvljatl3L84wSpg2pMh0UGDnEJMpeIBQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1192 (0x4a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB490E6AF0A44DFF8268D4807858D4BA6ED606D9
Validity
Not Before: Jan 31 15:25:00 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4D979407C57C64386639BAF7B731970FD5BECF78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:93:53:e3:24:b9:d9:4b:58:0f:74:13:3b:a7:
d2:d4:ad:38:1a:c0:a2:a8:28:9f:c8:b7:a1:70:70:
18:84:67:63:22:9b:6e:e3:8d:a5:23:33:e7:3b:6e:
73:3c:15:b4:93:03:89:a4:3f:e2:74:8e:e0:42:ed:
92:7e:ff:73:76:b7:8c:c9:83:22:9d:88:69:cb:37:
30:4b:e3:80:0b:c2:14:73:1b:e1:c4:4a:09:24:3f:
de:06:04:60:a0:03:4c:cd:35:36:9e:b4:cb:56:c9:
56:dd:4c:c4:c0:ff:56:54:56:e6:81:05:57:75:16:
ef:65:3e:5a:2c:b9:83:4f:ac:e7:2b:e9:0a:ab:ec:
1e:15:03:cf:fe:f9:43:f0:19:c7:eb:fe:70:95:94:
f8:42:cd:1e:2e:76:1f:a7:81:e6:8c:d3:5e:d3:f1:
6c:19:cf:b4:30:62:d7:0f:aa:99:f6:47:c3:a7:f6:
ad:bc:ee:17:e4:48:77:ae:43:e1:0a:fc:ae:37:91:
e2:f6:14:bc:59:45:4d:cf:21:09:2c:3c:bf:5e:b8:
48:59:26:fb:b1:52:67:7a:a7:58:78:f2:e0:70:28:
81:52:83:f7:be:f0:8a:47:55:00:85:52:ae:e2:0f:
d3:85:e9:b0:b9:bd:d2:54:f6:df:00:e0:68:a7:2d:
a2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:97:94:07:C5:7C:64:38:66:39:BA:F7:B7:31:97:0F:D5:BE:CF:78
X509v3 Authority Key Identifier:
keyid:DB:49:0E:6A:F0:A4:4D:FF:82:68:D4:80:78:58:D4:BA:6E:D6:06:D9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3288/20kOavCkTf-CaNSAeFjUum7WBtk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/20kOavCkTf-CaNSAeFjUum7WBtk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3288/20kOavCkTf-CaNSAeFjUum7WBtk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:23:a0:ed:cc:c2:13:68:d2:bc:f4:09:60:4e:25:2a:74:c0:
07:26:93:77:a6:45:c1:ba:37:6a:26:bf:21:6a:29:fe:28:1a:
97:dd:52:50:e1:f6:1f:45:dd:d8:bf:fc:b3:45:d6:92:c2:73:
67:f8:61:92:27:26:8b:aa:6b:ad:74:96:22:f5:f2:98:0f:a1:
39:5e:19:72:e3:89:61:d9:74:4a:34:bf:9f:42:c5:0c:9d:35:
b6:8a:c2:e7:b7:0d:5b:b8:95:b1:99:29:9c:4f:1c:3a:51:54:
c1:cd:45:73:08:0a:aa:95:0f:39:9f:46:8a:93:43:34:a2:12:
6a:89:67:b8:58:18:b5:01:49:1e:ce:43:5f:95:42:24:e2:3b:
48:7d:cd:dc:55:44:e3:e3:68:5c:fa:f3:c8:54:bb:45:e6:63:
11:f2:f3:35:9b:36:f6:0a:88:57:22:38:42:8e:e8:26:f6:89:
48:e2:7f:71:cc:20:5e:d0:16:e7:df:2e:5a:84:8f:07:e5:5d:
45:a7:f2:ba:1f:35:54:ad:42:e7:71:60:9b:7f:fe:63:b1:e1:
b1:4b:64:fe:84:4e:68:29:9d:9c:37:ab:3e:b4:98:39:77:4b:
62:dc:89:44:7c:60:32:7f:7c:c0:2d:d8:23:ba:48:19:de:bf:
7f:f3:e3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:41:48 2025 by rpki-client