Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.mft
File: HjLVp6TGq1Ov4e_srAET7e7SZYI.mft (raw, json)
Hash identifier: q5NJYUX4ebSQ/k/PD5HiDeXmpGypQvDLJKdy62F/CMY=
Subject key identifier: C3:53:D4:45:0C:54:3C:80:DE:DD:52:A1:46:BC:23:76:5C:53:C4:80
Authority key identifier: 1E:32:D5:A7:A4:C6:AB:53:AF:E1:EF:EC:AC:01:13:ED:EE:D2:65:82
Certificate issuer: /CN=1E32D5A7A4C6AB53AFE1EFECAC0113EDEED26582
Certificate serial: 047A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HjLVp6TGq1Ov4e_srAET7e7SZYI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.mft
Manifest number: 047A
Signing time: Fri 31 Jan 2025 15:27:47 +0000
Manifest this update: Fri 31 Jan 2025 15:27:47 +0000
Manifest next update: Fri 31 Jan 2025 21:27:47 +0000
Files and hashes: 1: HjLVp6TGq1Ov4e_srAET7e7SZYI.crl (hash: PL/3AvyrirtVEZuddAiZtdIOMQY8dohMUdSAm9u7bNk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1146 (0x47a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E32D5A7A4C6AB53AFE1EFECAC0113EDEED26582
Validity
Not Before: Jan 31 15:27:47 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C353D4450C543C80DEDD52A146BC23765C53C480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:47:61:83:b2:d0:c6:93:4d:ae:70:cb:ad:
de:df:6e:ff:90:b4:4d:50:36:eb:1b:51:ca:37:c3:
5c:29:98:84:9d:df:ca:37:e1:3d:cd:e1:a9:f6:b9:
d9:0f:e4:6c:b3:fb:e7:e4:dd:28:11:16:d5:aa:08:
bc:d9:d5:3c:bf:bc:a4:66:a3:28:21:9a:f6:74:e3:
f6:15:bd:aa:35:5f:49:48:03:33:7f:7b:85:1b:43:
04:9f:8e:fc:74:dd:22:94:3c:91:67:e9:1c:0a:14:
81:89:56:9e:0e:77:bc:f0:73:fe:ce:74:89:52:38:
94:54:62:9c:7c:cf:a4:8c:4e:a6:bb:3f:42:04:73:
86:08:49:59:c7:5d:7d:b8:4c:36:02:80:a7:35:de:
47:48:15:d7:9b:95:a2:5c:1d:bb:89:91:35:69:de:
e8:e1:66:22:cc:e7:86:a3:81:a8:aa:f2:af:08:36:
86:c7:e3:fa:47:55:a3:f8:b1:52:80:57:76:36:b8:
f1:84:32:c5:e8:fc:35:25:3a:3f:50:39:cb:93:29:
6d:fb:0d:c1:ee:91:2c:fa:d4:f8:c9:83:ec:17:53:
89:bc:ce:82:71:00:d9:4b:e0:2b:23:cb:7a:6e:bc:
11:7e:66:5a:06:be:a7:29:05:01:a0:c0:c4:7b:cb:
cd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:53:D4:45:0C:54:3C:80:DE:DD:52:A1:46:BC:23:76:5C:53:C4:80
X509v3 Authority Key Identifier:
keyid:1E:32:D5:A7:A4:C6:AB:53:AF:E1:EF:EC:AC:01:13:ED:EE:D2:65:82
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HjLVp6TGq1Ov4e_srAET7e7SZYI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/HjLVp6TGq1Ov4e_srAET7e7SZYI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1b:3b:a8:80:e3:35:4e:8e:6d:85:5c:e6:58:cf:d9:e4:db:
06:e8:cb:dc:bd:45:60:db:6d:18:f9:5a:5b:8e:2f:76:d4:40:
28:95:ca:e3:4c:56:a9:9f:04:3c:90:24:aa:1f:fd:f3:8b:ac:
3b:9b:7b:18:07:8f:c2:5c:1d:f0:4a:be:0d:5e:c8:24:0a:dc:
6f:b1:7b:2d:19:5a:9d:59:31:c5:53:3f:a1:9c:0b:4d:f1:e4:
3c:bf:70:39:03:a5:03:a6:3e:28:73:99:d8:2f:02:ad:c9:60:
a5:aa:e8:4d:75:35:3b:d7:c2:4b:42:b1:0f:54:d0:01:ab:a7:
83:10:16:57:e9:d1:a5:12:9d:fe:29:72:01:40:f0:a9:d2:87:
dd:f9:51:c0:29:38:4c:10:1c:b6:ac:36:41:2b:23:0b:e1:30:
85:a6:81:79:18:e5:5a:e6:e2:86:76:fc:13:02:ea:3c:4b:10:
84:c5:60:ee:6d:9e:19:34:30:df:4a:c5:8f:d1:76:92:e0:f4:
fc:5d:ce:84:5a:e8:79:2c:b1:a7:32:60:47:48:87:9d:c0:31:
a7:73:19:81:20:a8:5b:f1:96:32:1e:90:f2:13:3b:2c:72:cb:
cc:98:df:00:32:4d:85:8a:e2:2b:ba:a1:d1:42:c1:a3:f4:2d:
63:89:10:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:31:23 2025 by rpki-client