Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3295/RP1LOAf8IJACd92fE6z8qnpaOCg.mft
File: RP1LOAf8IJACd92fE6z8qnpaOCg.mft (raw, json)
Hash identifier: 7pmkaUiphpe1WHWwZq5PIUfowoU/cbrPT3sZm4B35zA=
Subject key identifier: 70:6B:01:9E:6D:A7:CA:14:73:DE:36:E6:B2:FE:28:1B:DB:4C:E1:4F
Authority key identifier: 44:FD:4B:38:07:FC:20:90:02:77:DD:9F:13:AC:FC:AA:7A:5A:38:28
Certificate issuer: /CN=44FD4B3807FC20900277DD9F13ACFCAA7A5A3828
Certificate serial: 01EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RP1LOAf8IJACd92fE6z8qnpaOCg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/RP1LOAf8IJACd92fE6z8qnpaOCg.mft
Manifest number: 01EF
Signing time: Fri 31 Jan 2025 15:27:39 +0000
Manifest this update: Fri 31 Jan 2025 15:27:39 +0000
Manifest next update: Fri 31 Jan 2025 21:27:39 +0000
Files and hashes: 1: RP1LOAf8IJACd92fE6z8qnpaOCg.crl (hash: 2Wo29ajCs3YNf+hgGUHTPu1acGeHxSdjoT3fmDsBJ+0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 495 (0x1ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44FD4B3807FC20900277DD9F13ACFCAA7A5A3828
Validity
Not Before: Jan 31 15:27:39 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=706B019E6DA7CA1473DE36E6B2FE281BDB4CE14F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:8c:15:6f:b7:0c:20:33:cc:9d:26:47:19:
3c:31:48:e0:3a:88:f3:c0:32:10:3c:90:9b:f4:cd:
b8:00:54:fe:02:24:0e:74:98:09:52:5b:25:b2:43:
d3:30:eb:68:06:79:45:b1:d1:20:48:dd:de:18:d9:
4d:2f:ce:ae:1b:d9:d9:b9:34:66:1b:42:b9:f1:58:
24:08:1c:36:39:5a:11:99:10:dc:f4:2a:c2:d0:3b:
78:85:f1:94:fe:0b:d4:bb:24:2d:f9:ff:f4:95:d0:
f7:68:25:39:79:12:80:2b:39:5c:5a:7c:ef:64:03:
7c:b9:26:bc:67:72:85:0a:3c:d0:6e:70:a3:c5:19:
0f:bf:fa:3a:92:a4:2a:28:38:a1:5b:76:0d:68:f0:
ed:ca:84:d8:56:8f:fb:ae:7f:70:3d:d3:a9:53:6a:
6e:91:52:e4:0a:a5:f5:30:9b:43:4e:21:71:8a:ab:
15:e1:8c:f8:e7:84:74:29:d2:57:51:46:6c:2d:73:
2f:2b:23:f2:b8:d3:dd:03:31:a3:7f:01:71:3a:b6:
d3:86:23:b2:5b:34:60:d3:52:67:fc:53:5e:30:d0:
9a:89:59:f4:00:eb:5b:26:b8:64:4d:83:93:76:5d:
64:7d:4a:b5:37:7c:23:28:91:18:a3:16:80:9b:d0:
9e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6B:01:9E:6D:A7:CA:14:73:DE:36:E6:B2:FE:28:1B:DB:4C:E1:4F
X509v3 Authority Key Identifier:
keyid:44:FD:4B:38:07:FC:20:90:02:77:DD:9F:13:AC:FC:AA:7A:5A:38:28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/RP1LOAf8IJACd92fE6z8qnpaOCg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RP1LOAf8IJACd92fE6z8qnpaOCg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/RP1LOAf8IJACd92fE6z8qnpaOCg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:37:a5:1b:ed:8e:68:18:a2:ce:9a:57:55:e7:f5:0e:ae:2b:
ee:80:1e:e2:34:4f:ea:b0:70:cb:ae:de:b9:8a:22:f6:61:25:
9c:f2:0c:a8:3e:0d:fd:74:3c:06:cd:97:b9:c9:c1:dc:de:b8:
db:7b:f0:50:ce:ab:ed:04:bf:d3:54:f1:8f:2b:15:0f:b1:4b:
6f:84:21:5a:e9:dc:b1:c5:33:9b:41:34:aa:a2:a8:5e:9e:f6:
65:98:c2:ae:67:01:23:b1:8c:79:f8:22:5e:bf:33:79:6f:3f:
9e:59:5c:80:fc:a6:a7:c7:22:7c:db:93:fe:69:e2:2f:6a:64:
cf:b0:14:c4:b0:13:89:77:6b:08:ed:14:7c:57:70:fd:9d:8d:
58:23:5b:33:c7:0f:f6:ab:a6:ad:47:ed:54:ce:b1:e6:52:c5:
d5:d0:e4:69:d9:1d:fe:a8:26:d5:c8:de:77:e6:e0:48:e1:1d:
8b:43:89:7d:0b:42:1d:3c:03:f0:1a:72:07:55:f3:8d:a1:ca:
4d:a2:58:08:1b:2f:e6:20:d7:3f:da:81:81:5f:26:6a:86:33:
97:e1:f0:11:41:ad:51:0b:4c:b2:68:f0:cf:11:ec:dd:d1:c8:
52:b1:99:69:39:89:ee:0b:87:74:ce:2f:4d:c0:59:99:64:04:
7f:df:6b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:30:59 2025 by rpki-client