Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3296/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.mft
File: Dyhlg1nJdzIhcfQCMyNCwx3XxW4.mft (raw, json)
Hash identifier: 51M3jL+wrHegk1yekxi23Gwi0d9vuvwPcVasu9UPJpw=
Subject key identifier: 94:4E:1C:38:AF:E2:E2:30:95:2C:64:88:E7:63:4B:3C:0D:46:DA:AE
Authority key identifier: 0F:28:65:83:59:C9:77:32:21:71:F4:02:33:23:42:C3:1D:D7:C5:6E
Certificate issuer: /CN=0F28658359C977322171F402332342C31DD7C56E
Certificate serial: 0446
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.mft
Manifest number: 0446
Signing time: Fri 31 Jan 2025 15:28:19 +0000
Manifest this update: Fri 31 Jan 2025 15:28:19 +0000
Manifest next update: Fri 31 Jan 2025 21:28:19 +0000
Files and hashes: 1: Dyhlg1nJdzIhcfQCMyNCwx3XxW4.crl (hash: YPOmdNgawr846ORcVKpd1xS4AFEQVnTqONhO7UTCo4M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1094 (0x446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F28658359C977322171F402332342C31DD7C56E
Validity
Not Before: Jan 31 15:28:19 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=944E1C38AFE2E230952C6488E7634B3C0D46DAAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:bf:39:ef:ea:19:21:97:bf:5d:97:ce:93:
81:d6:bf:9d:4a:29:d2:34:01:33:c8:a7:bb:48:af:
f2:bb:99:a9:7a:70:87:2e:53:bb:e2:64:38:38:ec:
52:08:cf:bd:d5:5e:8d:25:e0:84:7f:a1:07:46:1c:
32:52:cf:d6:e0:b3:ba:d5:f0:18:49:16:0d:ce:5d:
e2:ea:f5:b3:6a:28:c8:31:d1:04:b5:cf:2f:05:30:
93:4c:9c:21:98:42:d9:a2:35:08:65:c8:3b:02:20:
ba:01:e2:31:80:ee:1c:2d:50:1b:d9:18:e3:cb:42:
7a:ed:40:66:2d:b6:04:f7:06:a4:f2:df:a7:d4:d2:
47:af:a9:8b:72:90:bd:77:b9:92:e0:31:65:01:ad:
57:e8:be:7e:f6:0c:73:d5:39:e7:6b:2f:8a:52:50:
4d:7e:25:ba:da:e8:e4:94:03:8c:15:e0:ed:d8:27:
df:cf:40:c0:12:69:ed:58:fe:cc:8f:89:28:96:a9:
fd:46:15:0e:bd:40:b0:a8:d5:6e:b6:f4:51:7f:84:
53:f0:ca:fc:1d:7b:6e:09:71:67:bc:b6:b4:ab:3b:
cc:42:df:c3:23:1c:53:0e:09:8d:0a:f3:e5:ba:a1:
d3:f9:2d:22:6b:6e:27:41:91:44:20:85:96:3c:9d:
cf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4E:1C:38:AF:E2:E2:30:95:2C:64:88:E7:63:4B:3C:0D:46:DA:AE
X509v3 Authority Key Identifier:
keyid:0F:28:65:83:59:C9:77:32:21:71:F4:02:33:23:42:C3:1D:D7:C5:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:64:82:be:b3:2d:64:68:6e:33:7f:20:2a:14:e1:c8:42:87:
77:46:ce:07:04:79:e4:be:04:3b:65:ae:34:ae:a3:d1:2a:d3:
26:98:ff:d9:8c:78:f0:f9:88:e9:4f:d5:7c:ec:64:d0:93:40:
6f:da:7f:84:dd:7a:86:db:9a:01:b6:e9:cc:32:da:86:0c:99:
f8:84:74:fc:b2:1d:9b:d3:82:3b:4f:86:36:a1:e1:db:9f:90:
17:a9:8a:38:ef:32:cf:5b:eb:12:60:80:a8:ae:30:88:76:1f:
3a:c7:23:60:17:05:85:7a:d0:9b:d5:79:fe:32:07:4e:4c:eb:
7f:8d:15:10:0c:34:fb:9b:83:a5:7e:38:25:dc:7d:10:48:a5:
bc:08:ba:b5:c9:b7:07:5c:d7:45:97:17:6a:a7:b8:13:66:4f:
a7:c4:d9:8b:85:81:e9:cb:fb:39:a6:fc:c8:39:d9:f4:6b:11:
29:1f:5c:76:81:7f:73:9d:db:45:76:0b:ea:18:c3:42:76:99:
61:6d:7e:30:db:44:2e:63:6d:14:7d:1b:5d:9c:85:d6:34:cd:
0c:af:2e:93:bb:2f:c3:c7:b7:c6:21:84:30:01:10:74:d6:62:
81:d5:f3:3e:c5:df:cb:b1:15:60:6c:d0:8b:a5:50:f4:f7:6e:
72:61:f5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:22:14 2025 by rpki-client