Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft
File: OpXd7iyMGeRxgIou20cqqm_g9Jg.mft (raw, json)
Hash identifier: NHHR+bkz5kd1I6GWZytSOKcZ9fsHsdqJfw51CCH63YI=
Subject key identifier: 02:4B:98:97:BA:27:D7:6C:6D:9B:8F:9C:57:C9:97:D1:98:75:C2:F0
Authority key identifier: 3A:95:DD:EE:2C:8C:19:E4:71:80:8A:2E:DB:47:2A:AA:6F:E0:F4:98
Certificate issuer: /CN=3A95DDEE2C8C19E471808A2EDB472AAA6FE0F498
Certificate serial: 0444
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OpXd7iyMGeRxgIou20cqqm_g9Jg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft
Manifest number: 0444
Signing time: Fri 31 Jan 2025 15:27:43 +0000
Manifest this update: Fri 31 Jan 2025 15:27:43 +0000
Manifest next update: Fri 31 Jan 2025 21:27:43 +0000
Files and hashes: 1: OpXd7iyMGeRxgIou20cqqm_g9Jg.crl (hash: gGyxawtMNPV1N+XitOoXRxVcPFUPjIBBrlsrlR6xEfc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1092 (0x444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A95DDEE2C8C19E471808A2EDB472AAA6FE0F498
Validity
Not Before: Jan 31 15:27:43 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=024B9897BA27D76C6D9B8F9C57C997D19875C2F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9a:fb:3f:3b:ce:94:d2:81:30:cb:cc:a5:ce:
e3:ad:a8:f0:a2:da:6f:11:37:7a:4b:db:83:6e:5b:
b2:87:05:0a:37:9b:0d:12:08:f1:cf:a6:99:d7:3d:
13:cc:9e:48:88:0b:43:5e:7c:0f:b3:d3:11:b3:65:
ea:db:89:23:e3:79:1f:2a:05:2e:d3:d1:37:d9:30:
6d:1d:ab:a2:2b:fc:7b:93:72:42:42:e2:24:30:ee:
3d:4e:27:fe:90:f8:d1:1b:81:17:1a:56:5a:55:50:
e8:ec:ff:93:aa:4a:2f:f0:ad:25:96:3e:83:9d:bd:
66:17:0b:5b:03:ee:92:f3:08:71:44:c1:b5:0b:59:
56:81:b4:e3:de:b6:a7:36:0a:8c:d3:97:2b:ef:aa:
72:5a:bb:d4:47:d3:ed:c1:e5:14:b6:b8:3d:3d:36:
46:06:63:a9:4a:0c:74:c2:25:f9:fd:90:a1:83:24:
db:f9:69:2f:61:1d:dc:f7:c5:46:38:ff:96:98:97:
4f:3f:a4:00:f7:db:1d:57:95:b1:3b:90:29:36:7a:
e2:bb:99:09:85:89:d2:ad:05:6a:78:a2:7f:5f:ea:
83:8d:cf:c3:46:9f:39:87:39:de:00:46:9f:12:a8:
4e:3a:7d:66:49:5e:98:ba:ef:1d:55:9c:6d:c5:cb:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4B:98:97:BA:27:D7:6C:6D:9B:8F:9C:57:C9:97:D1:98:75:C2:F0
X509v3 Authority Key Identifier:
keyid:3A:95:DD:EE:2C:8C:19:E4:71:80:8A:2E:DB:47:2A:AA:6F:E0:F4:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OpXd7iyMGeRxgIou20cqqm_g9Jg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:47:01:ac:2d:17:5e:ab:d1:f5:f3:9a:9d:6b:ed:86:95:f6:
17:12:92:0f:ad:43:d3:e4:f9:68:82:0c:62:a2:22:af:a4:19:
a6:d9:cc:fc:f4:a0:79:05:54:3c:dc:b2:1a:9e:38:6d:85:59:
ad:2e:a4:fa:62:c2:8a:d4:32:3c:4c:5f:30:94:0f:c3:bf:a3:
ec:8e:32:9d:b0:4d:49:b4:ae:4c:6d:da:39:1d:44:f9:a3:43:
db:0f:46:53:1a:88:68:51:0e:6b:01:f8:a6:e4:30:d7:1c:a9:
ee:79:a5:c3:9f:bd:7b:53:fd:8e:1c:d8:fa:18:6d:c9:90:bb:
91:b2:02:e4:30:8f:51:2a:50:6b:93:37:c1:7d:6e:24:df:27:
3a:6f:b6:37:a4:d8:98:15:fd:7a:e1:33:67:f2:fa:60:78:b1:
63:5c:c7:2d:e9:bb:8a:4d:15:2d:9e:99:d9:de:6f:2c:62:63:
f2:09:7d:6b:fe:ff:b3:a3:31:77:50:9e:aa:e5:5a:49:9d:ae:
e6:be:7e:74:9c:66:3d:a0:56:07:6e:7b:6b:36:01:d3:9b:9f:
17:60:f9:c3:95:c5:b0:c9:6c:b2:29:64:ae:4b:ed:2b:77:ce:
80:5c:d5:f5:74:2b:a1:d2:8f:08:f0:77:e1:b0:7d:ed:dc:f9:
37:4b:e2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:29:41 2025 by rpki-client