Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3312/iKjPlfPBdEQkezVk72xrva8tcMA.mft
File: iKjPlfPBdEQkezVk72xrva8tcMA.mft (raw, json)
Hash identifier: KUDDdI+q7mmnFDhvtwQYDvrV3FurthlOGWaiG3qLFI0=
Subject key identifier: 27:62:90:1D:BF:6C:FE:9E:16:6C:8E:CA:2F:B5:EA:BF:A7:67:69:4D
Authority key identifier: 88:A8:CF:95:F3:C1:74:44:24:7B:35:64:EF:6C:6B:BD:AF:2D:70:C0
Certificate issuer: /CN=88A8CF95F3C17444247B3564EF6C6BBDAF2D70C0
Certificate serial: 030B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iKjPlfPBdEQkezVk72xrva8tcMA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/iKjPlfPBdEQkezVk72xrva8tcMA.mft
Manifest number: 030B
Signing time: Fri 31 Jan 2025 15:28:18 +0000
Manifest this update: Fri 31 Jan 2025 15:28:18 +0000
Manifest next update: Fri 31 Jan 2025 21:28:18 +0000
Files and hashes: 1: iKjPlfPBdEQkezVk72xrva8tcMA.crl (hash: bHX4rfpFWquw7rsumQF2VyxkHco3EKMDOIWeBG5bqyQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 779 (0x30b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88A8CF95F3C17444247B3564EF6C6BBDAF2D70C0
Validity
Not Before: Jan 31 15:28:18 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=2762901DBF6CFE9E166C8ECA2FB5EABFA767694D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:c8:3e:39:cb:ca:1a:be:d5:b4:ec:e1:1b:
7d:f0:0d:1e:4b:1e:62:06:9b:49:9a:91:dd:56:61:
df:d6:09:3e:8c:eb:90:dd:99:4a:95:af:9a:ac:e6:
2e:49:47:d7:f3:4a:79:0a:db:1e:83:05:ac:8f:43:
5a:c3:1e:14:fa:e9:25:21:b7:66:d7:5d:d9:ed:96:
0c:bd:7e:f4:b7:fe:db:8a:4f:f2:13:d5:9f:b8:a8:
f9:a5:c0:fa:94:1a:85:d8:2d:24:90:f0:de:9f:e4:
25:3c:00:5c:39:bc:4d:28:6f:f0:3a:c0:14:62:7f:
c4:03:99:63:88:e6:98:a8:69:14:28:44:65:da:f7:
10:54:b5:5a:43:1b:f1:e8:4e:61:b9:0e:ea:67:c3:
62:77:46:cc:af:c7:c7:9a:bd:8a:bd:01:8a:25:c8:
b3:08:b0:a9:46:b6:c8:ec:9e:22:fe:69:b3:33:a3:
a5:17:f7:1b:8e:d5:52:75:44:df:ac:30:4f:c7:0b:
50:da:a3:12:12:e9:eb:d1:bf:ff:7a:77:49:49:ff:
7a:4a:59:66:f2:3f:92:88:1f:90:d4:3f:71:59:fc:
72:84:a7:29:7a:6a:ab:7b:4a:a2:1c:9b:29:b5:19:
64:1d:2d:18:08:1d:0e:8c:87:09:d3:46:4e:ff:04:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:62:90:1D:BF:6C:FE:9E:16:6C:8E:CA:2F:B5:EA:BF:A7:67:69:4D
X509v3 Authority Key Identifier:
keyid:88:A8:CF:95:F3:C1:74:44:24:7B:35:64:EF:6C:6B:BD:AF:2D:70:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/iKjPlfPBdEQkezVk72xrva8tcMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iKjPlfPBdEQkezVk72xrva8tcMA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/iKjPlfPBdEQkezVk72xrva8tcMA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:10:89:08:a2:c2:94:47:52:6d:e0:23:7a:48:df:ee:73:76:
35:dd:86:77:dc:72:5b:1d:93:13:57:9a:67:f2:65:f5:86:bc:
47:b7:7d:0e:f3:42:46:44:88:72:88:6b:fa:d4:56:65:17:ae:
e4:9e:f4:88:96:d0:0e:e1:03:93:57:3d:f5:53:38:4c:39:c1:
61:be:85:47:8a:4d:c9:74:33:6c:ad:5f:19:58:62:df:14:1a:
b4:5c:eb:08:72:c0:29:0e:82:ee:56:0b:5e:0d:8e:40:f9:4f:
b4:b5:bf:3f:03:49:71:a4:f3:ab:da:3e:08:82:2d:56:fb:da:
80:b0:b9:1a:e4:0e:71:8b:31:ba:c6:e7:dd:ce:fb:a1:f2:45:
4a:fd:37:a2:83:19:cc:14:73:60:9b:ea:7c:f0:ca:58:56:03:
c1:1f:4c:1e:65:70:bd:d2:52:f6:60:4f:87:c5:42:45:79:80:
1c:d5:29:fa:60:1b:01:cb:bd:8a:07:19:8c:26:5e:2e:21:18:
14:27:c4:83:a7:6a:50:f2:2c:21:fb:ee:f5:13:32:84:19:bc:
c5:85:6a:15:46:d8:fd:5c:88:98:95:73:46:a1:b9:b1:93:c9:
c7:b8:ac:02:aa:ea:f0:c1:f5:8b:d3:b5:2b:86:34:28:c8:d2:
18:f1:0c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:10:01 2025 by rpki-client