Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3313/1jfzzebYbvkaDKnPorWwML7sCUA.mft
File: 1jfzzebYbvkaDKnPorWwML7sCUA.mft (raw, json)
Hash identifier: yMofXrtGhkeIY+cjVKAerc/NqoDZtzBNv4lq7zVmnVs=
Subject key identifier: DC:FD:43:DA:80:B6:53:C7:05:87:FF:30:64:10:9E:DD:2C:50:86:64
Authority key identifier: D6:37:F3:CD:E6:D8:6E:F9:1A:0C:A9:CF:A2:B5:B0:30:BE:EC:09:40
Certificate issuer: /CN=D637F3CDE6D86EF91A0CA9CFA2B5B030BEEC0940
Certificate serial: 030B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1jfzzebYbvkaDKnPorWwML7sCUA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/1jfzzebYbvkaDKnPorWwML7sCUA.mft
Manifest number: 030B
Signing time: Fri 31 Jan 2025 15:28:07 +0000
Manifest this update: Fri 31 Jan 2025 15:28:07 +0000
Manifest next update: Fri 31 Jan 2025 21:28:07 +0000
Files and hashes: 1: 1jfzzebYbvkaDKnPorWwML7sCUA.crl (hash: y/wW+NgHzzaP+uX8dWGjlU9D1xg+vpAoqJIpvt8ruJ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 779 (0x30b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D637F3CDE6D86EF91A0CA9CFA2B5B030BEEC0940
Validity
Not Before: Jan 31 15:28:07 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DCFD43DA80B653C70587FF3064109EDD2C508664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:4d:63:7e:6d:17:70:9d:81:b7:94:36:2b:
09:01:6e:dc:5f:1b:7d:24:9a:bb:db:ac:a8:fd:a1:
c2:da:3d:9e:39:4e:b5:ac:cb:20:46:e9:44:1e:f2:
51:30:f8:c8:86:3a:66:58:1e:b9:e6:5d:52:99:8e:
74:6c:37:44:eb:84:97:8d:3d:e5:e3:f1:dc:54:7f:
b8:db:b5:14:46:96:4c:a1:aa:2f:36:e1:aa:ca:12:
55:30:64:66:56:15:1c:6f:bd:ba:60:e7:d3:ea:07:
76:4d:16:dc:d5:73:10:f2:12:e6:f7:25:c7:11:23:
37:10:01:af:69:82:bf:7c:e0:eb:ae:1b:c5:bb:24:
41:fe:7b:46:f7:d3:d8:64:65:a2:03:69:3f:e0:7a:
44:23:71:8f:be:81:48:4a:c6:d3:db:63:65:d0:70:
e1:e2:78:f9:08:66:a0:22:7c:e7:55:5c:b4:f0:d9:
07:95:58:2b:ad:a2:52:2f:bd:f4:a2:66:07:fa:36:
0d:54:6c:bf:96:46:b5:ec:d8:b9:d7:0d:6c:0d:8a:
b4:29:c5:ed:be:ad:51:66:43:fc:70:a0:c0:59:18:
68:9b:75:f9:15:f9:db:69:96:48:7e:33:93:06:d4:
06:71:6a:50:d2:aa:b1:ba:36:32:63:8c:c9:d5:f5:
97:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FD:43:DA:80:B6:53:C7:05:87:FF:30:64:10:9E:DD:2C:50:86:64
X509v3 Authority Key Identifier:
keyid:D6:37:F3:CD:E6:D8:6E:F9:1A:0C:A9:CF:A2:B5:B0:30:BE:EC:09:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/1jfzzebYbvkaDKnPorWwML7sCUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1jfzzebYbvkaDKnPorWwML7sCUA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/1jfzzebYbvkaDKnPorWwML7sCUA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:6c:89:a0:ad:f9:34:10:4e:78:8a:a9:57:de:8b:e7:0c:72:
91:38:6b:60:4a:3b:b4:68:0d:f6:b4:40:72:d0:4e:55:8b:37:
4b:77:2e:17:a8:5e:11:15:9e:2a:72:4c:7f:7e:18:b9:c5:8c:
2e:af:d6:32:ba:f4:67:e5:06:c6:08:42:b8:f8:56:04:e5:51:
0d:88:dc:98:32:ac:1f:2c:dc:23:5c:b7:3b:4d:03:d3:12:67:
65:c2:42:61:8a:36:aa:35:49:0a:95:dd:a3:ee:6f:22:e8:7d:
9f:f6:e5:e3:d7:3d:56:fd:21:1f:72:52:a2:6e:b9:b4:84:dc:
54:c2:86:5f:c5:83:8c:2d:fc:b3:b1:a2:f9:6f:bd:06:a8:15:
80:1f:12:51:79:b8:4d:a4:9b:2b:0d:05:56:30:2a:d3:2b:0c:
f9:75:c0:2d:a6:8b:61:10:ba:4a:8e:75:6b:3d:a0:f1:ce:c1:
0b:e7:98:c5:2a:ee:15:90:30:45:b0:5e:6c:24:8d:8b:4e:f6:
ac:c9:98:71:16:46:8c:96:d1:56:e5:72:04:fa:13:ba:73:cd:
d2:59:8a:22:97:46:5f:2e:8b:6d:77:5d:66:d7:42:6f:46:4b:
6b:45:52:e5:70:d8:4e:20:fc:9e:56:a8:3b:af:a6:92:49:69:
8d:29:10:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:32:30 2025 by rpki-client