Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3314/JKE7dSyiLWMkgdhuY953eAuDMfw.mft
File: JKE7dSyiLWMkgdhuY953eAuDMfw.mft (raw, json)
Hash identifier: 9HC0LAxzsq5RU0luIb8CaLNRARcvMJQxIANmLgSvHSQ=
Subject key identifier: 90:25:59:F5:6A:0D:B1:A4:33:74:A8:E6:69:BC:ED:C3:8D:C0:BB:B0
Authority key identifier: 24:A1:3B:75:2C:A2:2D:63:24:81:D8:6E:63:DE:77:78:0B:83:31:FC
Certificate issuer: /CN=24A13B752CA22D632481D86E63DE77780B8331FC
Certificate serial: 030B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JKE7dSyiLWMkgdhuY953eAuDMfw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/JKE7dSyiLWMkgdhuY953eAuDMfw.mft
Manifest number: 030B
Signing time: Fri 31 Jan 2025 15:28:15 +0000
Manifest this update: Fri 31 Jan 2025 15:28:15 +0000
Manifest next update: Fri 31 Jan 2025 21:28:15 +0000
Files and hashes: 1: JKE7dSyiLWMkgdhuY953eAuDMfw.crl (hash: kqPmpYKabs2hYgEmTucFX6ITERN4XsByxvs/9k1fkX4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 779 (0x30b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24A13B752CA22D632481D86E63DE77780B8331FC
Validity
Not Before: Jan 31 15:28:15 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=902559F56A0DB1A43374A8E669BCEDC38DC0BBB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:1f:12:43:ec:03:dc:78:af:4d:0d:b4:97:
49:68:e6:45:43:e3:a8:03:b8:3f:60:cd:67:f4:b1:
a1:b5:d5:0a:c3:3f:1d:05:2e:24:fe:66:e7:db:b4:
31:d2:66:97:85:e8:2c:4b:fb:ba:2d:d9:f5:d9:33:
7c:59:b6:9d:26:4c:70:4c:2e:1e:0a:87:90:05:c5:
d3:bf:dc:f8:35:3f:5e:5c:bc:af:5a:46:0b:a8:e6:
51:37:c5:44:ce:2f:2c:d1:00:8a:96:4a:7a:2a:0e:
3a:fb:20:01:2b:b1:98:a9:99:7f:75:85:f3:2f:85:
7a:05:48:9c:0d:b1:bd:f4:37:eb:b5:89:b7:e8:52:
42:df:60:23:79:c2:c0:84:9f:0b:5d:70:3b:28:66:
6d:73:4f:19:41:18:d9:44:bf:ff:50:52:84:7b:3d:
5b:e1:ec:d8:1c:83:0a:43:2e:87:78:91:3e:d3:e3:
b5:05:08:e3:11:f9:7d:52:e6:af:53:3a:a1:96:31:
e5:5e:a5:0b:1f:9b:26:c0:9d:b3:6e:1e:b8:01:45:
c9:5c:56:10:e1:76:38:1d:8c:b4:c3:bd:61:ca:69:
30:0e:df:ab:43:60:ba:f3:d0:60:0f:83:c1:75:9f:
0a:5b:91:60:39:90:85:86:4c:3f:97:9a:7a:c5:45:
6e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:25:59:F5:6A:0D:B1:A4:33:74:A8:E6:69:BC:ED:C3:8D:C0:BB:B0
X509v3 Authority Key Identifier:
keyid:24:A1:3B:75:2C:A2:2D:63:24:81:D8:6E:63:DE:77:78:0B:83:31:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/JKE7dSyiLWMkgdhuY953eAuDMfw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JKE7dSyiLWMkgdhuY953eAuDMfw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/JKE7dSyiLWMkgdhuY953eAuDMfw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:a7:4f:f0:1a:e9:b5:ad:67:e1:8a:49:de:0c:4e:24:33:a8:
77:dc:99:84:ce:4f:c2:78:af:5d:66:f1:da:7c:1d:0d:e0:27:
8f:b2:1b:d7:ee:85:08:8f:4a:34:dc:25:82:bf:b2:f8:dd:ab:
a4:1e:ef:a9:df:78:a1:4a:10:5f:f1:32:36:d1:ac:20:98:ff:
e3:15:c9:53:bd:68:97:ee:71:fb:09:bc:61:dc:26:e7:94:99:
c6:31:f7:04:6f:9a:07:f0:4f:f9:0a:e9:ed:4f:8f:3b:38:7c:
b7:9f:b3:27:b0:9e:34:96:22:78:19:58:10:49:80:00:83:bf:
22:1e:38:f3:ea:51:5e:ad:0a:11:ae:80:16:af:19:53:a5:05:
a5:8c:af:b5:8a:72:19:b1:df:6f:dc:26:5b:4e:39:64:32:98:
56:ac:0a:e6:5f:45:db:06:72:ae:5e:f1:d8:0e:85:e3:96:0e:
cc:26:02:4d:ae:04:56:08:dd:50:02:83:8d:cd:8b:a1:1b:35:
df:53:00:b8:93:11:fb:88:f7:14:8b:07:2f:52:f1:cc:29:9a:
4f:4d:3c:23:dd:d4:9e:21:e7:4d:e5:d7:6c:93:47:48:f9:15:
9c:ed:a7:45:b1:89:7b:82:0c:d6:27:71:0c:fb:21:9b:6d:14:
59:bd:d7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:48:42 2025 by rpki-client