Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3315/5a-76cBRpj8bbV0hn0ObQV7Ys5I.mft
File: 5a-76cBRpj8bbV0hn0ObQV7Ys5I.mft (raw, json)
Hash identifier: g1qafylJIfVG7Gtl9gl51rKAW1lxTg9juO3iRrV1TGw=
Subject key identifier: B7:5D:6E:41:5F:7C:7D:DC:47:F7:AE:83:C6:D8:6A:75:20:7B:C4:97
Authority key identifier: E5:AF:BB:E9:C0:51:A6:3F:1B:6D:5D:21:9F:43:9B:41:5E:D8:B3:92
Certificate issuer: /CN=E5AFBBE9C051A63F1B6D5D219F439B415ED8B392
Certificate serial: 02FC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5a-76cBRpj8bbV0hn0ObQV7Ys5I.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3315/5a-76cBRpj8bbV0hn0ObQV7Ys5I.mft
Manifest number: 02FC
Signing time: Fri 31 Jan 2025 15:28:17 +0000
Manifest this update: Fri 31 Jan 2025 15:28:17 +0000
Manifest next update: Fri 31 Jan 2025 21:28:17 +0000
Files and hashes: 1: 5a-76cBRpj8bbV0hn0ObQV7Ys5I.crl (hash: HalFFn6NCL4Fhkg50ZR2AVwFz/KXCYNk0gjEFN//FCU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 764 (0x2fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5AFBBE9C051A63F1B6D5D219F439B415ED8B392
Validity
Not Before: Jan 31 15:28:17 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B75D6E415F7C7DDC47F7AE83C6D86A75207BC497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:53:b5:f0:1d:33:23:93:d8:34:7d:a5:7c:
1d:03:6f:33:04:8c:20:82:fb:44:b5:4a:23:58:d9:
30:75:ee:23:42:80:40:ef:0d:15:18:4f:f9:3a:9e:
05:66:a6:45:33:c0:06:e2:ca:d9:0d:43:1f:d8:37:
d7:6b:9c:b6:18:81:85:b8:a5:3a:23:5a:fe:2f:c9:
76:02:70:1e:44:54:4e:c4:22:18:88:94:a9:6d:6d:
61:7a:5e:39:cf:85:3c:6c:bb:00:5a:8d:65:f1:7e:
3d:64:ae:b3:9a:12:79:35:02:7d:89:22:f0:de:42:
aa:dc:d3:67:d9:48:ec:8c:4c:4c:f7:ea:c4:0e:a6:
39:5a:6b:1e:31:70:ba:17:c3:35:01:64:87:85:ea:
a7:79:af:59:92:4a:31:d8:07:46:bb:d9:e5:ee:94:
8d:74:68:ad:f0:c2:46:bc:c4:94:0e:e9:a1:a7:56:
ff:31:a1:52:13:e0:e9:76:62:7a:a4:da:ca:f4:2b:
17:f3:74:24:99:aa:43:1c:bb:6d:07:e4:9b:0b:c3:
d6:93:ed:95:29:9a:b9:b8:36:de:ee:87:4e:ce:62:
31:26:08:72:0b:2a:89:51:73:6d:2d:b0:d3:14:48:
d5:41:cf:63:66:73:2d:82:11:b2:40:42:26:a6:fc:
7f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5D:6E:41:5F:7C:7D:DC:47:F7:AE:83:C6:D8:6A:75:20:7B:C4:97
X509v3 Authority Key Identifier:
keyid:E5:AF:BB:E9:C0:51:A6:3F:1B:6D:5D:21:9F:43:9B:41:5E:D8:B3:92
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3315/5a-76cBRpj8bbV0hn0ObQV7Ys5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5a-76cBRpj8bbV0hn0ObQV7Ys5I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3315/5a-76cBRpj8bbV0hn0ObQV7Ys5I.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:64:55:4d:5b:05:41:e3:b4:fc:f6:91:64:7b:28:c0:6e:06:
d9:23:77:67:46:80:40:f9:b7:f9:65:70:6a:5b:3d:14:a3:4a:
ca:09:5b:c7:cc:0f:40:3b:8f:d2:1f:ce:fc:af:8b:a0:95:91:
aa:44:c7:39:e1:e9:92:fe:d9:12:42:7a:7b:7a:cd:15:2b:c3:
81:49:91:4f:8e:34:20:23:00:3d:8e:d7:40:06:e8:fc:72:c6:
d8:26:8d:26:7f:1a:04:85:9c:c7:ac:a2:43:98:dd:50:b8:16:
18:8c:18:e2:64:d1:4b:6b:c7:cc:63:29:0a:1a:8d:41:d0:d4:
70:04:65:69:2b:21:95:b9:e7:42:6e:d6:df:4e:e2:2e:10:e9:
79:69:6d:bd:e2:fb:4f:53:b9:8d:93:4f:32:e0:6e:4a:09:22:
33:3a:58:73:35:7e:02:d3:c5:2f:86:6b:ba:33:53:aa:cb:62:
f6:cd:ab:88:aa:7b:61:c1:36:c1:ed:91:85:8f:20:fb:eb:d1:
ea:a3:eb:27:32:81:42:34:69:4d:08:4b:e9:ff:ad:e9:50:de:
35:65:82:56:24:16:a4:cf:31:9d:dd:bb:b5:8f:2e:5e:d8:1d:
f2:e3:dc:94:b0:5e:61:25:04:19:6b:ed:5d:13:3a:96:49:1c:
6d:d6:28:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:45:06 2025 by rpki-client