Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3317/zLJsi7E6Na35sNYKu5OF0hBqWSI.mft
File: zLJsi7E6Na35sNYKu5OF0hBqWSI.mft (raw, json)
Hash identifier: wg5RgCOLtxXlyHKSuOi4Y9zMhb4V7s2wgJNTUO4adek=
Subject key identifier: 78:A0:9E:B1:40:D0:5D:3D:DF:BC:E2:F7:DE:E8:C3:80:18:72:F0:0E
Authority key identifier: CC:B2:6C:8B:B1:3A:35:AD:F9:B0:D6:0A:BB:93:85:D2:10:6A:59:22
Certificate issuer: /CN=CCB26C8BB13A35ADF9B0D60ABB9385D2106A5922
Certificate serial: 02DC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zLJsi7E6Na35sNYKu5OF0hBqWSI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/zLJsi7E6Na35sNYKu5OF0hBqWSI.mft
Manifest number: 02DC
Signing time: Fri 31 Jan 2025 15:25:43 +0000
Manifest this update: Fri 31 Jan 2025 15:25:43 +0000
Manifest next update: Fri 31 Jan 2025 21:25:43 +0000
Files and hashes: 1: zLJsi7E6Na35sNYKu5OF0hBqWSI.crl (hash: 6mKMqBFHsut8i2NLK6SlB8e/Ep3Y/iU6of+kKkFX5oA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 732 (0x2dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB26C8BB13A35ADF9B0D60ABB9385D2106A5922
Validity
Not Before: Jan 31 15:25:43 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=78A09EB140D05D3DDFBCE2F7DEE8C3801872F00E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:11:86:a0:84:d5:2c:13:7f:50:7a:e3:3d:c5:
7c:ed:41:d0:0c:0e:b8:e0:70:16:fb:bd:d6:ee:1e:
20:9c:cb:83:aa:9e:99:3a:6f:48:63:85:9f:b2:ba:
d8:f1:97:c6:25:e2:b6:9a:6a:2d:a5:db:09:b9:47:
ca:d1:df:14:76:fc:d6:68:74:22:be:db:4a:32:fa:
a1:08:b8:a5:d1:17:b0:39:04:1c:52:8d:41:fd:1f:
d9:c9:f3:4d:60:cd:24:a9:4e:6b:1e:f1:16:bf:fc:
5c:84:27:32:4d:e6:d3:38:ae:9c:38:71:2f:64:45:
37:81:3a:76:45:c8:8b:9d:0e:f9:91:57:40:60:a7:
dd:19:39:9d:ed:c7:11:1e:1f:6b:23:57:34:ca:97:
ce:9a:b8:4f:6e:43:44:00:10:0c:a1:25:2b:1e:fa:
86:0f:1f:40:9c:77:56:ee:2a:50:97:9e:88:c6:1a:
b8:96:a2:89:ea:e2:f1:0e:30:8e:4e:9a:ed:42:f9:
67:a6:ff:d8:56:87:74:58:1c:06:c6:d2:9a:3c:67:
2b:0f:2c:0d:53:74:e5:3d:e1:f7:6d:80:17:59:c6:
19:8d:85:a4:5e:d1:e5:d4:35:f5:2e:52:66:0f:a0:
5c:e8:e5:10:76:a5:b1:65:ac:fc:b9:a2:fc:c1:02:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A0:9E:B1:40:D0:5D:3D:DF:BC:E2:F7:DE:E8:C3:80:18:72:F0:0E
X509v3 Authority Key Identifier:
keyid:CC:B2:6C:8B:B1:3A:35:AD:F9:B0:D6:0A:BB:93:85:D2:10:6A:59:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/zLJsi7E6Na35sNYKu5OF0hBqWSI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zLJsi7E6Na35sNYKu5OF0hBqWSI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/zLJsi7E6Na35sNYKu5OF0hBqWSI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:3c:09:07:b5:23:a3:9e:d7:71:7c:18:e1:09:ad:93:d2:90:
13:0b:d9:af:b4:f4:c8:47:8a:23:ca:54:93:e0:3e:2a:da:e9:
18:88:11:4c:ab:67:da:88:a0:6d:e2:1b:33:5d:d8:0b:79:ec:
26:2c:0f:66:50:8c:d4:31:81:93:da:a4:94:c1:57:6c:c5:1e:
95:fa:52:8a:06:8f:ad:2e:20:be:85:79:04:ba:dd:03:17:d7:
ac:fb:44:d5:3c:85:4b:78:39:f5:b6:d7:f7:45:a3:b0:26:53:
aa:47:04:63:9f:f0:82:c8:ae:49:4b:40:dd:3c:a3:74:9c:f4:
17:5e:3d:ce:1c:d5:06:66:aa:a4:44:95:b1:36:2d:8b:69:24:
48:0b:04:b2:83:38:92:29:66:16:5c:43:63:f0:9b:8c:eb:c9:
7a:67:68:e6:23:9f:bf:30:78:82:73:de:cf:d4:4e:84:2a:28:
b1:d6:84:56:ee:9c:39:61:a5:96:93:5a:7c:c5:29:97:c2:62:
70:07:92:2c:a5:52:ee:20:e6:07:ce:ea:f8:c9:33:19:46:ca:
f9:4c:c7:86:70:e5:46:93:d9:27:1f:79:5d:63:51:ca:9a:ac:
39:d9:c4:40:b5:14:a6:79:53:99:03:52:f6:84:84:0e:9a:5b:
85:f1:1a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:36:54 2025 by rpki-client