Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft
File: 89605Z7lMyYp7F4LaGZtNuKXN2s.mft (raw, json)
Hash identifier: 6s2Rau5UY9i+De9tzGKElRXKamDjbIhp7r7fzhTq96Y=
Subject key identifier: 52:79:76:65:E5:66:FA:8A:9E:8A:CF:21:00:B2:0A:2E:63:FD:F8:B1
Authority key identifier: F3:DE:B4:E5:9E:E5:33:26:29:EC:5E:0B:68:66:6D:36:E2:97:37:6B
Certificate issuer: /CN=F3DEB4E59EE5332629EC5E0B68666D36E297376B
Certificate serial: 0238
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/89605Z7lMyYp7F4LaGZtNuKXN2s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft
Manifest number: 0238
Signing time: Fri 31 Jan 2025 15:24:36 +0000
Manifest this update: Fri 31 Jan 2025 15:24:36 +0000
Manifest next update: Fri 31 Jan 2025 21:24:36 +0000
Files and hashes: 1: 89605Z7lMyYp7F4LaGZtNuKXN2s.crl (hash: RjKLsXuQGe6K9zB8w0tBOMYSgQyoTIwg66Uh7rnunaQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568 (0x238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3DEB4E59EE5332629EC5E0B68666D36E297376B
Validity
Not Before: Jan 31 15:24:36 2025 GMT
Not After : Oct 9 05:57:36 2025 GMT
Subject: CN=52797665E566FA8A9E8ACF2100B20A2E63FDF8B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:26:22:b1:13:d3:08:92:e7:1f:ab:59:2f:b3:
a1:ea:34:eb:d1:89:c7:1a:14:19:ec:00:38:d6:36:
20:7b:1c:77:cf:d1:60:76:50:d9:4e:84:9d:1c:c2:
be:ca:bf:9a:fe:a3:af:dc:26:2f:87:5a:4c:2f:23:
1a:95:b3:31:ce:5c:69:04:ba:33:d5:cf:1a:82:e0:
f2:44:9c:fc:6d:7e:a8:9c:46:1f:69:b6:3b:a0:0c:
15:9e:82:1c:71:23:fb:0c:7e:e4:95:12:bf:c0:11:
3b:56:e2:0d:f2:71:72:b0:b5:cb:4c:0c:bf:7c:42:
80:92:a8:63:cb:c0:9a:e1:62:85:35:3d:03:56:b5:
ef:74:cf:d6:e3:bc:30:be:e2:f0:57:a0:49:55:74:
0a:5c:4a:d7:1c:c8:4c:24:ed:51:a6:36:1c:0c:db:
a1:7c:9f:d0:d5:54:e7:26:70:b1:63:f6:4f:a9:ca:
70:0a:bb:d9:f8:d2:ee:f7:94:4c:c9:05:f1:03:34:
2a:4e:37:8e:ea:08:58:da:3d:2d:42:10:3c:5b:26:
f0:2f:5c:06:cc:ca:d8:7b:4b:09:f8:5f:c7:25:fd:
5f:8a:38:50:bc:b6:c3:ff:3a:76:f6:dc:c0:41:76:
b6:dc:68:54:1d:1c:46:17:ac:eb:3c:26:e7:c3:5c:
69:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:79:76:65:E5:66:FA:8A:9E:8A:CF:21:00:B2:0A:2E:63:FD:F8:B1
X509v3 Authority Key Identifier:
keyid:F3:DE:B4:E5:9E:E5:33:26:29:EC:5E:0B:68:66:6D:36:E2:97:37:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/89605Z7lMyYp7F4LaGZtNuKXN2s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:c7:c0:f7:ab:f1:cd:f4:7b:66:e8:bb:d9:b5:45:b5:ed:d7:
be:d5:7d:5f:ff:1c:77:ce:4c:42:7d:99:51:e8:55:6c:0c:4a:
13:56:3b:f1:53:29:20:19:e2:64:e2:f3:b8:50:95:27:76:23:
f5:63:4c:8c:5d:56:bd:e3:b4:bf:40:90:a4:02:8c:34:b7:1a:
ad:30:cc:8f:60:69:c5:c1:44:b3:b4:b5:4c:55:98:1b:35:8d:
bb:83:e2:ab:fb:a5:5d:c1:21:6a:5f:c5:01:21:16:90:0a:04:
55:0c:8a:93:42:e3:f6:26:56:ab:07:1f:5a:87:8e:f4:8b:57:
c4:d1:5d:b9:8c:b5:f6:d5:a3:54:02:86:f3:f7:46:dc:82:e0:
8c:74:94:ef:b2:26:09:d1:f0:bc:d2:8c:47:cc:3e:53:7e:95:
57:65:d0:ec:28:b1:01:c3:3e:81:13:f8:c6:7a:23:b7:1a:ab:
5a:96:5a:7c:92:7f:69:0c:ed:0f:b3:2f:04:fa:90:be:ae:12:
e5:b2:02:d3:5f:0e:30:ff:7b:fa:5f:72:15:e9:c8:a1:0d:c4:
e3:38:e2:28:b4:7d:37:e1:e8:58:ff:9b:fe:5b:29:d3:71:93:
4e:07:10:f6:a3:ab:6e:e9:69:58:a2:c1:3e:c5:3c:8e:41:8d:
eb:80:9e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:19:40 2025 by rpki-client