Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3322/KJHRbBFPOs_eoosPXIzhRucxndI.mft
File: KJHRbBFPOs_eoosPXIzhRucxndI.mft (raw, json)
Hash identifier: w8KNW0S7CHSTB5pyMPcv2/aQpn4taPvtYi4FwTWPDNg=
Subject key identifier: 12:8B:DB:25:00:09:62:16:0E:FF:52:5F:45:07:AD:10:7D:B3:F9:1B
Authority key identifier: 28:91:D1:6C:11:4F:3A:CF:DE:A2:8B:0F:5C:8C:E1:46:E7:31:9D:D2
Certificate issuer: /CN=2891D16C114F3ACFDEA28B0F5C8CE146E7319DD2
Certificate serial: 0229
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KJHRbBFPOs_eoosPXIzhRucxndI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/KJHRbBFPOs_eoosPXIzhRucxndI.mft
Manifest number: 0229
Signing time: Fri 31 Jan 2025 15:26:17 +0000
Manifest this update: Fri 31 Jan 2025 15:26:17 +0000
Manifest next update: Fri 31 Jan 2025 21:26:17 +0000
Files and hashes: 1: KJHRbBFPOs_eoosPXIzhRucxndI.crl (hash: HXlVPDDEou4gHzxoJ9Q1bUgO6V0GWKW1EHH4HhDrG1s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2891D16C114F3ACFDEA28B0F5C8CE146E7319DD2
Validity
Not Before: Jan 31 15:26:17 2025 GMT
Not After : Oct 12 07:27:43 2025 GMT
Subject: CN=128BDB25000962160EFF525F4507AD107DB3F91B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:32:54:75:d4:88:03:09:4a:b8:38:b3:ac:
8a:72:6a:ae:84:fa:a4:62:00:c6:29:9e:8d:7d:78:
ea:51:85:44:72:ac:10:c0:b3:16:be:fc:71:b7:76:
20:63:98:f5:48:d7:1f:57:8d:98:ea:88:a5:75:39:
c8:2e:df:7d:ba:6f:4e:c7:5c:fc:cf:09:e2:70:f1:
eb:07:9b:38:ac:1c:84:ca:36:f7:31:c5:de:b3:31:
d3:ff:30:3b:86:d1:4a:0d:ed:88:5d:d0:d8:8e:05:
60:0b:d6:d3:68:e0:47:90:15:67:68:4e:6e:97:cb:
aa:3a:96:8c:c4:26:af:59:cf:3c:8d:67:aa:18:be:
49:eb:7a:98:e6:21:95:03:b3:ae:6d:93:b1:90:19:
7a:4d:19:1d:2c:61:a6:93:ec:4c:15:f5:cd:b2:c2:
29:26:6c:24:61:90:49:01:90:5b:f7:70:94:58:42:
73:4f:0d:b2:3e:fe:cf:6c:0b:f5:d7:fe:1d:9f:31:
51:ff:22:f9:cb:da:ab:18:e2:bb:e8:5a:a0:64:cb:
09:99:b9:29:58:a0:7b:5c:fd:9c:c9:44:83:14:9b:
80:78:6c:16:90:08:d8:95:7d:15:63:d4:b9:13:c9:
11:7a:1a:b7:5e:53:8c:12:98:e2:61:e2:3a:c0:80:
b5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8B:DB:25:00:09:62:16:0E:FF:52:5F:45:07:AD:10:7D:B3:F9:1B
X509v3 Authority Key Identifier:
keyid:28:91:D1:6C:11:4F:3A:CF:DE:A2:8B:0F:5C:8C:E1:46:E7:31:9D:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/KJHRbBFPOs_eoosPXIzhRucxndI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KJHRbBFPOs_eoosPXIzhRucxndI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/KJHRbBFPOs_eoosPXIzhRucxndI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:72:ac:cd:c9:2c:0d:60:29:bd:8b:74:49:be:65:24:83:f9:
7e:16:7e:cf:10:15:b2:68:e1:7b:70:af:78:3a:84:c8:2f:65:
df:47:51:c9:5e:78:3b:92:ea:ba:ab:e6:c7:67:23:cf:77:6c:
a8:10:60:34:d2:11:d0:51:ac:a4:1e:ff:c6:d7:3a:dd:b7:23:
ce:59:a5:15:3a:27:7b:6e:f6:93:b0:ef:b6:67:e5:e7:6e:7e:
c5:da:b4:80:48:a4:2f:3c:0d:73:08:fd:73:cd:23:46:fd:d4:
5e:bf:b5:29:7d:bb:bc:1a:73:1f:6b:c7:84:96:df:35:70:2f:
fe:1f:d2:87:8d:f1:ba:d8:63:fd:98:75:41:96:87:e7:e9:77:
f9:e4:ab:d0:92:cd:56:57:2c:9f:fd:95:bc:3a:9a:05:e6:2a:
bd:b6:0b:eb:df:30:69:48:1d:8b:88:0d:68:d9:6e:05:82:7b:
c0:e3:42:89:23:57:36:27:af:80:3b:dc:65:35:e0:16:76:07:
a8:e0:31:5d:c4:f8:c7:e2:7b:f0:e4:f5:b5:83:bc:d3:8f:c8:
8d:82:17:e5:26:91:e3:28:23:59:aa:c5:04:3f:69:a5:f3:a9:
f7:e6:ca:28:3c:20:f0:47:a4:ae:99:56:17:25:fe:7c:cc:0a:
c3:5c:b9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:58:30 2025 by rpki-client