Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3323/FHL6rKoK1qRgcZi5A594VETZ_WE.mft
File: FHL6rKoK1qRgcZi5A594VETZ_WE.mft (raw, json)
Hash identifier: YLYkqCaGx/0pKbI3+SBvO1sXbEx5Ghc2cGp8hRQr2DQ=
Subject key identifier: C9:4D:4D:8C:A9:58:E4:B9:90:E9:7A:0B:CF:0C:E4:7B:3B:BF:A0:67
Authority key identifier: 14:72:FA:AC:AA:0A:D6:A4:60:71:98:B9:03:9F:78:54:44:D9:FD:61
Certificate issuer: /CN=1472FAACAA0AD6A4607198B9039F785444D9FD61
Certificate serial: 0214
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FHL6rKoK1qRgcZi5A594VETZ_WE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/FHL6rKoK1qRgcZi5A594VETZ_WE.mft
Manifest number: 0214
Signing time: Fri 31 Jan 2025 15:26:49 +0000
Manifest this update: Fri 31 Jan 2025 15:26:49 +0000
Manifest next update: Fri 31 Jan 2025 21:26:49 +0000
Files and hashes: 1: FHL6rKoK1qRgcZi5A594VETZ_WE.crl (hash: PHE5xugfGXZSWeQJV7jlMzMZC1bPks86UwvhKyyQ1sM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 532 (0x214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1472FAACAA0AD6A4607198B9039F785444D9FD61
Validity
Not Before: Jan 31 15:26:49 2025 GMT
Not After : Oct 16 11:48:52 2025 GMT
Subject: CN=C94D4D8CA958E4B990E97A0BCF0CE47B3BBFA067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:36:a1:c8:83:f6:a3:0b:72:71:9c:63:5c:08:
c3:f1:eb:d9:be:56:84:cc:ac:90:be:c9:30:bf:e0:
3a:e4:73:d7:ab:7f:8b:e2:aa:05:d0:ad:4f:6d:34:
0f:9a:6b:81:38:df:04:b8:a8:15:fa:cf:13:2a:09:
d6:56:fe:e5:81:7b:4f:81:41:48:77:05:c9:82:51:
e2:d7:89:ec:67:1d:f1:05:e5:3a:f7:0b:13:87:bc:
9a:1c:a8:08:91:1d:4a:63:7c:6d:23:21:73:68:3d:
72:ea:54:b7:5a:2f:d3:b5:14:6f:db:67:d8:e1:43:
9f:3e:51:be:be:fe:08:a9:4f:49:2f:ff:c4:f5:91:
3f:b4:fa:ac:69:db:0c:7b:bb:ce:48:a8:bc:b3:58:
13:32:11:4b:61:91:be:75:8c:cc:77:0e:59:f1:e8:
d6:9e:ac:45:a5:c5:7a:02:1e:3c:bd:b6:45:79:ca:
f7:b5:f2:11:94:6c:2e:fb:5e:b9:94:8d:42:c2:65:
c1:a6:6b:63:12:07:4c:b5:0c:67:b5:01:3c:5b:2f:
7b:1a:cd:e4:3a:80:76:ce:29:37:8b:60:6a:11:4f:
76:23:22:44:fb:2e:65:ee:57:f6:bb:9d:23:f2:83:
eb:91:45:fd:0e:0b:1c:c6:e0:f3:e8:34:f5:98:b4:
df:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4D:4D:8C:A9:58:E4:B9:90:E9:7A:0B:CF:0C:E4:7B:3B:BF:A0:67
X509v3 Authority Key Identifier:
keyid:14:72:FA:AC:AA:0A:D6:A4:60:71:98:B9:03:9F:78:54:44:D9:FD:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/FHL6rKoK1qRgcZi5A594VETZ_WE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FHL6rKoK1qRgcZi5A594VETZ_WE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/FHL6rKoK1qRgcZi5A594VETZ_WE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:5a:d5:81:51:1c:80:fb:24:e9:b8:10:8e:36:ff:03:0d:00:
24:8b:12:66:d2:2e:5c:9b:62:87:3e:13:9e:3d:75:f5:79:7b:
a2:8f:75:5a:6b:f4:59:55:77:fb:a2:cb:07:c5:09:01:bd:03:
a7:48:52:38:1b:95:ad:96:85:71:6c:d2:4d:f1:15:73:97:54:
32:b5:1a:06:36:6f:92:83:90:91:17:29:b3:9c:84:02:e7:f9:
62:c5:15:4a:4f:d1:7f:42:29:b6:ac:2f:f6:36:85:77:62:27:
da:95:48:5f:b0:8b:c1:21:1c:64:56:d9:a2:5f:99:45:a0:5e:
ff:bd:1b:13:f7:da:23:10:ba:9e:10:93:fa:eb:4d:42:d7:49:
ee:5f:44:4c:e7:1c:b9:98:0f:d2:57:52:16:64:c3:ce:aa:51:
0b:51:84:6c:dc:f8:42:d4:5b:e3:ea:21:c5:33:d0:55:c7:da:
8a:fb:6b:2c:97:3e:48:9b:9c:4a:7a:a8:93:f9:e5:52:ee:27:
bb:97:11:fb:3d:f6:37:f3:9a:16:a0:8d:f1:6f:e8:e8:ce:4f:
20:b1:2b:04:18:f3:fd:b8:ee:bc:cf:4f:e7:78:d8:fa:e9:ff:
17:cf:64:c4:42:87:50:09:1c:9b:27:d9:04:2d:6c:8f:ff:5f:
8e:37:cd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:41:17 2025 by rpki-client