Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3324/5YkdtdPXtHQRybPkcdIJS_vpE2Y.mft
File: 5YkdtdPXtHQRybPkcdIJS_vpE2Y.mft (raw, json)
Hash identifier: K9JrUNMGpnjeU0zqWUn7xTptc2UbPnL3xx62lr0FHdI=
Subject key identifier: 37:4E:6D:A2:15:F1:94:64:19:17:8E:FB:EB:B0:CF:09:CC:B6:56:47
Authority key identifier: E5:89:1D:B5:D3:D7:B4:74:11:C9:B3:E4:71:D2:09:4B:FB:E9:13:66
Certificate issuer: /CN=E5891DB5D3D7B47411C9B3E471D2094BFBE91366
Certificate serial: 020C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5YkdtdPXtHQRybPkcdIJS_vpE2Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/5YkdtdPXtHQRybPkcdIJS_vpE2Y.mft
Manifest number: 020C
Signing time: Fri 31 Jan 2025 15:27:20 +0000
Manifest this update: Fri 31 Jan 2025 15:27:20 +0000
Manifest next update: Fri 31 Jan 2025 21:27:20 +0000
Files and hashes: 1: 5YkdtdPXtHQRybPkcdIJS_vpE2Y.crl (hash: 327iyY/oH+Coei8cqlQr1OorPnZpYsWvL3fQkTFxaxM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524 (0x20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5891DB5D3D7B47411C9B3E471D2094BFBE91366
Validity
Not Before: Jan 31 15:27:20 2025 GMT
Not After : Oct 18 02:16:55 2025 GMT
Subject: CN=374E6DA215F1946419178EFBEBB0CF09CCB65647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:ca:54:e7:4d:73:5a:ac:22:15:83:51:f6:
43:e8:dd:9a:c7:9f:fe:1f:a4:b0:fd:60:db:38:de:
23:ce:ed:f3:d0:2f:e1:da:2b:96:de:79:fe:8b:63:
a5:9f:a9:6b:d4:36:96:c6:4e:d9:9d:a3:cd:ee:35:
eb:36:0b:01:1c:fc:82:e0:39:ce:01:65:aa:66:28:
31:e6:19:f1:4e:5a:23:80:48:79:2d:7e:32:34:af:
6c:5e:cf:3d:63:eb:3d:4c:59:35:53:ca:1c:10:53:
4b:e7:64:e7:6f:21:ee:87:8b:4d:63:7f:3d:15:3d:
78:23:4a:9b:70:2d:8b:48:3d:77:20:d0:d9:44:25:
0e:a3:db:07:c4:29:27:fc:c0:c4:4c:83:86:f7:8d:
10:95:a8:55:0e:27:0f:88:15:69:fe:93:d1:da:67:
ec:55:1e:07:be:f7:93:03:9e:58:76:ae:5b:12:d0:
5d:08:60:d6:5b:0e:00:e1:6d:32:1d:ba:80:dc:47:
13:ca:5a:8f:63:f5:35:eb:6e:74:82:ed:87:76:93:
a0:e4:5d:65:d9:28:11:2f:e3:45:f1:5c:ef:8c:40:
1b:49:69:6f:d4:6b:f9:dd:2a:b9:7f:9a:75:f8:a4:
30:a7:44:03:21:61:7e:00:40:70:b4:36:0f:f2:3b:
da:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4E:6D:A2:15:F1:94:64:19:17:8E:FB:EB:B0:CF:09:CC:B6:56:47
X509v3 Authority Key Identifier:
keyid:E5:89:1D:B5:D3:D7:B4:74:11:C9:B3:E4:71:D2:09:4B:FB:E9:13:66
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/5YkdtdPXtHQRybPkcdIJS_vpE2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5YkdtdPXtHQRybPkcdIJS_vpE2Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/5YkdtdPXtHQRybPkcdIJS_vpE2Y.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c3:6f:4f:a4:77:24:9d:e7:ad:a6:5f:28:85:e1:66:b7:d4:
0f:83:d0:e6:17:a3:e9:14:4d:0d:85:1e:30:9d:87:53:c9:3e:
27:ca:10:8c:5d:1e:c2:78:d5:68:c7:2d:8a:f9:39:dc:50:73:
56:39:8c:b6:ab:1e:13:97:44:c5:2c:59:c2:8b:6b:09:0f:27:
65:39:90:de:e2:07:92:f6:1d:a8:ea:8c:76:6d:82:9c:5f:92:
da:fa:24:54:3f:85:13:d0:0c:1a:09:56:d4:7b:45:f8:d7:d7:
a8:cf:ad:b5:78:ca:f3:99:f5:ac:74:ff:d8:cc:fe:99:c1:b4:
8c:f1:b0:34:76:17:ae:c6:f9:61:50:36:9b:88:f5:bd:10:f1:
c4:c1:2d:04:da:db:e3:19:9d:ff:96:65:17:0e:41:74:18:a5:
04:d8:38:38:20:7c:3d:6f:4b:18:7c:22:61:3b:2c:2d:52:9a:
a9:1b:65:8c:e0:0d:b2:3c:6c:f8:68:26:b2:04:70:73:19:e2:
0e:e8:a1:e4:61:d7:cf:fa:8c:be:4a:ef:23:7a:2e:7f:0a:41:
cf:9f:60:11:6c:0e:4a:60:ea:9c:4d:12:17:ce:41:a8:cb:f6:
5b:0a:24:98:e8:c1:59:73:54:f0:47:c8:69:d5:96:f8:1d:7e:
dc:d5:e5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:53:28 2025 by rpki-client