Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.mft
File: OCdChXYoqbKyIFmuiEdvIwYL6tA.mft (raw, json)
Hash identifier: gnDlMzeKKBwuzRwY9DzjNgkPfzrq19ubNbVl553UPjI=
Subject key identifier: 28:21:5B:26:84:B2:51:CB:C1:6E:81:F4:5A:46:65:8D:87:98:73:05
Authority key identifier: 38:27:42:85:76:28:A9:B2:B2:20:59:AE:88:47:6F:23:06:0B:EA:D0
Certificate issuer: /CN=382742857628A9B2B22059AE88476F23060BEAD0
Certificate serial: 0180
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OCdChXYoqbKyIFmuiEdvIwYL6tA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.mft
Manifest number: 0180
Signing time: Fri 31 Jan 2025 15:28:10 +0000
Manifest this update: Fri 31 Jan 2025 15:28:10 +0000
Manifest next update: Fri 31 Jan 2025 21:28:10 +0000
Files and hashes: 1: OCdChXYoqbKyIFmuiEdvIwYL6tA.crl (hash: FD3RS7pk+PmnsgVP1Cr1jbEoLA3YqPXABJbpVujfe1s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382742857628A9B2B22059AE88476F23060BEAD0
Validity
Not Before: Jan 31 15:28:10 2025 GMT
Not After : Nov 15 07:00:21 2025 GMT
Subject: CN=28215B2684B251CBC16E81F45A46658D87987305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:26:72:d5:94:16:40:a9:56:11:27:83:ad:c9:
ac:73:2e:26:c8:68:e4:37:1c:e2:b9:5d:8a:dc:5d:
52:91:42:3b:2e:de:b3:6e:fb:38:6c:62:43:f2:65:
fe:2d:44:45:7d:02:5c:fb:a1:47:11:13:de:41:4b:
e9:61:23:81:c1:3c:01:8c:a8:0c:1b:2b:47:6e:19:
76:95:78:de:65:db:39:ce:e0:22:0e:f5:e1:af:50:
40:ed:f6:61:24:bf:62:9f:a0:eb:d9:b4:02:f1:ea:
85:d3:3d:5e:85:3b:d0:19:a7:a5:e5:cc:a8:12:69:
a0:7b:a1:8b:61:e3:bc:89:4a:5e:8a:2b:eb:9c:90:
c5:6c:a9:6b:a7:08:2b:86:ba:2e:62:d7:77:ef:ab:
37:a1:fa:a1:c6:27:4e:8f:b0:83:bb:7a:98:51:bd:
d9:c4:aa:06:f2:99:ec:0a:ac:d2:44:d7:21:1d:80:
f3:d8:6a:3f:70:e1:2f:01:12:2e:8c:85:b2:f7:0e:
f7:d9:ae:c6:09:03:cd:cd:05:0b:24:bb:11:96:78:
38:bb:bd:68:67:78:5d:33:a8:1e:f6:97:cc:61:ec:
a5:11:dc:9e:e2:70:3c:31:72:f5:59:be:13:fe:f5:
5c:38:80:94:e7:6d:06:32:ca:d6:37:3a:eb:b5:19:
b9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:21:5B:26:84:B2:51:CB:C1:6E:81:F4:5A:46:65:8D:87:98:73:05
X509v3 Authority Key Identifier:
keyid:38:27:42:85:76:28:A9:B2:B2:20:59:AE:88:47:6F:23:06:0B:EA:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OCdChXYoqbKyIFmuiEdvIwYL6tA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:97:7b:f9:37:7f:73:e2:27:ec:cd:6c:5c:c3:02:0a:f8:e4:
2e:58:b6:b9:81:40:ae:53:79:17:bd:0b:6d:18:f3:4f:36:93:
5b:c7:d7:40:e0:84:4d:d0:29:94:fc:12:ec:10:9c:7d:d9:25:
6e:bf:05:0f:46:63:2a:88:b4:00:8b:57:8c:6e:41:ef:a6:a8:
63:4d:fa:fb:65:e4:e8:5c:87:d0:16:7d:37:6f:15:60:bb:d0:
dc:59:7b:1b:e5:0f:8f:8b:b4:20:d2:6e:4e:fe:8b:46:99:34:
e5:2b:e8:0d:6f:72:7b:ed:0f:62:25:bf:70:11:53:04:b1:81:
eb:0b:b0:ff:19:94:ad:4a:e5:77:68:61:2c:aa:77:a9:07:97:
af:76:0f:48:01:21:dd:6f:95:1e:21:4b:af:61:9d:5f:b7:5b:
0d:cb:ad:ed:8f:17:3a:0d:e8:05:fa:96:17:fc:a1:76:07:dc:
7a:0b:83:70:d4:9b:86:42:ad:9d:ff:22:d3:11:36:6f:71:ad:
8d:73:f5:32:c5:6f:4d:dc:2b:fe:31:3a:9e:94:cd:2f:0b:81:
73:6e:bc:0e:ed:06:c7:e6:89:f5:b5:f9:72:f1:f7:ae:f0:6f:
3c:94:0b:a0:49:b3:51:38:73:9c:fb:81:a8:48:07:b0:de:0a:
15:09:dc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:59:48 2025 by rpki-client