Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/333/94vx0ILraGpYQf5xsAL3zXu4b3U.mft
File: 94vx0ILraGpYQf5xsAL3zXu4b3U.mft (raw, json)
Hash identifier: LAfhGOuIOOVd9cu5xJmKX9SnfXeqH4nzM87eSRevvNA=
Subject key identifier: 3B:98:71:91:E7:BF:5E:43:2C:38:2D:9B:7C:EF:18:2E:3F:46:87:AF
Authority key identifier: F7:8B:F1:D0:82:EB:68:6A:58:41:FE:71:B0:02:F7:CD:7B:B8:6F:75
Certificate issuer: /CN=F78BF1D082EB686A5841FE71B002F7CD7BB86F75
Certificate serial: 37AC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/94vx0ILraGpYQf5xsAL3zXu4b3U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/333/94vx0ILraGpYQf5xsAL3zXu4b3U.mft
Manifest number: 37AC
Signing time: Fri 31 Jan 2025 15:25:52 +0000
Manifest this update: Fri 31 Jan 2025 15:25:52 +0000
Manifest next update: Fri 31 Jan 2025 21:25:52 +0000
Files and hashes: 1: 94vx0ILraGpYQf5xsAL3zXu4b3U.crl (hash: SbvJw0+SqxKnJ08EVRuyzlFi0GEvrpU4nSoUhyjkzac=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14252 (0x37ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F78BF1D082EB686A5841FE71B002F7CD7BB86F75
Validity
Not Before: Jan 31 15:25:52 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3B987191E7BF5E432C382D9B7CEF182E3F4687AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d6:97:1c:6f:47:43:47:d0:0f:a8:77:a2:c1:
6c:a5:3c:fd:e2:df:d5:ae:46:46:04:a7:ff:5e:a3:
2f:78:61:66:e6:fb:28:75:ab:70:0f:a9:32:b8:e1:
bc:d8:7f:17:32:a0:19:97:f8:7a:f6:01:c1:3e:31:
4e:55:ec:d7:a3:00:b1:bd:cf:1a:3b:6c:9d:9c:36:
28:d3:34:e6:ae:f5:de:46:44:a0:f2:51:3e:c8:cc:
db:89:a0:a0:ab:cd:00:ff:96:24:e9:41:d1:08:72:
9a:6d:d3:9f:96:ee:7d:0c:ad:08:37:5d:10:df:cc:
36:77:46:4f:13:70:cb:04:ee:97:26:05:4c:17:80:
1d:1f:f0:53:9a:16:0d:a0:07:30:a3:a6:84:2f:51:
e2:ff:79:3e:9f:44:46:4c:1a:53:d2:0e:d8:cf:65:
fc:a4:64:f6:be:d2:b3:5c:23:18:66:78:98:e2:12:
78:d8:89:c4:1c:08:bb:6f:81:e4:71:c3:92:84:fa:
0d:97:1b:56:32:67:ec:bc:8d:12:fc:4f:2a:61:b5:
e4:fa:2f:0e:14:83:82:ae:fa:fb:9f:7a:b7:32:e8:
6a:26:56:54:27:d2:31:81:3f:e3:de:ef:49:5a:37:
dc:b0:4a:06:8b:cb:93:a4:ce:97:2e:45:3a:d0:6c:
c7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:98:71:91:E7:BF:5E:43:2C:38:2D:9B:7C:EF:18:2E:3F:46:87:AF
X509v3 Authority Key Identifier:
keyid:F7:8B:F1:D0:82:EB:68:6A:58:41:FE:71:B0:02:F7:CD:7B:B8:6F:75
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/333/94vx0ILraGpYQf5xsAL3zXu4b3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/94vx0ILraGpYQf5xsAL3zXu4b3U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/333/94vx0ILraGpYQf5xsAL3zXu4b3U.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e0:0f:db:fa:41:c9:08:69:e1:5d:16:dc:9f:59:22:e4:74:
ac:50:c0:11:40:da:97:47:bc:1d:d3:03:f3:1d:6e:fe:e6:fe:
15:8f:16:6d:3b:62:99:de:bc:c9:4e:cd:4d:29:fe:10:66:11:
7f:85:3b:c4:d0:b8:ef:48:2f:82:ee:40:86:3f:e1:8a:71:63:
cc:93:7d:92:b6:a9:64:c2:f5:b7:8a:3d:3b:38:eb:c5:1b:0d:
28:63:12:32:da:1b:31:ec:77:09:e1:6b:69:49:08:96:a8:61:
a0:c3:6d:aa:9e:6f:ec:74:63:e2:e0:b9:cb:83:12:1e:53:60:
85:af:4b:ae:d7:f9:9e:4e:3b:70:5e:81:38:c6:73:d0:ce:e6:
c8:dd:fd:85:9c:42:04:36:17:7d:04:7b:16:1b:58:39:7f:4b:
5c:cc:6e:81:ae:3e:61:34:2e:01:29:91:fd:65:7c:ed:25:58:
5e:0d:00:71:8d:e9:a0:40:66:93:ed:22:50:81:63:10:ad:0a:
81:6a:e7:8e:a6:6c:85:16:8e:3d:91:4a:f0:21:6c:8f:ba:ce:
28:4e:66:76:e8:0c:72:a0:59:cc:5c:de:e2:10:ef:9b:c7:57:
07:52:62:d0:91:11:72:e2:b4:81:fe:1c:71:57:1e:b6:9c:a4:
85:ab:81:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:27:48 2025 by rpki-client